Warning: Permanently added '[localhost]:11548' (ECDSA) to the list of known hosts. 2023/01/24 16:36:02 fuzzer started 2023/01/24 16:36:02 dialing manager at localhost:36587 syzkaller login: [ 51.371162] cgroup: Unknown subsys name 'net' [ 51.515043] cgroup: Unknown subsys name 'rlimit' 2023/01/24 16:36:18 syscalls: 2217 2023/01/24 16:36:18 code coverage: enabled 2023/01/24 16:36:18 comparison tracing: enabled 2023/01/24 16:36:18 extra coverage: enabled 2023/01/24 16:36:18 setuid sandbox: enabled 2023/01/24 16:36:18 namespace sandbox: enabled 2023/01/24 16:36:18 Android sandbox: enabled 2023/01/24 16:36:18 fault injection: enabled 2023/01/24 16:36:18 leak checking: enabled 2023/01/24 16:36:18 net packet injection: enabled 2023/01/24 16:36:18 net device setup: enabled 2023/01/24 16:36:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/01/24 16:36:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/01/24 16:36:18 USB emulation: enabled 2023/01/24 16:36:18 hci packet injection: enabled 2023/01/24 16:36:18 wifi device emulation: enabled 2023/01/24 16:36:18 802.15.4 emulation: enabled 2023/01/24 16:36:18 fetching corpus: 0, signal 0/2000 (executing program) 2023/01/24 16:36:18 fetching corpus: 50, signal 26390/29976 (executing program) 2023/01/24 16:36:18 fetching corpus: 100, signal 41083/46094 (executing program) 2023/01/24 16:36:18 fetching corpus: 150, signal 49418/55815 (executing program) 2023/01/24 16:36:18 fetching corpus: 200, signal 58508/66123 (executing program) 2023/01/24 16:36:18 fetching corpus: 250, signal 66844/75539 (executing program) 2023/01/24 16:36:19 fetching corpus: 300, signal 72230/82082 (executing program) 2023/01/24 16:36:19 fetching corpus: 350, signal 76138/87132 (executing program) 2023/01/24 16:36:19 fetching corpus: 400, signal 80165/92236 (executing program) 2023/01/24 16:36:19 fetching corpus: 450, signal 85411/98380 (executing program) 2023/01/24 16:36:19 fetching corpus: 500, signal 88927/102893 (executing program) 2023/01/24 16:36:19 fetching corpus: 550, signal 93358/108211 (executing program) 2023/01/24 16:36:19 fetching corpus: 600, signal 95494/111326 (executing program) 2023/01/24 16:36:20 fetching corpus: 650, signal 98142/114902 (executing program) 2023/01/24 16:36:20 fetching corpus: 700, signal 102725/120109 (executing program) 2023/01/24 16:36:20 fetching corpus: 750, signal 106418/124492 (executing program) 2023/01/24 16:36:20 fetching corpus: 800, signal 109244/128034 (executing program) 2023/01/24 16:36:20 fetching corpus: 850, signal 112090/131556 (executing program) 2023/01/24 16:36:20 fetching corpus: 900, signal 116379/136280 (executing program) 2023/01/24 16:36:20 fetching corpus: 950, signal 118374/138943 (executing program) 2023/01/24 16:36:20 fetching corpus: 1000, signal 120583/141825 (executing program) 2023/01/24 16:36:21 fetching corpus: 1050, signal 122595/144466 (executing program) 2023/01/24 16:36:21 fetching corpus: 1100, signal 123992/146629 (executing program) 2023/01/24 16:36:21 fetching corpus: 1150, signal 125408/148761 (executing program) 2023/01/24 16:36:21 fetching corpus: 1200, signal 126924/150973 (executing program) 2023/01/24 16:36:21 fetching corpus: 1250, signal 128143/152952 (executing program) 2023/01/24 16:36:21 fetching corpus: 1300, signal 129687/155130 (executing program) 2023/01/24 16:36:21 fetching corpus: 1350, signal 131903/157786 (executing program) 2023/01/24 16:36:21 fetching corpus: 1400, signal 133390/159811 (executing program) 2023/01/24 16:36:22 fetching corpus: 1450, signal 135070/161954 (executing program) 2023/01/24 16:36:22 fetching corpus: 1500, signal 136581/164002 (executing program) 2023/01/24 16:36:22 fetching corpus: 1550, signal 138272/166149 (executing program) 2023/01/24 16:36:22 fetching corpus: 1600, signal 139420/167851 (executing program) 2023/01/24 16:36:22 fetching corpus: 1650, signal 141078/169954 (executing program) 2023/01/24 16:36:22 fetching corpus: 1700, signal 142093/171537 (executing program) 2023/01/24 16:36:22 fetching corpus: 1750, signal 144034/173725 (executing program) 2023/01/24 16:36:23 fetching corpus: 1800, signal 145168/175388 (executing program) 2023/01/24 16:36:23 fetching corpus: 1850, signal 147380/177706 (executing program) 2023/01/24 16:36:23 fetching corpus: 1900, signal 149133/179741 (executing program) 2023/01/24 16:36:23 fetching corpus: 1950, signal 150648/181515 (executing program) 2023/01/24 16:36:23 fetching corpus: 2000, signal 152178/183325 (executing program) 2023/01/24 16:36:23 fetching corpus: 2050, signal 153232/184736 (executing program) 2023/01/24 16:36:23 fetching corpus: 2100, signal 154395/186262 (executing program) 2023/01/24 16:36:23 fetching corpus: 2150, signal 156038/188056 (executing program) 2023/01/24 16:36:24 fetching corpus: 2200, signal 157399/189631 (executing program) 2023/01/24 16:36:24 fetching corpus: 2250, signal 158684/191185 (executing program) 2023/01/24 16:36:24 fetching corpus: 2300, signal 160203/192799 (executing program) 2023/01/24 16:36:24 fetching corpus: 2350, signal 161395/194208 (executing program) 2023/01/24 16:36:24 fetching corpus: 2400, signal 162681/195638 (executing program) 2023/01/24 16:36:24 fetching corpus: 2450, signal 163623/196829 (executing program) 2023/01/24 16:36:25 fetching corpus: 2500, signal 164532/198036 (executing program) 2023/01/24 16:36:25 fetching corpus: 2550, signal 165832/199392 (executing program) 2023/01/24 16:36:25 fetching corpus: 2600, signal 167112/200786 (executing program) 2023/01/24 16:36:25 fetching corpus: 2650, signal 168509/202218 (executing program) 2023/01/24 16:36:25 fetching corpus: 2700, signal 169492/203379 (executing program) 2023/01/24 16:36:25 fetching corpus: 2750, signal 170518/204569 (executing program) 2023/01/24 16:36:25 fetching corpus: 2800, signal 171680/205783 (executing program) 2023/01/24 16:36:25 fetching corpus: 2850, signal 172721/206894 (executing program) 2023/01/24 16:36:26 fetching corpus: 2900, signal 173840/208058 (executing program) 2023/01/24 16:36:26 fetching corpus: 2950, signal 174812/209146 (executing program) 2023/01/24 16:36:26 fetching corpus: 3000, signal 175419/210035 (executing program) 2023/01/24 16:36:26 fetching corpus: 3050, signal 176698/211244 (executing program) 2023/01/24 16:36:26 fetching corpus: 3100, signal 177636/212205 (executing program) 2023/01/24 16:36:26 fetching corpus: 3150, signal 178744/213321 (executing program) 2023/01/24 16:36:26 fetching corpus: 3200, signal 179275/214124 (executing program) 2023/01/24 16:36:27 fetching corpus: 3250, signal 180141/215105 (executing program) 2023/01/24 16:36:27 fetching corpus: 3300, signal 180719/215895 (executing program) 2023/01/24 16:36:27 fetching corpus: 3350, signal 181557/216796 (executing program) 2023/01/24 16:36:27 fetching corpus: 3400, signal 182358/217662 (executing program) 2023/01/24 16:36:27 fetching corpus: 3450, signal 183021/218474 (executing program) 2023/01/24 16:36:27 fetching corpus: 3500, signal 183773/219250 (executing program) 2023/01/24 16:36:27 fetching corpus: 3550, signal 184721/220101 (executing program) 2023/01/24 16:36:28 fetching corpus: 3600, signal 185561/220948 (executing program) 2023/01/24 16:36:28 fetching corpus: 3650, signal 186220/221663 (executing program) 2023/01/24 16:36:28 fetching corpus: 3700, signal 186793/222368 (executing program) 2023/01/24 16:36:28 fetching corpus: 3750, signal 187747/223138 (executing program) 2023/01/24 16:36:28 fetching corpus: 3800, signal 188717/223947 (executing program) 2023/01/24 16:36:28 fetching corpus: 3850, signal 189656/224743 (executing program) 2023/01/24 16:36:28 fetching corpus: 3900, signal 190285/225420 (executing program) 2023/01/24 16:36:29 fetching corpus: 3950, signal 191181/226196 (executing program) 2023/01/24 16:36:29 fetching corpus: 4000, signal 191972/226880 (executing program) 2023/01/24 16:36:29 fetching corpus: 4050, signal 192718/227557 (executing program) 2023/01/24 16:36:29 fetching corpus: 4100, signal 193476/228250 (executing program) 2023/01/24 16:36:29 fetching corpus: 4150, signal 194419/228990 (executing program) 2023/01/24 16:36:29 fetching corpus: 4200, signal 194934/229538 (executing program) 2023/01/24 16:36:29 fetching corpus: 4250, signal 195422/230098 (executing program) 2023/01/24 16:36:30 fetching corpus: 4300, signal 195929/230643 (executing program) 2023/01/24 16:36:30 fetching corpus: 4350, signal 196873/231308 (executing program) 2023/01/24 16:36:30 fetching corpus: 4400, signal 197446/231831 (executing program) 2023/01/24 16:36:30 fetching corpus: 4450, signal 198108/232368 (executing program) 2023/01/24 16:36:30 fetching corpus: 4500, signal 198796/232894 (executing program) 2023/01/24 16:36:30 fetching corpus: 4550, signal 199269/233405 (executing program) 2023/01/24 16:36:30 fetching corpus: 4600, signal 199833/233922 (executing program) 2023/01/24 16:36:30 fetching corpus: 4650, signal 200378/234391 (executing program) 2023/01/24 16:36:31 fetching corpus: 4700, signal 200927/234861 (executing program) 2023/01/24 16:36:31 fetching corpus: 4750, signal 201585/235354 (executing program) 2023/01/24 16:36:31 fetching corpus: 4800, signal 202174/235830 (executing program) 2023/01/24 16:36:31 fetching corpus: 4850, signal 202842/236330 (executing program) 2023/01/24 16:36:31 fetching corpus: 4900, signal 203550/236820 (executing program) 2023/01/24 16:36:31 fetching corpus: 4950, signal 204249/237291 (executing program) 2023/01/24 16:36:31 fetching corpus: 5000, signal 204869/237722 (executing program) 2023/01/24 16:36:32 fetching corpus: 5050, signal 205239/238124 (executing program) 2023/01/24 16:36:32 fetching corpus: 5100, signal 205686/238495 (executing program) 2023/01/24 16:36:32 fetching corpus: 5150, signal 206041/238901 (executing program) 2023/01/24 16:36:32 fetching corpus: 5200, signal 206690/239322 (executing program) 2023/01/24 16:36:32 fetching corpus: 5250, signal 207153/239704 (executing program) 2023/01/24 16:36:32 fetching corpus: 5300, signal 207515/240072 (executing program) 2023/01/24 16:36:32 fetching corpus: 5350, signal 208273/240450 (executing program) 2023/01/24 16:36:33 fetching corpus: 5400, signal 208760/240793 (executing program) 2023/01/24 16:36:33 fetching corpus: 5450, signal 209180/241116 (executing program) 2023/01/24 16:36:33 fetching corpus: 5500, signal 209702/241490 (executing program) 2023/01/24 16:36:33 fetching corpus: 5550, signal 210395/241860 (executing program) 2023/01/24 16:36:33 fetching corpus: 5600, signal 210851/242190 (executing program) 2023/01/24 16:36:33 fetching corpus: 5650, signal 211371/242495 (executing program) 2023/01/24 16:36:33 fetching corpus: 5700, signal 212102/242820 (executing program) 2023/01/24 16:36:34 fetching corpus: 5750, signal 212654/243114 (executing program) 2023/01/24 16:36:34 fetching corpus: 5800, signal 212969/243389 (executing program) 2023/01/24 16:36:34 fetching corpus: 5850, signal 213426/243685 (executing program) 2023/01/24 16:36:34 fetching corpus: 5900, signal 214021/243969 (executing program) 2023/01/24 16:36:34 fetching corpus: 5950, signal 214474/244223 (executing program) 2023/01/24 16:36:34 fetching corpus: 6000, signal 215015/244494 (executing program) 2023/01/24 16:36:34 fetching corpus: 6050, signal 215428/244750 (executing program) 2023/01/24 16:36:35 fetching corpus: 6100, signal 216067/244837 (executing program) 2023/01/24 16:36:35 fetching corpus: 6150, signal 216877/244837 (executing program) 2023/01/24 16:36:35 fetching corpus: 6200, signal 217325/244837 (executing program) 2023/01/24 16:36:35 fetching corpus: 6250, signal 218008/244837 (executing program) 2023/01/24 16:36:35 fetching corpus: 6300, signal 218515/244837 (executing program) 2023/01/24 16:36:35 fetching corpus: 6350, signal 219115/244837 (executing program) 2023/01/24 16:36:35 fetching corpus: 6400, signal 219706/244837 (executing program) 2023/01/24 16:36:36 fetching corpus: 6450, signal 220130/244837 (executing program) 2023/01/24 16:36:36 fetching corpus: 6500, signal 220760/244837 (executing program) 2023/01/24 16:36:36 fetching corpus: 6550, signal 221299/244837 (executing program) 2023/01/24 16:36:36 fetching corpus: 6600, signal 221774/244837 (executing program) 2023/01/24 16:36:36 fetching corpus: 6650, signal 222265/244837 (executing program) 2023/01/24 16:36:36 fetching corpus: 6700, signal 222656/244837 (executing program) 2023/01/24 16:36:36 fetching corpus: 6750, signal 223092/244837 (executing program) 2023/01/24 16:36:36 fetching corpus: 6800, signal 223566/244837 (executing program) 2023/01/24 16:36:37 fetching corpus: 6850, signal 223879/244837 (executing program) 2023/01/24 16:36:37 fetching corpus: 6900, signal 224365/244837 (executing program) 2023/01/24 16:36:37 fetching corpus: 6950, signal 224866/244837 (executing program) 2023/01/24 16:36:37 fetching corpus: 7000, signal 225249/244837 (executing program) 2023/01/24 16:36:37 fetching corpus: 7050, signal 225653/244837 (executing program) 2023/01/24 16:36:37 fetching corpus: 7100, signal 226010/244837 (executing program) 2023/01/24 16:36:37 fetching corpus: 7150, signal 226495/244837 (executing program) 2023/01/24 16:36:38 fetching corpus: 7200, signal 226714/244837 (executing program) 2023/01/24 16:36:38 fetching corpus: 7250, signal 227095/244837 (executing program) 2023/01/24 16:36:38 fetching corpus: 7300, signal 227544/244837 (executing program) 2023/01/24 16:36:38 fetching corpus: 7350, signal 227840/244837 (executing program) 2023/01/24 16:36:38 fetching corpus: 7400, signal 228194/244837 (executing program) 2023/01/24 16:36:38 fetching corpus: 7450, signal 228585/244837 (executing program) 2023/01/24 16:36:38 fetching corpus: 7500, signal 229281/244837 (executing program) 2023/01/24 16:36:38 fetching corpus: 7550, signal 229742/244837 (executing program) 2023/01/24 16:36:39 fetching corpus: 7600, signal 230024/244837 (executing program) 2023/01/24 16:36:39 fetching corpus: 7650, signal 230492/244837 (executing program) 2023/01/24 16:36:39 fetching corpus: 7700, signal 230871/244837 (executing program) 2023/01/24 16:36:39 fetching corpus: 7750, signal 231306/244837 (executing program) 2023/01/24 16:36:39 fetching corpus: 7800, signal 231572/244837 (executing program) 2023/01/24 16:36:39 fetching corpus: 7850, signal 231803/244837 (executing program) 2023/01/24 16:36:39 fetching corpus: 7900, signal 232133/244837 (executing program) 2023/01/24 16:36:40 fetching corpus: 7950, signal 232743/244837 (executing program) 2023/01/24 16:36:40 fetching corpus: 8000, signal 233276/244837 (executing program) 2023/01/24 16:36:40 fetching corpus: 8050, signal 233579/244837 (executing program) 2023/01/24 16:36:40 fetching corpus: 8100, signal 233915/244837 (executing program) 2023/01/24 16:36:40 fetching corpus: 8150, signal 234425/244837 (executing program) 2023/01/24 16:36:40 fetching corpus: 8200, signal 235093/244837 (executing program) 2023/01/24 16:36:40 fetching corpus: 8250, signal 235421/244837 (executing program) 2023/01/24 16:36:40 fetching corpus: 8300, signal 235902/244837 (executing program) 2023/01/24 16:36:41 fetching corpus: 8350, signal 236416/244837 (executing program) 2023/01/24 16:36:41 fetching corpus: 8400, signal 236750/244837 (executing program) 2023/01/24 16:36:41 fetching corpus: 8450, signal 236952/244837 (executing program) 2023/01/24 16:36:41 fetching corpus: 8500, signal 237427/244837 (executing program) 2023/01/24 16:36:41 fetching corpus: 8550, signal 237847/244837 (executing program) 2023/01/24 16:36:41 fetching corpus: 8600, signal 238157/244837 (executing program) 2023/01/24 16:36:41 fetching corpus: 8650, signal 238633/244837 (executing program) 2023/01/24 16:36:41 fetching corpus: 8700, signal 239107/244837 (executing program) 2023/01/24 16:36:42 fetching corpus: 8750, signal 239539/244837 (executing program) 2023/01/24 16:36:42 fetching corpus: 8800, signal 240118/244837 (executing program) 2023/01/24 16:36:42 fetching corpus: 8850, signal 240515/244837 (executing program) 2023/01/24 16:36:42 fetching corpus: 8900, signal 241000/244837 (executing program) 2023/01/24 16:36:42 fetching corpus: 8950, signal 241248/244837 (executing program) 2023/01/24 16:36:42 fetching corpus: 9000, signal 241605/244837 (executing program) 2023/01/24 16:36:42 fetching corpus: 9005, signal 241640/244837 (executing program) 2023/01/24 16:36:42 fetching corpus: 9005, signal 241640/244837 (executing program) 2023/01/24 16:36:46 starting 8 fuzzer processes 16:36:46 executing program 0: r0 = perf_event_open(&(0x7f00000031c0)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = gettid() rt_tgsigqueueinfo(0x0, r2, 0x0, &(0x7f0000000340)) perf_event_open(&(0x7f00000030c0)={0x3, 0x80, 0x81, 0x4, 0x0, 0x2, 0x0, 0x8, 0x1804b, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x2, @perf_bp={&(0x7f0000003000), 0x7}, 0x10200, 0xcf, 0x0, 0x2, 0xd3c0, 0x8e4, 0x3ff, 0x0, 0x8, 0x0, 0x1f}, r2, 0x3, r0, 0x0) r3 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f00000001c0)='./file0\x00') rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000340)) renameat(r3, &(0x7f0000000140)='./file0/file0\x00', r3, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 16:36:46 executing program 1: syz_io_uring_setup(0x296b, &(0x7f00000001c0)={0x0, 0x258d6, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 16:36:46 executing program 2: syz_mount_image$msdos(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='nodots,fowner=', @ANYRESDEC, @ANYBLOB="2c6f626a5f747970653d2c6f626a5f726f6c653d27cb2e5b643d000000000000ff03000000000000000010986f802985c04a24547fd8b41e42785ecbaaecb73bd55bcad31274dd3af2ac7a6652246e11fb865c096134f05fa120b664c7", @ANYRESDEC=0xee00, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(r1, &(0x7f0000000040)='./file1\x00', 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r2}}, './file0\x00'}) 16:36:46 executing program 3: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x9, 0x7, 0xaa, 0x5, 0x0, 0x100000000, 0x20420, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7ff, 0x1, @perf_config_ext={0x5f, 0x1}, 0x8, 0x5, 0x6e, 0x2, 0x0, 0x4, 0x3, 0x0, 0x8bc, 0x0, 0x47d0}, 0x0, 0x0, r0, 0x3) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = getpid() rt_tgsigqueueinfo(r3, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x6}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018da913047140000000100000000000000c518c7223a9da998cd4379197ece863630f9fcd0c9698f38295e907b72061f0007006273effec1598bd6d9f08fcb144dec3d0747bae0a845542cbe63a0b8563744a3c2e894e032ada40413a52aa38856d4f89f19a61277a250933c6236ef7b9c2adc9e58dfedf7fb4292658bc5bcf483b81e071bd2c3a924b810edc46f013c12d27f4a85a4db46f08a018be3aebf120a0400000000000000c51c9814ed42732fe927b74b6e2b9adaeac3e4fa00026f60efdc2af69fe5ee4b21b58303", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x3f, 0x0, 0x0, 0x5, 0x0, 0x8, 0x2000, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x1000, 0x6, 0x9, 0x80000001, 0x7, 0xa5db, 0x0, 0x7, 0x0, 0x7}, r3, 0x3, r4, 0x1) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(r1, &(0x7f0000000340)='net/vlan/vlan1\x00') readv(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/75, 0x4b}, {&(0x7f00000016c0)=""/109, 0x6d}], 0x3) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000180)) setsockopt$sock_timeval(r5, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 16:36:46 executing program 4: sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x20, 0x0, 0x0, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) close(r0) r1 = syz_io_uring_setup(0x7668, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) r2 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@sco={0x1f, @none}, &(0x7f0000000200)=0x80, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x182, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, &(0x7f0000000680)=0xe, 0x80000) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000007c0)={0x0, 0x0}) openat(r1, &(0x7f00000004c0)='./file0\x00', 0x80, 0x40) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x88880, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x40, 0x5, 0x0, 0x0, 0x0, 0xfffffffc}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@empty, @in6=@local}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250800000008000500090000001c0002800800090000000000080008000800000005000d00000000000800040001800000080006004f0200000c000380050008000600000008000400130f000049d1ebcee0a672c763300854b7b8e934929d3d881daef2ac5db13519cf5cfeec4f693b54"], 0x5c}, 0x1, 0x0, 0x0, 0x41}, 0x2000800) [ 94.581204] audit: type=1400 audit(1674578206.183:6): avc: denied { execmem } for pid=260 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 16:36:46 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x9, 0x0) 16:36:46 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x2, 0x80, 0x5, 0x6, 0x0, 0x0, 0x0, 0x7, 0x3050, 0xa, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x14041, 0x0, 0xaf, 0x5, 0x4, 0x2, 0x888, 0x0, 0x8, 0x0, 0xffffffffffffff18}) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) sendmmsg$inet6(r4, &(0x7f0000002880), 0x4000101, 0x0) setsockopt$inet6_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f00000001c0)=@ccm_128={{0x303}, "840adfd657f93790", "f18ec3299ecd1a5f7c427d77c8a36afa", "c40bf7f4", "6ad8aa1613fe6b58"}, 0x28) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 16:36:46 executing program 7: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002740), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000002c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40505412, 0x0) [ 95.993577] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.999271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.017826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.018754] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.037937] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.041629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.045313] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.046483] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.047282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.051663] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 96.052940] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.056695] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.058814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.061541] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.065610] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 96.070513] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.073447] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.083342] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.084254] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 96.086649] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.087643] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 96.088512] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.090337] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 96.091282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.092394] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.092948] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 96.093700] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.094273] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 96.095233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.098055] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.103601] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 96.104532] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 96.105230] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 96.108474] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.146347] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.173596] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 96.219044] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 96.221509] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 96.222609] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 96.224533] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 96.225755] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 96.226576] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 96.233683] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 96.251570] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 96.264177] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 96.266308] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 96.267470] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 96.268321] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 98.118844] Bluetooth: hci0: command 0x0409 tx timeout [ 98.182431] Bluetooth: hci2: command 0x0409 tx timeout [ 98.183472] Bluetooth: hci3: command 0x0409 tx timeout [ 98.184285] Bluetooth: hci4: command 0x0409 tx timeout [ 98.184989] Bluetooth: hci1: command 0x0409 tx timeout [ 98.245498] Bluetooth: hci5: command 0x0409 tx timeout [ 98.309288] Bluetooth: hci6: command 0x0409 tx timeout [ 98.311858] Bluetooth: hci7: command 0x0409 tx timeout [ 100.165951] Bluetooth: hci0: command 0x041b tx timeout [ 100.229396] Bluetooth: hci1: command 0x041b tx timeout [ 100.230287] Bluetooth: hci4: command 0x041b tx timeout [ 100.230744] Bluetooth: hci3: command 0x041b tx timeout [ 100.231212] Bluetooth: hci2: command 0x041b tx timeout [ 100.293233] Bluetooth: hci5: command 0x041b tx timeout [ 100.357260] Bluetooth: hci7: command 0x041b tx timeout [ 100.357865] Bluetooth: hci6: command 0x041b tx timeout [ 102.213266] Bluetooth: hci0: command 0x040f tx timeout [ 102.277387] Bluetooth: hci2: command 0x040f tx timeout [ 102.278023] Bluetooth: hci3: command 0x040f tx timeout [ 102.278584] Bluetooth: hci4: command 0x040f tx timeout [ 102.279039] Bluetooth: hci1: command 0x040f tx timeout [ 102.341457] Bluetooth: hci5: command 0x040f tx timeout [ 102.406360] Bluetooth: hci6: command 0x040f tx timeout [ 102.407073] Bluetooth: hci7: command 0x040f tx timeout [ 104.261320] Bluetooth: hci0: command 0x0419 tx timeout [ 104.325476] Bluetooth: hci1: command 0x0419 tx timeout [ 104.326285] Bluetooth: hci4: command 0x0419 tx timeout [ 104.326811] Bluetooth: hci3: command 0x0419 tx timeout [ 104.327391] Bluetooth: hci2: command 0x0419 tx timeout [ 104.389287] Bluetooth: hci5: command 0x0419 tx timeout [ 104.453372] Bluetooth: hci7: command 0x0419 tx timeout [ 104.454543] Bluetooth: hci6: command 0x0419 tx timeout [ 158.044247] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 158.046916] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 158.047912] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 158.051407] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 158.053550] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 158.060920] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 158.295295] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 158.299567] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 158.304542] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 158.306000] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 158.309181] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 158.311387] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 158.315829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 158.317257] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 158.319861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 158.319937] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 158.327903] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 158.329170] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 158.394538] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 158.400366] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 158.403230] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 158.414086] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 158.425305] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 158.431065] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 158.432587] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 158.435958] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 158.436174] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 158.437223] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 158.442165] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 158.442873] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 158.474758] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 158.496271] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 158.504575] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 158.508830] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 158.510985] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 158.523622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 160.134536] Bluetooth: hci0: command 0x0409 tx timeout [ 160.390345] Bluetooth: hci2: command 0x0409 tx timeout [ 160.390380] Bluetooth: hci1: command 0x0409 tx timeout [ 160.392661] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 160.453302] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 160.453333] Bluetooth: hci4: command 0x0409 tx timeout [ 160.582073] Bluetooth: hci5: command 0x0409 tx timeout [ 160.646592] Bluetooth: hci3: command 0x0409 tx timeout [ 162.181204] Bluetooth: hci0: command 0x041b tx timeout [ 162.437438] Bluetooth: hci1: command 0x041b tx timeout [ 162.437560] Bluetooth: hci2: command 0x041b tx timeout [ 162.501483] Bluetooth: hci4: command 0x041b tx timeout [ 162.630731] Bluetooth: hci5: command 0x041b tx timeout [ 162.693841] Bluetooth: hci3: command 0x041b tx timeout [ 164.229196] Bluetooth: hci0: command 0x040f tx timeout [ 164.485194] Bluetooth: hci1: command 0x040f tx timeout [ 164.486344] Bluetooth: hci2: command 0x040f tx timeout [ 164.550197] Bluetooth: hci4: command 0x040f tx timeout [ 164.679162] Bluetooth: hci5: command 0x040f tx timeout [ 164.741200] Bluetooth: hci3: command 0x040f tx timeout [ 166.085280] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 166.277246] Bluetooth: hci0: command 0x0419 tx timeout [ 166.534249] Bluetooth: hci2: command 0x0419 tx timeout [ 166.534867] Bluetooth: hci1: command 0x0419 tx timeout [ 166.597217] Bluetooth: hci4: command 0x0419 tx timeout [ 166.725249] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 166.726242] Bluetooth: hci5: command 0x0419 tx timeout [ 166.789239] Bluetooth: hci3: command 0x0419 tx timeout [ 170.256915] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 170.276675] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 170.292676] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 170.335596] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 170.367523] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 170.372364] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 171.589252] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 172.422325] Bluetooth: hci7: command 0x0409 tx timeout [ 174.469212] Bluetooth: hci7: command 0x041b tx timeout [ 176.517267] Bluetooth: hci7: command 0x040f tx timeout [ 177.285211] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 178.565221] Bluetooth: hci7: command 0x0419 tx timeout [ 181.537740] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 181.549585] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 181.569273] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 181.580426] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 181.586360] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 181.588140] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 183.621276] Bluetooth: hci6: command 0x0409 tx timeout [ 185.669275] Bluetooth: hci6: command 0x041b tx timeout [ 187.717261] Bluetooth: hci6: command 0x040f tx timeout [ 189.765279] Bluetooth: hci6: command 0x0419 tx timeout [ 221.194449] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 221.197605] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 221.198556] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 221.201315] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 221.203916] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 221.205038] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 221.922062] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 221.924073] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 221.931006] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 221.940503] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 221.943817] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 221.947268] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 222.119220] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 222.122175] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 222.127550] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 222.128574] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 222.133048] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 222.133839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 222.149075] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 222.156326] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 222.159573] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 222.160255] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 222.175533] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 222.186926] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 223.237374] Bluetooth: hci0: command 0x0409 tx timeout [ 223.941211] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 224.005335] Bluetooth: hci2: command 0x0409 tx timeout [ 224.069213] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 224.197261] Bluetooth: hci4: command 0x0409 tx timeout [ 224.261250] Bluetooth: hci3: command 0x0409 tx timeout [ 225.286297] Bluetooth: hci0: command 0x041b tx timeout [ 226.054820] Bluetooth: hci2: command 0x041b tx timeout [ 226.245284] Bluetooth: hci4: command 0x041b tx timeout [ 226.309210] Bluetooth: hci3: command 0x041b tx timeout [ 227.335270] Bluetooth: hci0: command 0x040f tx timeout [ 227.377708] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 227.380495] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 227.381624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 227.383909] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 227.385658] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 227.387395] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 227.989532] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 227.996824] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 228.011508] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 228.060402] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 228.067439] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 228.071351] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 228.102182] Bluetooth: hci2: command 0x040f tx timeout [ 228.293296] Bluetooth: hci4: command 0x040f tx timeout [ 228.357198] Bluetooth: hci3: command 0x040f tx timeout [ 229.381252] Bluetooth: hci0: command 0x0419 tx timeout [ 229.445256] Bluetooth: hci1: command 0x0409 tx timeout [ 230.150182] Bluetooth: hci2: command 0x0419 tx timeout [ 230.150374] Bluetooth: hci5: command 0x0409 tx timeout [ 230.341178] Bluetooth: hci4: command 0x0419 tx timeout [ 230.405266] Bluetooth: hci3: command 0x0419 tx timeout [ 231.493235] Bluetooth: hci1: command 0x041b tx timeout [ 232.197209] Bluetooth: hci5: command 0x041b tx timeout [ 233.543188] Bluetooth: hci1: command 0x040f tx timeout [ 234.245321] Bluetooth: hci5: command 0x040f tx timeout [ 234.630263] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 235.590171] Bluetooth: hci1: command 0x0419 tx timeout [ 236.293266] Bluetooth: hci5: command 0x0419 tx timeout [ 238.006530] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 238.015789] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 238.029505] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 238.041487] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 238.043434] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 238.046441] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 240.069292] Bluetooth: hci7: command 0x0409 tx timeout [ 242.118252] Bluetooth: hci7: command 0x041b tx timeout [ 244.166198] Bluetooth: hci7: command 0x040f tx timeout [ 245.574209] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 246.213178] Bluetooth: hci7: command 0x0419 tx timeout [ 249.179374] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 249.184869] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 249.189361] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 249.198289] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 249.203331] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 249.205350] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 251.269269] Bluetooth: hci6: command 0x0409 tx timeout [ 253.317331] Bluetooth: hci6: command 0x041b tx timeout [ 255.366236] Bluetooth: hci6: command 0x040f tx timeout [ 257.413218] Bluetooth: hci6: command 0x0419 tx timeout [ 284.425029] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 284.428050] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 284.430974] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 284.452013] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 284.470449] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 284.475609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 285.205449] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 285.212241] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 285.214429] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 285.217723] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 285.218824] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 285.220511] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 285.293689] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 285.300216] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 285.309145] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 285.311765] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 285.334586] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 285.339021] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 285.340488] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 285.348394] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 285.353349] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 285.378239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 285.379881] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 285.386420] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 286.533232] Bluetooth: hci0: command 0x0409 tx timeout [ 287.302198] Bluetooth: hci2: command 0x0409 tx timeout [ 287.429348] Bluetooth: hci4: command 0x0409 tx timeout [ 287.430282] Bluetooth: hci3: command 0x0409 tx timeout [ 288.581205] Bluetooth: hci0: command 0x041b tx timeout [ 289.349152] Bluetooth: hci2: command 0x041b tx timeout [ 289.477195] Bluetooth: hci3: command 0x041b tx timeout [ 289.477268] Bluetooth: hci4: command 0x041b tx timeout [ 290.629188] Bluetooth: hci0: command 0x040f tx timeout [ 291.333238] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 291.397183] Bluetooth: hci2: command 0x040f tx timeout [ 291.525203] Bluetooth: hci4: command 0x040f tx timeout [ 291.525237] Bluetooth: hci3: command 0x040f tx timeout [ 292.038397] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 292.677175] Bluetooth: hci0: command 0x0419 tx timeout [ 293.445214] Bluetooth: hci2: command 0x0419 tx timeout [ 293.573173] Bluetooth: hci4: command 0x0419 tx timeout [ 293.574745] Bluetooth: hci3: command 0x0419 tx timeout [ 295.177940] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 295.181408] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 295.182954] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 295.185967] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 295.188002] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 295.189584] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 296.390181] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 297.221204] Bluetooth: hci5: command 0x0409 tx timeout [ 299.270196] Bluetooth: hci5: command 0x041b tx timeout [ 299.609842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 299.614040] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 299.619722] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 299.624296] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 299.625797] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 299.626742] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 300.169792] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 300.171384] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 300.172581] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 300.174656] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 300.175930] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 300.176888] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 301.318196] Bluetooth: hci5: command 0x040f tx timeout [ 301.637255] Bluetooth: hci1: command 0x0409 tx timeout [ 302.213358] Bluetooth: hci7: command 0x0409 tx timeout [ 303.365187] Bluetooth: hci5: command 0x0419 tx timeout [ 303.685226] Bluetooth: hci1: command 0x041b tx timeout [ 304.262213] Bluetooth: hci7: command 0x041b tx timeout [ 305.733171] Bluetooth: hci1: command 0x040f tx timeout [ 306.309208] Bluetooth: hci7: command 0x040f tx timeout [ 307.781178] Bluetooth: hci1: command 0x0419 tx timeout [ 308.357187] Bluetooth: hci7: command 0x0419 tx timeout [ 310.837746] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 310.840869] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 310.851214] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 310.858476] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 310.861943] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 310.864352] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 312.902216] Bluetooth: hci6: command 0x0409 tx timeout [ 314.949135] Bluetooth: hci6: command 0x041b tx timeout [ 316.998202] Bluetooth: hci6: command 0x040f tx timeout [ 319.045269] Bluetooth: hci6: command 0x0419 tx timeout [ 338.249543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.250226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.251554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 338.472219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.472861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.474439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 339.637715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.638335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.639695] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 339.862445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.863003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.864746] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 339.950765] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.951948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.957161] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 339.986561] audit: type=1400 audit(1674578451.589:7): avc: denied { open } for pid=11083 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 339.989029] audit: type=1400 audit(1674578451.589:8): avc: denied { kernel } for pid=11083 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 340.075651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.076271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.077726] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 16:40:51 executing program 3: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x9, 0x7, 0xaa, 0x5, 0x0, 0x100000000, 0x20420, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7ff, 0x1, @perf_config_ext={0x5f, 0x1}, 0x8, 0x5, 0x6e, 0x2, 0x0, 0x4, 0x3, 0x0, 0x8bc, 0x0, 0x47d0}, 0x0, 0x0, r0, 0x3) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = getpid() rt_tgsigqueueinfo(r3, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x6}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018da913047140000000100000000000000c518c7223a9da998cd4379197ece863630f9fcd0c9698f38295e907b72061f0007006273effec1598bd6d9f08fcb144dec3d0747bae0a845542cbe63a0b8563744a3c2e894e032ada40413a52aa38856d4f89f19a61277a250933c6236ef7b9c2adc9e58dfedf7fb4292658bc5bcf483b81e071bd2c3a924b810edc46f013c12d27f4a85a4db46f08a018be3aebf120a0400000000000000c51c9814ed42732fe927b74b6e2b9adaeac3e4fa00026f60efdc2af69fe5ee4b21b58303", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x3f, 0x0, 0x0, 0x5, 0x0, 0x8, 0x2000, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x1000, 0x6, 0x9, 0x80000001, 0x7, 0xa5db, 0x0, 0x7, 0x0, 0x7}, r3, 0x3, r4, 0x1) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(r1, &(0x7f0000000340)='net/vlan/vlan1\x00') readv(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/75, 0x4b}, {&(0x7f00000016c0)=""/109, 0x6d}], 0x3) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000180)) setsockopt$sock_timeval(r5, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) [ 340.401101] hrtimer: interrupt took 22762 ns 16:40:52 executing program 3: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x9, 0x7, 0xaa, 0x5, 0x0, 0x100000000, 0x20420, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7ff, 0x1, @perf_config_ext={0x5f, 0x1}, 0x8, 0x5, 0x6e, 0x2, 0x0, 0x4, 0x3, 0x0, 0x8bc, 0x0, 0x47d0}, 0x0, 0x0, r0, 0x3) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = getpid() rt_tgsigqueueinfo(r3, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x6}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018da913047140000000100000000000000c518c7223a9da998cd4379197ece863630f9fcd0c9698f38295e907b72061f0007006273effec1598bd6d9f08fcb144dec3d0747bae0a845542cbe63a0b8563744a3c2e894e032ada40413a52aa38856d4f89f19a61277a250933c6236ef7b9c2adc9e58dfedf7fb4292658bc5bcf483b81e071bd2c3a924b810edc46f013c12d27f4a85a4db46f08a018be3aebf120a0400000000000000c51c9814ed42732fe927b74b6e2b9adaeac3e4fa00026f60efdc2af69fe5ee4b21b58303", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x3f, 0x0, 0x0, 0x5, 0x0, 0x8, 0x2000, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x1000, 0x6, 0x9, 0x80000001, 0x7, 0xa5db, 0x0, 0x7, 0x0, 0x7}, r3, 0x3, r4, 0x1) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(r1, &(0x7f0000000340)='net/vlan/vlan1\x00') readv(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/75, 0x4b}, {&(0x7f00000016c0)=""/109, 0x6d}], 0x3) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000180)) setsockopt$sock_timeval(r5, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 16:40:52 executing program 3: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x9, 0x7, 0xaa, 0x5, 0x0, 0x100000000, 0x20420, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7ff, 0x1, @perf_config_ext={0x5f, 0x1}, 0x8, 0x5, 0x6e, 0x2, 0x0, 0x4, 0x3, 0x0, 0x8bc, 0x0, 0x47d0}, 0x0, 0x0, r0, 0x3) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = getpid() rt_tgsigqueueinfo(r3, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x6}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018da913047140000000100000000000000c518c7223a9da998cd4379197ece863630f9fcd0c9698f38295e907b72061f0007006273effec1598bd6d9f08fcb144dec3d0747bae0a845542cbe63a0b8563744a3c2e894e032ada40413a52aa38856d4f89f19a61277a250933c6236ef7b9c2adc9e58dfedf7fb4292658bc5bcf483b81e071bd2c3a924b810edc46f013c12d27f4a85a4db46f08a018be3aebf120a0400000000000000c51c9814ed42732fe927b74b6e2b9adaeac3e4fa00026f60efdc2af69fe5ee4b21b58303", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x3f, 0x0, 0x0, 0x5, 0x0, 0x8, 0x2000, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x1000, 0x6, 0x9, 0x80000001, 0x7, 0xa5db, 0x0, 0x7, 0x0, 0x7}, r3, 0x3, r4, 0x1) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(r1, &(0x7f0000000340)='net/vlan/vlan1\x00') readv(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/75, 0x4b}, {&(0x7f00000016c0)=""/109, 0x6d}], 0x3) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000180)) setsockopt$sock_timeval(r5, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) [ 341.619401] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 341.620062] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 341.620602] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 341.621041] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 341.621598] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 28 prio class 2 [ 341.639708] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 341.640609] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 341.641195] Buffer I/O error on dev sr0, logical block 0, async page read [ 341.648708] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 341.649081] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 341.649761] Buffer I/O error on dev sr0, logical block 1, async page read [ 341.656646] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 341.657018] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 341.657720] Buffer I/O error on dev sr0, logical block 2, async page read [ 341.658708] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 341.659070] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 341.659661] Buffer I/O error on dev sr0, logical block 3, async page read [ 341.661057] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 341.661455] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 341.662014] Buffer I/O error on dev sr0, logical block 4, async page read [ 341.663054] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 341.663460] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 341.664017] Buffer I/O error on dev sr0, logical block 5, async page read [ 341.667084] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 341.667480] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 341.668033] Buffer I/O error on dev sr0, logical block 6, async page read [ 341.670341] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 341.670729] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 341.671288] Buffer I/O error on dev sr0, logical block 7, async page read [ 341.740599] audit: type=1400 audit(1674578453.342:9): avc: denied { read } for pid=11160 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 342.886895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.887543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.889126] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 342.957229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.957828] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.959382] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 347.026991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.027892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.029837] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 347.091813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.092426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.094031] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 348.867428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.868031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.870023] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 348.900327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.900889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.902747] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 349.323752] audit: type=1400 audit(1674578460.926:10): avc: denied { write } for pid=11631 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 349.331476] Bluetooth: MGMT ver 1.22 [ 350.585289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.585883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.587170] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 350.614640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.615235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.616676] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 353.672585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.673793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.677045] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 353.709587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.710750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.713337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 16:41:05 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x9, 0x0) 16:41:05 executing program 4: sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x20, 0x0, 0x0, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) close(r0) r1 = syz_io_uring_setup(0x7668, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) r2 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@sco={0x1f, @none}, &(0x7f0000000200)=0x80, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x182, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, &(0x7f0000000680)=0xe, 0x80000) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000007c0)={0x0, 0x0}) openat(r1, &(0x7f00000004c0)='./file0\x00', 0x80, 0x40) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x88880, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x40, 0x5, 0x0, 0x0, 0x0, 0xfffffffc}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@empty, @in6=@local}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250800000008000500090000001c0002800800090000000000080008000800000005000d00000000000800040001800000080006004f0200000c000380050008000600000008000400130f000049d1ebcee0a672c763300854b7b8e934929d3d881daef2ac5db13519cf5cfeec4f693b54"], 0x5c}, 0x1, 0x0, 0x0, 0x41}, 0x2000800) 16:41:05 executing program 3: sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x20, 0x0, 0x0, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) close(r0) r1 = syz_io_uring_setup(0x7668, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) r2 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@sco={0x1f, @none}, &(0x7f0000000200)=0x80, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x182, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, &(0x7f0000000680)=0xe, 0x80000) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000007c0)={0x0, 0x0}) openat(r1, &(0x7f00000004c0)='./file0\x00', 0x80, 0x40) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x88880, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x40, 0x5, 0x0, 0x0, 0x0, 0xfffffffc}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@empty, @in6=@local}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250800000008000500090000001c0002800800090000000000080008000800000005000d00000000000800040001800000080006004f0200000c000380050008000600000008000400130f000049d1ebcee0a672c763300854b7b8e934929d3d881daef2ac5db13519cf5cfeec4f693b54"], 0x5c}, 0x1, 0x0, 0x0, 0x41}, 0x2000800) 16:41:05 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x2, 0x80, 0x5, 0x6, 0x0, 0x0, 0x0, 0x7, 0x3050, 0xa, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x14041, 0x0, 0xaf, 0x5, 0x4, 0x2, 0x888, 0x0, 0x8, 0x0, 0xffffffffffffff18}) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) sendmmsg$inet6(r4, &(0x7f0000002880), 0x4000101, 0x0) setsockopt$inet6_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f00000001c0)=@ccm_128={{0x303}, "840adfd657f93790", "f18ec3299ecd1a5f7c427d77c8a36afa", "c40bf7f4", "6ad8aa1613fe6b58"}, 0x28) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 16:41:05 executing program 7: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002740), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000002c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40505412, 0x0) 16:41:05 executing program 1: syz_io_uring_setup(0x296b, &(0x7f00000001c0)={0x0, 0x258d6, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 16:41:05 executing program 0: r0 = perf_event_open(&(0x7f00000031c0)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = gettid() rt_tgsigqueueinfo(0x0, r2, 0x0, &(0x7f0000000340)) perf_event_open(&(0x7f00000030c0)={0x3, 0x80, 0x81, 0x4, 0x0, 0x2, 0x0, 0x8, 0x1804b, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x2, @perf_bp={&(0x7f0000003000), 0x7}, 0x10200, 0xcf, 0x0, 0x2, 0xd3c0, 0x8e4, 0x3ff, 0x0, 0x8, 0x0, 0x1f}, r2, 0x3, r0, 0x0) r3 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f00000001c0)='./file0\x00') rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000340)) renameat(r3, &(0x7f0000000140)='./file0/file0\x00', r3, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 16:41:05 executing program 2: syz_mount_image$msdos(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='nodots,fowner=', @ANYRESDEC, @ANYBLOB="2c6f626a5f747970653d2c6f626a5f726f6c653d27cb2e5b643d000000000000ff03000000000000000010986f802985c04a24547fd8b41e42785ecbaaecb73bd55bcad31274dd3af2ac7a6652246e11fb865c096134f05fa120b664c7", @ANYRESDEC=0xee00, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(r1, &(0x7f0000000040)='./file1\x00', 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r2}}, './file0\x00'}) 16:41:05 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x9, 0x0) 16:41:06 executing program 7: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002740), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000002c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40505412, 0x0) 16:41:06 executing program 7: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002740), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000002c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40505412, 0x0) 16:41:06 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x9, 0x0) 16:41:06 executing program 0: r0 = perf_event_open(&(0x7f00000031c0)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = gettid() rt_tgsigqueueinfo(0x0, r2, 0x0, &(0x7f0000000340)) perf_event_open(&(0x7f00000030c0)={0x3, 0x80, 0x81, 0x4, 0x0, 0x2, 0x0, 0x8, 0x1804b, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x2, @perf_bp={&(0x7f0000003000), 0x7}, 0x10200, 0xcf, 0x0, 0x2, 0xd3c0, 0x8e4, 0x3ff, 0x0, 0x8, 0x0, 0x1f}, r2, 0x3, r0, 0x0) r3 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f00000001c0)='./file0\x00') rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000340)) renameat(r3, &(0x7f0000000140)='./file0/file0\x00', r3, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 16:41:07 executing program 1: syz_io_uring_setup(0x296b, &(0x7f00000001c0)={0x0, 0x258d6, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 16:41:07 executing program 0: r0 = perf_event_open(&(0x7f00000031c0)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = gettid() rt_tgsigqueueinfo(0x0, r2, 0x0, &(0x7f0000000340)) perf_event_open(&(0x7f00000030c0)={0x3, 0x80, 0x81, 0x4, 0x0, 0x2, 0x0, 0x8, 0x1804b, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x2, @perf_bp={&(0x7f0000003000), 0x7}, 0x10200, 0xcf, 0x0, 0x2, 0xd3c0, 0x8e4, 0x3ff, 0x0, 0x8, 0x0, 0x1f}, r2, 0x3, r0, 0x0) r3 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f00000001c0)='./file0\x00') rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000340)) renameat(r3, &(0x7f0000000140)='./file0/file0\x00', r3, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 16:41:07 executing program 5: r0 = perf_event_open(&(0x7f00000031c0)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = gettid() rt_tgsigqueueinfo(0x0, r2, 0x0, &(0x7f0000000340)) perf_event_open(&(0x7f00000030c0)={0x3, 0x80, 0x81, 0x4, 0x0, 0x2, 0x0, 0x8, 0x1804b, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x2, @perf_bp={&(0x7f0000003000), 0x7}, 0x10200, 0xcf, 0x0, 0x2, 0xd3c0, 0x8e4, 0x3ff, 0x0, 0x8, 0x0, 0x1f}, r2, 0x3, r0, 0x0) r3 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f00000001c0)='./file0\x00') rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000340)) renameat(r3, &(0x7f0000000140)='./file0/file0\x00', r3, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 16:41:07 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x2, 0x80, 0x5, 0x6, 0x0, 0x0, 0x0, 0x7, 0x3050, 0xa, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x14041, 0x0, 0xaf, 0x5, 0x4, 0x2, 0x888, 0x0, 0x8, 0x0, 0xffffffffffffff18}) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) sendmmsg$inet6(r4, &(0x7f0000002880), 0x4000101, 0x0) setsockopt$inet6_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f00000001c0)=@ccm_128={{0x303}, "840adfd657f93790", "f18ec3299ecd1a5f7c427d77c8a36afa", "c40bf7f4", "6ad8aa1613fe6b58"}, 0x28) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 16:41:07 executing program 3: sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x20, 0x0, 0x0, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) close(r0) r1 = syz_io_uring_setup(0x7668, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) r2 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@sco={0x1f, @none}, &(0x7f0000000200)=0x80, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x182, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, &(0x7f0000000680)=0xe, 0x80000) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000007c0)={0x0, 0x0}) openat(r1, &(0x7f00000004c0)='./file0\x00', 0x80, 0x40) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x88880, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x40, 0x5, 0x0, 0x0, 0x0, 0xfffffffc}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@empty, @in6=@local}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250800000008000500090000001c0002800800090000000000080008000800000005000d00000000000800040001800000080006004f0200000c000380050008000600000008000400130f000049d1ebcee0a672c763300854b7b8e934929d3d881daef2ac5db13519cf5cfeec4f693b54"], 0x5c}, 0x1, 0x0, 0x0, 0x41}, 0x2000800) 16:41:07 executing program 4: sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x20, 0x0, 0x0, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) close(r0) r1 = syz_io_uring_setup(0x7668, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) r2 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@sco={0x1f, @none}, &(0x7f0000000200)=0x80, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x182, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, &(0x7f0000000680)=0xe, 0x80000) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000007c0)={0x0, 0x0}) openat(r1, &(0x7f00000004c0)='./file0\x00', 0x80, 0x40) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x88880, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x40, 0x5, 0x0, 0x0, 0x0, 0xfffffffc}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@empty, @in6=@local}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250800000008000500090000001c0002800800090000000000080008000800000005000d00000000000800040001800000080006004f0200000c000380050008000600000008000400130f000049d1ebcee0a672c763300854b7b8e934929d3d881daef2ac5db13519cf5cfeec4f693b54"], 0x5c}, 0x1, 0x0, 0x0, 0x41}, 0x2000800) 16:41:07 executing program 7: r0 = perf_event_open(&(0x7f00000031c0)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = gettid() rt_tgsigqueueinfo(0x0, r2, 0x0, &(0x7f0000000340)) perf_event_open(&(0x7f00000030c0)={0x3, 0x80, 0x81, 0x4, 0x0, 0x2, 0x0, 0x8, 0x1804b, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x2, @perf_bp={&(0x7f0000003000), 0x7}, 0x10200, 0xcf, 0x0, 0x2, 0xd3c0, 0x8e4, 0x3ff, 0x0, 0x8, 0x0, 0x1f}, r2, 0x3, r0, 0x0) r3 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f00000001c0)='./file0\x00') rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000340)) renameat(r3, &(0x7f0000000140)='./file0/file0\x00', r3, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 16:41:07 executing program 2: syz_mount_image$msdos(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='nodots,fowner=', @ANYRESDEC, @ANYBLOB="2c6f626a5f747970653d2c6f626a5f726f6c653d27cb2e5b643d000000000000ff03000000000000000010986f802985c04a24547fd8b41e42785ecbaaecb73bd55bcad31274dd3af2ac7a6652246e11fb865c096134f05fa120b664c7", @ANYRESDEC=0xee00, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(r1, &(0x7f0000000040)='./file1\x00', 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r2}}, './file0\x00'}) 16:41:07 executing program 1: syz_io_uring_setup(0x296b, &(0x7f00000001c0)={0x0, 0x258d6, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000100)) 16:41:07 executing program 2: syz_mount_image$msdos(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='nodots,fowner=', @ANYRESDEC, @ANYBLOB="2c6f626a5f747970653d2c6f626a5f726f6c653d27cb2e5b643d000000000000ff03000000000000000010986f802985c04a24547fd8b41e42785ecbaaecb73bd55bcad31274dd3af2ac7a6652246e11fb865c096134f05fa120b664c7", @ANYRESDEC=0xee00, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(r1, &(0x7f0000000040)='./file1\x00', 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r2}}, './file0\x00'}) 16:41:07 executing program 5: r0 = perf_event_open(&(0x7f00000031c0)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = gettid() rt_tgsigqueueinfo(0x0, r2, 0x0, &(0x7f0000000340)) perf_event_open(&(0x7f00000030c0)={0x3, 0x80, 0x81, 0x4, 0x0, 0x2, 0x0, 0x8, 0x1804b, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x2, @perf_bp={&(0x7f0000003000), 0x7}, 0x10200, 0xcf, 0x0, 0x2, 0xd3c0, 0x8e4, 0x3ff, 0x0, 0x8, 0x0, 0x1f}, r2, 0x3, r0, 0x0) r3 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f00000001c0)='./file0\x00') rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000340)) renameat(r3, &(0x7f0000000140)='./file0/file0\x00', r3, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 16:41:07 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x2, 0x80, 0x5, 0x6, 0x0, 0x0, 0x0, 0x7, 0x3050, 0xa, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x14041, 0x0, 0xaf, 0x5, 0x4, 0x2, 0x888, 0x0, 0x8, 0x0, 0xffffffffffffff18}) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) sendmmsg$inet6(r4, &(0x7f0000002880), 0x4000101, 0x0) setsockopt$inet6_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f00000001c0)=@ccm_128={{0x303}, "840adfd657f93790", "f18ec3299ecd1a5f7c427d77c8a36afa", "c40bf7f4", "6ad8aa1613fe6b58"}, 0x28) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 16:41:07 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x2, 0x80, 0x5, 0x6, 0x0, 0x0, 0x0, 0x7, 0x3050, 0xa, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x14041, 0x0, 0xaf, 0x5, 0x4, 0x2, 0x888, 0x0, 0x8, 0x0, 0xffffffffffffff18}) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) sendmmsg$inet6(r4, &(0x7f0000002880), 0x4000101, 0x0) setsockopt$inet6_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f00000001c0)=@ccm_128={{0x303}, "840adfd657f93790", "f18ec3299ecd1a5f7c427d77c8a36afa", "c40bf7f4", "6ad8aa1613fe6b58"}, 0x28) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 16:41:07 executing program 4: sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x20, 0x0, 0x0, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) close(r0) r1 = syz_io_uring_setup(0x7668, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) r2 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@sco={0x1f, @none}, &(0x7f0000000200)=0x80, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x182, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, &(0x7f0000000680)=0xe, 0x80000) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000007c0)={0x0, 0x0}) openat(r1, &(0x7f00000004c0)='./file0\x00', 0x80, 0x40) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x88880, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x40, 0x5, 0x0, 0x0, 0x0, 0xfffffffc}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@empty, @in6=@local}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250800000008000500090000001c0002800800090000000000080008000800000005000d00000000000800040001800000080006004f0200000c000380050008000600000008000400130f000049d1ebcee0a672c763300854b7b8e934929d3d881daef2ac5db13519cf5cfeec4f693b54"], 0x5c}, 0x1, 0x0, 0x0, 0x41}, 0x2000800) 16:41:07 executing program 5: r0 = perf_event_open(&(0x7f00000031c0)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = gettid() rt_tgsigqueueinfo(0x0, r2, 0x0, &(0x7f0000000340)) perf_event_open(&(0x7f00000030c0)={0x3, 0x80, 0x81, 0x4, 0x0, 0x2, 0x0, 0x8, 0x1804b, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x2, @perf_bp={&(0x7f0000003000), 0x7}, 0x10200, 0xcf, 0x0, 0x2, 0xd3c0, 0x8e4, 0x3ff, 0x0, 0x8, 0x0, 0x1f}, r2, 0x3, r0, 0x0) r3 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f00000001c0)='./file0\x00') rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000340)) renameat(r3, &(0x7f0000000140)='./file0/file0\x00', r3, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 16:41:07 executing program 7: r0 = perf_event_open(&(0x7f00000031c0)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = gettid() rt_tgsigqueueinfo(0x0, r2, 0x0, &(0x7f0000000340)) perf_event_open(&(0x7f00000030c0)={0x3, 0x80, 0x81, 0x4, 0x0, 0x2, 0x0, 0x8, 0x1804b, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x2, @perf_bp={&(0x7f0000003000), 0x7}, 0x10200, 0xcf, 0x0, 0x2, 0xd3c0, 0x8e4, 0x3ff, 0x0, 0x8, 0x0, 0x1f}, r2, 0x3, r0, 0x0) r3 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f00000001c0)='./file0\x00') rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000340)) renameat(r3, &(0x7f0000000140)='./file0/file0\x00', r3, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 16:41:07 executing program 3: sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x20, 0x0, 0x0, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) close(r0) r1 = syz_io_uring_setup(0x7668, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) r2 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@sco={0x1f, @none}, &(0x7f0000000200)=0x80, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x182, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, &(0x7f0000000680)=0xe, 0x80000) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000007c0)={0x0, 0x0}) openat(r1, &(0x7f00000004c0)='./file0\x00', 0x80, 0x40) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x88880, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x40, 0x5, 0x0, 0x0, 0x0, 0xfffffffc}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@empty, @in6=@local}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf250800000008000500090000001c0002800800090000000000080008000800000005000d00000000000800040001800000080006004f0200000c000380050008000600000008000400130f000049d1ebcee0a672c763300854b7b8e934929d3d881daef2ac5db13519cf5cfeec4f693b54"], 0x5c}, 0x1, 0x0, 0x0, 0x41}, 0x2000800) 16:41:07 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x2, 0x80, 0x5, 0x6, 0x0, 0x0, 0x0, 0x7, 0x3050, 0xa, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x14041, 0x0, 0xaf, 0x5, 0x4, 0x2, 0x888, 0x0, 0x8, 0x0, 0xffffffffffffff18}) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) sendmmsg$inet6(r4, &(0x7f0000002880), 0x4000101, 0x0) setsockopt$inet6_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f00000001c0)=@ccm_128={{0x303}, "840adfd657f93790", "f18ec3299ecd1a5f7c427d77c8a36afa", "c40bf7f4", "6ad8aa1613fe6b58"}, 0x28) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 16:41:07 executing program 1: syz_mount_image$msdos(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='nodots,fowner=', @ANYRESDEC, @ANYBLOB="2c6f626a5f747970653d2c6f626a5f726f6c653d27cb2e5b643d000000000000ff03000000000000000010986f802985c04a24547fd8b41e42785ecbaaecb73bd55bcad31274dd3af2ac7a6652246e11fb865c096134f05fa120b664c7", @ANYRESDEC=0xee00, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(r1, &(0x7f0000000040)='./file1\x00', 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r2}}, './file0\x00'}) 16:41:07 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x2, 0x80, 0x5, 0x6, 0x0, 0x0, 0x0, 0x7, 0x3050, 0xa, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x14041, 0x0, 0xaf, 0x5, 0x4, 0x2, 0x888, 0x0, 0x8, 0x0, 0xffffffffffffff18}) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) sendmmsg$inet6(r4, &(0x7f0000002880), 0x4000101, 0x0) setsockopt$inet6_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f00000001c0)=@ccm_128={{0x303}, "840adfd657f93790", "f18ec3299ecd1a5f7c427d77c8a36afa", "c40bf7f4", "6ad8aa1613fe6b58"}, 0x28) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 16:41:07 executing program 6: syz_mount_image$msdos(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='nodots,fowner=', @ANYRESDEC, @ANYBLOB="2c6f626a5f747970653d2c6f626a5f726f6c653d27cb2e5b643d000000000000ff03000000000000000010986f802985c04a24547fd8b41e42785ecbaaecb73bd55bcad31274dd3af2ac7a6652246e11fb865c096134f05fa120b664c7", @ANYRESDEC=0xee00, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(r1, &(0x7f0000000040)='./file1\x00', 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r2}}, './file0\x00'}) 16:41:08 executing program 7: r0 = perf_event_open(&(0x7f00000031c0)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = gettid() rt_tgsigqueueinfo(0x0, r2, 0x0, &(0x7f0000000340)) perf_event_open(&(0x7f00000030c0)={0x3, 0x80, 0x81, 0x4, 0x0, 0x2, 0x0, 0x8, 0x1804b, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x2, @perf_bp={&(0x7f0000003000), 0x7}, 0x10200, 0xcf, 0x0, 0x2, 0xd3c0, 0x8e4, 0x3ff, 0x0, 0x8, 0x0, 0x1f}, r2, 0x3, r0, 0x0) r3 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f00000001c0)='./file0\x00') rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000340)) renameat(r3, &(0x7f0000000140)='./file0/file0\x00', r3, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 356.469456] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 356.470787] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 356.471770] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 356.472724] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 356.473803] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 29 prio class 2 16:41:08 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x2, 0x80, 0x5, 0x6, 0x0, 0x0, 0x0, 0x7, 0x3050, 0xa, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x14041, 0x0, 0xaf, 0x5, 0x4, 0x2, 0x888, 0x0, 0x8, 0x0, 0xffffffffffffff18}) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) sendmmsg$inet6(r4, &(0x7f0000002880), 0x4000101, 0x0) setsockopt$inet6_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f00000001c0)=@ccm_128={{0x303}, "840adfd657f93790", "f18ec3299ecd1a5f7c427d77c8a36afa", "c40bf7f4", "6ad8aa1613fe6b58"}, 0x28) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 16:41:08 executing program 5: syz_mount_image$msdos(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='nodots,fowner=', @ANYRESDEC, @ANYBLOB="2c6f626a5f747970653d2c6f626a5f726f6c653d27cb2e5b643d000000000000ff03000000000000000010986f802985c04a24547fd8b41e42785ecbaaecb73bd55bcad31274dd3af2ac7a6652246e11fb865c096134f05fa120b664c7", @ANYRESDEC=0xee00, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(r1, &(0x7f0000000040)='./file1\x00', 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r2}}, './file0\x00'}) [ 356.550743] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 356.551295] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.552013] Buffer I/O error on dev sr0, logical block 0, async page read [ 356.572183] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 356.572632] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.573241] Buffer I/O error on dev sr0, logical block 1, async page read [ 356.575554] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 356.575962] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.576670] Buffer I/O error on dev sr0, logical block 2, async page read [ 356.579965] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 356.580394] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.581045] Buffer I/O error on dev sr0, logical block 3, async page read [ 356.583230] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 356.583620] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.584236] Buffer I/O error on dev sr0, logical block 4, async page read [ 356.591768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 356.592374] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.592951] Buffer I/O error on dev sr0, logical block 5, async page read [ 356.594225] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 356.594618] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.595306] Buffer I/O error on dev sr0, logical block 6, async page read [ 356.596446] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 356.596848] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.597544] Buffer I/O error on dev sr0, logical block 7, async page read 16:41:08 executing program 1: syz_mount_image$msdos(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='nodots,fowner=', @ANYRESDEC, @ANYBLOB="2c6f626a5f747970653d2c6f626a5f726f6c653d27cb2e5b643d000000000000ff03000000000000000010986f802985c04a24547fd8b41e42785ecbaaecb73bd55bcad31274dd3af2ac7a6652246e11fb865c096134f05fa120b664c7", @ANYRESDEC=0xee00, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(r1, &(0x7f0000000040)='./file1\x00', 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r2}}, './file0\x00'}) 16:41:08 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x2, 0x80, 0x5, 0x6, 0x0, 0x0, 0x0, 0x7, 0x3050, 0xa, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x14041, 0x0, 0xaf, 0x5, 0x4, 0x2, 0x888, 0x0, 0x8, 0x0, 0xffffffffffffff18}) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) sendmmsg$inet6(r4, &(0x7f0000002880), 0x4000101, 0x0) setsockopt$inet6_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f00000001c0)=@ccm_128={{0x303}, "840adfd657f93790", "f18ec3299ecd1a5f7c427d77c8a36afa", "c40bf7f4", "6ad8aa1613fe6b58"}, 0x28) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 16:41:08 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x2, 0x80, 0x5, 0x6, 0x0, 0x0, 0x0, 0x7, 0x3050, 0xa, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x14041, 0x0, 0xaf, 0x5, 0x4, 0x2, 0x888, 0x0, 0x8, 0x0, 0xffffffffffffff18}) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) sendmmsg$inet6(r4, &(0x7f0000002880), 0x4000101, 0x0) setsockopt$inet6_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f00000001c0)=@ccm_128={{0x303}, "840adfd657f93790", "f18ec3299ecd1a5f7c427d77c8a36afa", "c40bf7f4", "6ad8aa1613fe6b58"}, 0x28) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 16:41:08 executing program 3: syz_mount_image$msdos(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='nodots,fowner=', @ANYRESDEC, @ANYBLOB="2c6f626a5f747970653d2c6f626a5f726f6c653d27cb2e5b643d000000000000ff03000000000000000010986f802985c04a24547fd8b41e42785ecbaaecb73bd55bcad31274dd3af2ac7a6652246e11fb865c096134f05fa120b664c7", @ANYRESDEC=0xee00, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(r1, &(0x7f0000000040)='./file1\x00', 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r2}}, './file0\x00'}) 16:41:08 executing program 5: syz_mount_image$msdos(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='nodots,fowner=', @ANYRESDEC, @ANYBLOB="2c6f626a5f747970653d2c6f626a5f726f6c653d27cb2e5b643d000000000000ff03000000000000000010986f802985c04a24547fd8b41e42785ecbaaecb73bd55bcad31274dd3af2ac7a6652246e11fb865c096134f05fa120b664c7", @ANYRESDEC=0xee00, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(r1, &(0x7f0000000040)='./file1\x00', 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r2}}, './file0\x00'}) 16:41:08 executing program 4: syz_mount_image$msdos(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='nodots,fowner=', @ANYRESDEC, @ANYBLOB="2c6f626a5f747970653d2c6f626a5f726f6c653d27cb2e5b643d000000000000ff03000000000000000010986f802985c04a24547fd8b41e42785ecbaaecb73bd55bcad31274dd3af2ac7a6652246e11fb865c096134f05fa120b664c7", @ANYRESDEC=0xee00, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(r1, &(0x7f0000000040)='./file1\x00', 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r2}}, './file0\x00'}) 16:41:08 executing program 7: syz_mount_image$msdos(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='nodots,fowner=', @ANYRESDEC, @ANYBLOB="2c6f626a5f747970653d2c6f626a5f726f6c653d27cb2e5b643d000000000000ff03000000000000000010986f802985c04a24547fd8b41e42785ecbaaecb73bd55bcad31274dd3af2ac7a6652246e11fb865c096134f05fa120b664c7", @ANYRESDEC=0xee00, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(r1, &(0x7f0000000040)='./file1\x00', 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r2}}, './file0\x00'}) 16:41:08 executing program 2: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x9, 0x7, 0xaa, 0x5, 0x0, 0x100000000, 0x20420, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7ff, 0x1, @perf_config_ext={0x5f, 0x1}, 0x8, 0x5, 0x6e, 0x2, 0x0, 0x4, 0x3, 0x0, 0x8bc, 0x0, 0x47d0}, 0x0, 0x0, r0, 0x3) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = getpid() rt_tgsigqueueinfo(r3, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x6}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018da913047140000000100000000000000c518c7223a9da998cd4379197ece863630f9fcd0c9698f38295e907b72061f0007006273effec1598bd6d9f08fcb144dec3d0747bae0a845542cbe63a0b8563744a3c2e894e032ada40413a52aa38856d4f89f19a61277a250933c6236ef7b9c2adc9e58dfedf7fb4292658bc5bcf483b81e071bd2c3a924b810edc46f013c12d27f4a85a4db46f08a018be3aebf120a0400000000000000c51c9814ed42732fe927b74b6e2b9adaeac3e4fa00026f60efdc2af69fe5ee4b21b58303", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x3f, 0x0, 0x0, 0x5, 0x0, 0x8, 0x2000, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x1000, 0x6, 0x9, 0x80000001, 0x7, 0xa5db, 0x0, 0x7, 0x0, 0x7}, r3, 0x3, r4, 0x1) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(r1, &(0x7f0000000340)='net/vlan/vlan1\x00') readv(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/75, 0x4b}, {&(0x7f00000016c0)=""/109, 0x6d}], 0x3) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000180)) setsockopt$sock_timeval(r5, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 16:41:08 executing program 5: syz_mount_image$msdos(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='nodots,fowner=', @ANYRESDEC, @ANYBLOB="2c6f626a5f747970653d2c6f626a5f726f6c653d27cb2e5b643d000000000000ff03000000000000000010986f802985c04a24547fd8b41e42785ecbaaecb73bd55bcad31274dd3af2ac7a6652246e11fb865c096134f05fa120b664c7", @ANYRESDEC=0xee00, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(r1, &(0x7f0000000040)='./file1\x00', 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r2}}, './file0\x00'}) 16:41:08 executing program 0: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x9, 0x7, 0xaa, 0x5, 0x0, 0x100000000, 0x20420, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7ff, 0x1, @perf_config_ext={0x5f, 0x1}, 0x8, 0x5, 0x6e, 0x2, 0x0, 0x4, 0x3, 0x0, 0x8bc, 0x0, 0x47d0}, 0x0, 0x0, r0, 0x3) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = getpid() rt_tgsigqueueinfo(r3, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x6}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018da913047140000000100000000000000c518c7223a9da998cd4379197ece863630f9fcd0c9698f38295e907b72061f0007006273effec1598bd6d9f08fcb144dec3d0747bae0a845542cbe63a0b8563744a3c2e894e032ada40413a52aa38856d4f89f19a61277a250933c6236ef7b9c2adc9e58dfedf7fb4292658bc5bcf483b81e071bd2c3a924b810edc46f013c12d27f4a85a4db46f08a018be3aebf120a0400000000000000c51c9814ed42732fe927b74b6e2b9adaeac3e4fa00026f60efdc2af69fe5ee4b21b58303", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x3f, 0x0, 0x0, 0x5, 0x0, 0x8, 0x2000, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x1000, 0x6, 0x9, 0x80000001, 0x7, 0xa5db, 0x0, 0x7, 0x0, 0x7}, r3, 0x3, r4, 0x1) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(r1, &(0x7f0000000340)='net/vlan/vlan1\x00') readv(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/75, 0x4b}, {&(0x7f00000016c0)=""/109, 0x6d}], 0x3) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000180)) setsockopt$sock_timeval(r5, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 16:41:08 executing program 6: syz_mount_image$msdos(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='nodots,fowner=', @ANYRESDEC, @ANYBLOB="2c6f626a5f747970653d2c6f626a5f726f6c653d27cb2e5b643d000000000000ff03000000000000000010986f802985c04a24547fd8b41e42785ecbaaecb73bd55bcad31274dd3af2ac7a6652246e11fb865c096134f05fa120b664c7", @ANYRESDEC=0xee00, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(r1, &(0x7f0000000040)='./file1\x00', 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r2}}, './file0\x00'}) 16:41:09 executing program 1: syz_mount_image$msdos(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='nodots,fowner=', @ANYRESDEC, @ANYBLOB="2c6f626a5f747970653d2c6f626a5f726f6c653d27cb2e5b643d000000000000ff03000000000000000010986f802985c04a24547fd8b41e42785ecbaaecb73bd55bcad31274dd3af2ac7a6652246e11fb865c096134f05fa120b664c7", @ANYRESDEC=0xee00, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(r1, &(0x7f0000000040)='./file1\x00', 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r2}}, './file0\x00'}) 16:41:09 executing program 3: syz_mount_image$msdos(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='nodots,fowner=', @ANYRESDEC, @ANYBLOB="2c6f626a5f747970653d2c6f626a5f726f6c653d27cb2e5b643d000000000000ff03000000000000000010986f802985c04a24547fd8b41e42785ecbaaecb73bd55bcad31274dd3af2ac7a6652246e11fb865c096134f05fa120b664c7", @ANYRESDEC=0xee00, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(r1, &(0x7f0000000040)='./file1\x00', 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r2}}, './file0\x00'}) 16:41:09 executing program 4: syz_mount_image$msdos(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='nodots,fowner=', @ANYRESDEC, @ANYBLOB="2c6f626a5f747970653d2c6f626a5f726f6c653d27cb2e5b643d000000000000ff03000000000000000010986f802985c04a24547fd8b41e42785ecbaaecb73bd55bcad31274dd3af2ac7a6652246e11fb865c096134f05fa120b664c7", @ANYRESDEC=0xee00, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(r1, &(0x7f0000000040)='./file1\x00', 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r2}}, './file0\x00'}) 16:41:09 executing program 7: syz_mount_image$msdos(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='nodots,fowner=', @ANYRESDEC, @ANYBLOB="2c6f626a5f747970653d2c6f626a5f726f6c653d27cb2e5b643d000000000000ff03000000000000000010986f802985c04a24547fd8b41e42785ecbaaecb73bd55bcad31274dd3af2ac7a6652246e11fb865c096134f05fa120b664c7", @ANYRESDEC=0xee00, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(r1, &(0x7f0000000040)='./file1\x00', 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r2}}, './file0\x00'}) 16:41:09 executing program 6: syz_mount_image$msdos(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='nodots,fowner=', @ANYRESDEC, @ANYBLOB="2c6f626a5f747970653d2c6f626a5f726f6c653d27cb2e5b643d000000000000ff03000000000000000010986f802985c04a24547fd8b41e42785ecbaaecb73bd55bcad31274dd3af2ac7a6652246e11fb865c096134f05fa120b664c7", @ANYRESDEC=0xee00, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(r1, &(0x7f0000000040)='./file1\x00', 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r2}}, './file0\x00'}) 16:41:09 executing program 5: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x9, 0x7, 0xaa, 0x5, 0x0, 0x100000000, 0x20420, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7ff, 0x1, @perf_config_ext={0x5f, 0x1}, 0x8, 0x5, 0x6e, 0x2, 0x0, 0x4, 0x3, 0x0, 0x8bc, 0x0, 0x47d0}, 0x0, 0x0, r0, 0x3) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = getpid() rt_tgsigqueueinfo(r3, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x6}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018da913047140000000100000000000000c518c7223a9da998cd4379197ece863630f9fcd0c9698f38295e907b72061f0007006273effec1598bd6d9f08fcb144dec3d0747bae0a845542cbe63a0b8563744a3c2e894e032ada40413a52aa38856d4f89f19a61277a250933c6236ef7b9c2adc9e58dfedf7fb4292658bc5bcf483b81e071bd2c3a924b810edc46f013c12d27f4a85a4db46f08a018be3aebf120a0400000000000000c51c9814ed42732fe927b74b6e2b9adaeac3e4fa00026f60efdc2af69fe5ee4b21b58303", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x3f, 0x0, 0x0, 0x5, 0x0, 0x8, 0x2000, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x1000, 0x6, 0x9, 0x80000001, 0x7, 0xa5db, 0x0, 0x7, 0x0, 0x7}, r3, 0x3, r4, 0x1) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(r1, &(0x7f0000000340)='net/vlan/vlan1\x00') readv(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/75, 0x4b}, {&(0x7f00000016c0)=""/109, 0x6d}], 0x3) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000180)) setsockopt$sock_timeval(r5, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 16:41:09 executing program 2: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x9, 0x7, 0xaa, 0x5, 0x0, 0x100000000, 0x20420, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7ff, 0x1, @perf_config_ext={0x5f, 0x1}, 0x8, 0x5, 0x6e, 0x2, 0x0, 0x4, 0x3, 0x0, 0x8bc, 0x0, 0x47d0}, 0x0, 0x0, r0, 0x3) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = getpid() rt_tgsigqueueinfo(r3, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x6}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018da913047140000000100000000000000c518c7223a9da998cd4379197ece863630f9fcd0c9698f38295e907b72061f0007006273effec1598bd6d9f08fcb144dec3d0747bae0a845542cbe63a0b8563744a3c2e894e032ada40413a52aa38856d4f89f19a61277a250933c6236ef7b9c2adc9e58dfedf7fb4292658bc5bcf483b81e071bd2c3a924b810edc46f013c12d27f4a85a4db46f08a018be3aebf120a0400000000000000c51c9814ed42732fe927b74b6e2b9adaeac3e4fa00026f60efdc2af69fe5ee4b21b58303", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x3f, 0x0, 0x0, 0x5, 0x0, 0x8, 0x2000, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x1000, 0x6, 0x9, 0x80000001, 0x7, 0xa5db, 0x0, 0x7, 0x0, 0x7}, r3, 0x3, r4, 0x1) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(r1, &(0x7f0000000340)='net/vlan/vlan1\x00') readv(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/75, 0x4b}, {&(0x7f00000016c0)=""/109, 0x6d}], 0x3) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000180)) setsockopt$sock_timeval(r5, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 16:41:09 executing program 0: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x9, 0x7, 0xaa, 0x5, 0x0, 0x100000000, 0x20420, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7ff, 0x1, @perf_config_ext={0x5f, 0x1}, 0x8, 0x5, 0x6e, 0x2, 0x0, 0x4, 0x3, 0x0, 0x8bc, 0x0, 0x47d0}, 0x0, 0x0, r0, 0x3) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = getpid() rt_tgsigqueueinfo(r3, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x6}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018da913047140000000100000000000000c518c7223a9da998cd4379197ece863630f9fcd0c9698f38295e907b72061f0007006273effec1598bd6d9f08fcb144dec3d0747bae0a845542cbe63a0b8563744a3c2e894e032ada40413a52aa38856d4f89f19a61277a250933c6236ef7b9c2adc9e58dfedf7fb4292658bc5bcf483b81e071bd2c3a924b810edc46f013c12d27f4a85a4db46f08a018be3aebf120a0400000000000000c51c9814ed42732fe927b74b6e2b9adaeac3e4fa00026f60efdc2af69fe5ee4b21b58303", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x3f, 0x0, 0x0, 0x5, 0x0, 0x8, 0x2000, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x1000, 0x6, 0x9, 0x80000001, 0x7, 0xa5db, 0x0, 0x7, 0x0, 0x7}, r3, 0x3, r4, 0x1) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(r1, &(0x7f0000000340)='net/vlan/vlan1\x00') readv(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/75, 0x4b}, {&(0x7f00000016c0)=""/109, 0x6d}], 0x3) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000180)) setsockopt$sock_timeval(r5, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 16:41:09 executing program 7: syz_mount_image$msdos(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='nodots,fowner=', @ANYRESDEC, @ANYBLOB="2c6f626a5f747970653d2c6f626a5f726f6c653d27cb2e5b643d000000000000ff03000000000000000010986f802985c04a24547fd8b41e42785ecbaaecb73bd55bcad31274dd3af2ac7a6652246e11fb865c096134f05fa120b664c7", @ANYRESDEC=0xee00, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(r1, &(0x7f0000000040)='./file1\x00', 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r2}}, './file0\x00'}) 16:41:09 executing program 4: syz_mount_image$msdos(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='nodots,fowner=', @ANYRESDEC, @ANYBLOB="2c6f626a5f747970653d2c6f626a5f726f6c653d27cb2e5b643d000000000000ff03000000000000000010986f802985c04a24547fd8b41e42785ecbaaecb73bd55bcad31274dd3af2ac7a6652246e11fb865c096134f05fa120b664c7", @ANYRESDEC=0xee00, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(r1, &(0x7f0000000040)='./file1\x00', 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r2}}, './file0\x00'}) 16:41:09 executing program 3: syz_mount_image$msdos(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='nodots,fowner=', @ANYRESDEC, @ANYBLOB="2c6f626a5f747970653d2c6f626a5f726f6c653d27cb2e5b643d000000000000ff03000000000000000010986f802985c04a24547fd8b41e42785ecbaaecb73bd55bcad31274dd3af2ac7a6652246e11fb865c096134f05fa120b664c7", @ANYRESDEC=0xee00, @ANYBLOB]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(r1, &(0x7f0000000040)='./file1\x00', 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r2}}, './file0\x00'}) 16:41:09 executing program 1: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x9, 0x7, 0xaa, 0x5, 0x0, 0x100000000, 0x20420, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7ff, 0x1, @perf_config_ext={0x5f, 0x1}, 0x8, 0x5, 0x6e, 0x2, 0x0, 0x4, 0x3, 0x0, 0x8bc, 0x0, 0x47d0}, 0x0, 0x0, r0, 0x3) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = getpid() rt_tgsigqueueinfo(r3, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x6}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018da913047140000000100000000000000c518c7223a9da998cd4379197ece863630f9fcd0c9698f38295e907b72061f0007006273effec1598bd6d9f08fcb144dec3d0747bae0a845542cbe63a0b8563744a3c2e894e032ada40413a52aa38856d4f89f19a61277a250933c6236ef7b9c2adc9e58dfedf7fb4292658bc5bcf483b81e071bd2c3a924b810edc46f013c12d27f4a85a4db46f08a018be3aebf120a0400000000000000c51c9814ed42732fe927b74b6e2b9adaeac3e4fa00026f60efdc2af69fe5ee4b21b58303", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x3f, 0x0, 0x0, 0x5, 0x0, 0x8, 0x2000, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x1000, 0x6, 0x9, 0x80000001, 0x7, 0xa5db, 0x0, 0x7, 0x0, 0x7}, r3, 0x3, r4, 0x1) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(r1, &(0x7f0000000340)='net/vlan/vlan1\x00') readv(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/75, 0x4b}, {&(0x7f00000016c0)=""/109, 0x6d}], 0x3) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000180)) setsockopt$sock_timeval(r5, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 16:41:09 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x0, &(0x7f0000000340)) 16:41:09 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x2c, r1, 0x321, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5}]]}, 0x2c}}, 0x0) [ 358.045456] netlink: 'syz-executor.6': attribute type 8 has an invalid length. [ 358.055366] netlink: 'syz-executor.6': attribute type 8 has an invalid length. 16:41:09 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) write$bt_hci(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="0106200f0300ff01091f0800000000000005026d469b705371df48fd02ea5385b47f0255c07d0500000000000000ad3036e46ab5761157560311575e563c9091dbefde4f2b813edf56ee765212a206a7f9"], 0x13) r3 = getpid() r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x8008662c, &(0x7f0000000040)={0x10}) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000040)) r5 = fork() kcmp(r3, r5, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 16:41:09 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x80000) 16:41:09 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x2c, r1, 0x321, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5}]]}, 0x2c}}, 0x0) 16:41:09 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000001a00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) [ 358.172476] netlink: 'syz-executor.6': attribute type 8 has an invalid length. 16:41:10 executing program 5: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x9, 0x7, 0xaa, 0x5, 0x0, 0x100000000, 0x20420, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7ff, 0x1, @perf_config_ext={0x5f, 0x1}, 0x8, 0x5, 0x6e, 0x2, 0x0, 0x4, 0x3, 0x0, 0x8bc, 0x0, 0x47d0}, 0x0, 0x0, r0, 0x3) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = getpid() rt_tgsigqueueinfo(r3, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x6}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018da913047140000000100000000000000c518c7223a9da998cd4379197ece863630f9fcd0c9698f38295e907b72061f0007006273effec1598bd6d9f08fcb144dec3d0747bae0a845542cbe63a0b8563744a3c2e894e032ada40413a52aa38856d4f89f19a61277a250933c6236ef7b9c2adc9e58dfedf7fb4292658bc5bcf483b81e071bd2c3a924b810edc46f013c12d27f4a85a4db46f08a018be3aebf120a0400000000000000c51c9814ed42732fe927b74b6e2b9adaeac3e4fa00026f60efdc2af69fe5ee4b21b58303", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x3f, 0x0, 0x0, 0x5, 0x0, 0x8, 0x2000, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x1000, 0x6, 0x9, 0x80000001, 0x7, 0xa5db, 0x0, 0x7, 0x0, 0x7}, r3, 0x3, r4, 0x1) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(r1, &(0x7f0000000340)='net/vlan/vlan1\x00') readv(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/75, 0x4b}, {&(0x7f00000016c0)=""/109, 0x6d}], 0x3) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000180)) setsockopt$sock_timeval(r5, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 16:41:10 executing program 2: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x9, 0x7, 0xaa, 0x5, 0x0, 0x100000000, 0x20420, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7ff, 0x1, @perf_config_ext={0x5f, 0x1}, 0x8, 0x5, 0x6e, 0x2, 0x0, 0x4, 0x3, 0x0, 0x8bc, 0x0, 0x47d0}, 0x0, 0x0, r0, 0x3) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = getpid() rt_tgsigqueueinfo(r3, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x6}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018da913047140000000100000000000000c518c7223a9da998cd4379197ece863630f9fcd0c9698f38295e907b72061f0007006273effec1598bd6d9f08fcb144dec3d0747bae0a845542cbe63a0b8563744a3c2e894e032ada40413a52aa38856d4f89f19a61277a250933c6236ef7b9c2adc9e58dfedf7fb4292658bc5bcf483b81e071bd2c3a924b810edc46f013c12d27f4a85a4db46f08a018be3aebf120a0400000000000000c51c9814ed42732fe927b74b6e2b9adaeac3e4fa00026f60efdc2af69fe5ee4b21b58303", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x3f, 0x0, 0x0, 0x5, 0x0, 0x8, 0x2000, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x1000, 0x6, 0x9, 0x80000001, 0x7, 0xa5db, 0x0, 0x7, 0x0, 0x7}, r3, 0x3, r4, 0x1) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(r1, &(0x7f0000000340)='net/vlan/vlan1\x00') readv(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/75, 0x4b}, {&(0x7f00000016c0)=""/109, 0x6d}], 0x3) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000180)) setsockopt$sock_timeval(r5, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 16:41:10 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x80000) 16:41:10 executing program 0: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x9, 0x7, 0xaa, 0x5, 0x0, 0x100000000, 0x20420, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7ff, 0x1, @perf_config_ext={0x5f, 0x1}, 0x8, 0x5, 0x6e, 0x2, 0x0, 0x4, 0x3, 0x0, 0x8bc, 0x0, 0x47d0}, 0x0, 0x0, r0, 0x3) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = getpid() rt_tgsigqueueinfo(r3, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x6}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018da913047140000000100000000000000c518c7223a9da998cd4379197ece863630f9fcd0c9698f38295e907b72061f0007006273effec1598bd6d9f08fcb144dec3d0747bae0a845542cbe63a0b8563744a3c2e894e032ada40413a52aa38856d4f89f19a61277a250933c6236ef7b9c2adc9e58dfedf7fb4292658bc5bcf483b81e071bd2c3a924b810edc46f013c12d27f4a85a4db46f08a018be3aebf120a0400000000000000c51c9814ed42732fe927b74b6e2b9adaeac3e4fa00026f60efdc2af69fe5ee4b21b58303", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x3f, 0x0, 0x0, 0x5, 0x0, 0x8, 0x2000, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x1000, 0x6, 0x9, 0x80000001, 0x7, 0xa5db, 0x0, 0x7, 0x0, 0x7}, r3, 0x3, r4, 0x1) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(r1, &(0x7f0000000340)='net/vlan/vlan1\x00') readv(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/75, 0x4b}, {&(0x7f00000016c0)=""/109, 0x6d}], 0x3) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000180)) setsockopt$sock_timeval(r5, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 16:41:10 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x2c, r1, 0x321, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5}]]}, 0x2c}}, 0x0) 16:41:10 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000001a00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) [ 358.525354] netlink: 'syz-executor.6': attribute type 8 has an invalid length. 16:41:10 executing program 1: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x9, 0x7, 0xaa, 0x5, 0x0, 0x100000000, 0x20420, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7ff, 0x1, @perf_config_ext={0x5f, 0x1}, 0x8, 0x5, 0x6e, 0x2, 0x0, 0x4, 0x3, 0x0, 0x8bc, 0x0, 0x47d0}, 0x0, 0x0, r0, 0x3) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = getpid() rt_tgsigqueueinfo(r3, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x6}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018da913047140000000100000000000000c518c7223a9da998cd4379197ece863630f9fcd0c9698f38295e907b72061f0007006273effec1598bd6d9f08fcb144dec3d0747bae0a845542cbe63a0b8563744a3c2e894e032ada40413a52aa38856d4f89f19a61277a250933c6236ef7b9c2adc9e58dfedf7fb4292658bc5bcf483b81e071bd2c3a924b810edc46f013c12d27f4a85a4db46f08a018be3aebf120a0400000000000000c51c9814ed42732fe927b74b6e2b9adaeac3e4fa00026f60efdc2af69fe5ee4b21b58303", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x3f, 0x0, 0x0, 0x5, 0x0, 0x8, 0x2000, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x1000, 0x6, 0x9, 0x80000001, 0x7, 0xa5db, 0x0, 0x7, 0x0, 0x7}, r3, 0x3, r4, 0x1) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(r1, &(0x7f0000000340)='net/vlan/vlan1\x00') readv(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/75, 0x4b}, {&(0x7f00000016c0)=""/109, 0x6d}], 0x3) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000180)) setsockopt$sock_timeval(r5, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 16:41:10 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) write$bt_hci(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="0106200f0300ff01091f0800000000000005026d469b705371df48fd02ea5385b47f0255c07d0500000000000000ad3036e46ab5761157560311575e563c9091dbefde4f2b813edf56ee765212a206a7f9"], 0x13) r3 = getpid() r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x8008662c, &(0x7f0000000040)={0x10}) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000040)) r5 = fork() kcmp(r3, r5, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 16:41:10 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x2c, r1, 0x321, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5}]]}, 0x2c}}, 0x0) [ 358.641944] netlink: 'syz-executor.6': attribute type 8 has an invalid length. 16:41:11 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x80000) 16:41:11 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000001a00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) 16:41:11 executing program 6: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) write$bt_hci(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="0106200f0300ff01091f0800000000000005026d469b705371df48fd02ea5385b47f0255c07d0500000000000000ad3036e46ab5761157560311575e563c9091dbefde4f2b813edf56ee765212a206a7f9"], 0x13) r3 = getpid() r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x8008662c, &(0x7f0000000040)={0x10}) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000040)) r5 = fork() kcmp(r3, r5, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 16:41:11 executing program 1: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x9, 0x7, 0xaa, 0x5, 0x0, 0x100000000, 0x20420, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7ff, 0x1, @perf_config_ext={0x5f, 0x1}, 0x8, 0x5, 0x6e, 0x2, 0x0, 0x4, 0x3, 0x0, 0x8bc, 0x0, 0x47d0}, 0x0, 0x0, r0, 0x3) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = getpid() rt_tgsigqueueinfo(r3, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x6}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018da913047140000000100000000000000c518c7223a9da998cd4379197ece863630f9fcd0c9698f38295e907b72061f0007006273effec1598bd6d9f08fcb144dec3d0747bae0a845542cbe63a0b8563744a3c2e894e032ada40413a52aa38856d4f89f19a61277a250933c6236ef7b9c2adc9e58dfedf7fb4292658bc5bcf483b81e071bd2c3a924b810edc46f013c12d27f4a85a4db46f08a018be3aebf120a0400000000000000c51c9814ed42732fe927b74b6e2b9adaeac3e4fa00026f60efdc2af69fe5ee4b21b58303", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x3f, 0x0, 0x0, 0x5, 0x0, 0x8, 0x2000, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x1000, 0x6, 0x9, 0x80000001, 0x7, 0xa5db, 0x0, 0x7, 0x0, 0x7}, r3, 0x3, r4, 0x1) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(r1, &(0x7f0000000340)='net/vlan/vlan1\x00') readv(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/75, 0x4b}, {&(0x7f00000016c0)=""/109, 0x6d}], 0x3) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000180)) setsockopt$sock_timeval(r5, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 16:41:11 executing program 5: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x9, 0x7, 0xaa, 0x5, 0x0, 0x100000000, 0x20420, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7ff, 0x1, @perf_config_ext={0x5f, 0x1}, 0x8, 0x5, 0x6e, 0x2, 0x0, 0x4, 0x3, 0x0, 0x8bc, 0x0, 0x47d0}, 0x0, 0x0, r0, 0x3) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = getpid() rt_tgsigqueueinfo(r3, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x6}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018da913047140000000100000000000000c518c7223a9da998cd4379197ece863630f9fcd0c9698f38295e907b72061f0007006273effec1598bd6d9f08fcb144dec3d0747bae0a845542cbe63a0b8563744a3c2e894e032ada40413a52aa38856d4f89f19a61277a250933c6236ef7b9c2adc9e58dfedf7fb4292658bc5bcf483b81e071bd2c3a924b810edc46f013c12d27f4a85a4db46f08a018be3aebf120a0400000000000000c51c9814ed42732fe927b74b6e2b9adaeac3e4fa00026f60efdc2af69fe5ee4b21b58303", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x3f, 0x0, 0x0, 0x5, 0x0, 0x8, 0x2000, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x1000, 0x6, 0x9, 0x80000001, 0x7, 0xa5db, 0x0, 0x7, 0x0, 0x7}, r3, 0x3, r4, 0x1) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(r1, &(0x7f0000000340)='net/vlan/vlan1\x00') readv(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/75, 0x4b}, {&(0x7f00000016c0)=""/109, 0x6d}], 0x3) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000180)) setsockopt$sock_timeval(r5, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 16:41:11 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) write$bt_hci(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="0106200f0300ff01091f0800000000000005026d469b705371df48fd02ea5385b47f0255c07d0500000000000000ad3036e46ab5761157560311575e563c9091dbefde4f2b813edf56ee765212a206a7f9"], 0x13) r3 = getpid() r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x8008662c, &(0x7f0000000040)={0x10}) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000040)) r5 = fork() kcmp(r3, r5, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 16:41:11 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) write$bt_hci(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="0106200f0300ff01091f0800000000000005026d469b705371df48fd02ea5385b47f0255c07d0500000000000000ad3036e46ab5761157560311575e563c9091dbefde4f2b813edf56ee765212a206a7f9"], 0x13) r3 = getpid() r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x8008662c, &(0x7f0000000040)={0x10}) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000040)) r5 = fork() kcmp(r3, r5, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 16:41:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) write$bt_hci(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="0106200f0300ff01091f0800000000000005026d469b705371df48fd02ea5385b47f0255c07d0500000000000000ad3036e46ab5761157560311575e563c9091dbefde4f2b813edf56ee765212a206a7f9"], 0x13) r3 = getpid() r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x8008662c, &(0x7f0000000040)={0x10}) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000040)) r5 = fork() kcmp(r3, r5, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 16:41:11 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x80000) 16:41:11 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000001a00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) 16:41:11 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000180)={&(0x7f0000000080)="b98b8f487d0bc7e7a364572de5f9807d15a7d35aec15ad40c8c733270af7f7e502b59854116435c9b6a04c9a7e96562e6e8ad295b194263376c189446f9113b88b71d27c170aa86d69388f24e2bf4279b60dd37d9b7d2df13e2ad5031813837dc0a0ee32447fe4adc716cfef0084143f0e301bc1a96d504ac59be3662421c3c0", 0x80}}, 0x0) 16:41:11 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000040)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x12, 0x0, 0x0, @u32}]}]}, 0x28}], 0x1}, 0x0) [ 360.205524] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 16:41:12 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000180)={&(0x7f0000000080)="b98b8f487d0bc7e7a364572de5f9807d15a7d35aec15ad40c8c733270af7f7e502b59854116435c9b6a04c9a7e96562e6e8ad295b194263376c189446f9113b88b71d27c170aa86d69388f24e2bf4279b60dd37d9b7d2df13e2ad5031813837dc0a0ee32447fe4adc716cfef0084143f0e301bc1a96d504ac59be3662421c3c0", 0x80}}, 0x0) 16:41:12 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) write$bt_hci(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="0106200f0300ff01091f0800000000000005026d469b705371df48fd02ea5385b47f0255c07d0500000000000000ad3036e46ab5761157560311575e563c9091dbefde4f2b813edf56ee765212a206a7f9"], 0x13) r3 = getpid() r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x8008662c, &(0x7f0000000040)={0x10}) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000040)) r5 = fork() kcmp(r3, r5, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 16:41:12 executing program 4: msgrcv(0x0, 0x0, 0x13, 0x8000000000000000, 0x0) 16:41:12 executing program 6: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) write$bt_hci(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="0106200f0300ff01091f0800000000000005026d469b705371df48fd02ea5385b47f0255c07d0500000000000000ad3036e46ab5761157560311575e563c9091dbefde4f2b813edf56ee765212a206a7f9"], 0x13) r3 = getpid() r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x8008662c, &(0x7f0000000040)={0x10}) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000040)) r5 = fork() kcmp(r3, r5, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 16:41:12 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) write$bt_hci(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="0106200f0300ff01091f0800000000000005026d469b705371df48fd02ea5385b47f0255c07d0500000000000000ad3036e46ab5761157560311575e563c9091dbefde4f2b813edf56ee765212a206a7f9"], 0x13) r3 = getpid() r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x8008662c, &(0x7f0000000040)={0x10}) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000040)) r5 = fork() kcmp(r3, r5, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 16:41:12 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000040)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x12, 0x0, 0x0, @u32}]}]}, 0x28}], 0x1}, 0x0) 16:41:12 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) write$bt_hci(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="0106200f0300ff01091f0800000000000005026d469b705371df48fd02ea5385b47f0255c07d0500000000000000ad3036e46ab5761157560311575e563c9091dbefde4f2b813edf56ee765212a206a7f9"], 0x13) r3 = getpid() r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x8008662c, &(0x7f0000000040)={0x10}) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000040)) r5 = fork() kcmp(r3, r5, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 16:41:12 executing program 5: syz_mount_image$nfs(&(0x7f0000003c40), &(0x7f0000003c80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000050c0)={[{'\x02\x00\x00\x00ntext'}]}) [ 361.251567] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 16:41:12 executing program 4: msgrcv(0x0, 0x0, 0x13, 0x8000000000000000, 0x0) 16:41:12 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000040)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x12, 0x0, 0x0, @u32}]}]}, 0x28}], 0x1}, 0x0) 16:41:12 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000180)={&(0x7f0000000080)="b98b8f487d0bc7e7a364572de5f9807d15a7d35aec15ad40c8c733270af7f7e502b59854116435c9b6a04c9a7e96562e6e8ad295b194263376c189446f9113b88b71d27c170aa86d69388f24e2bf4279b60dd37d9b7d2df13e2ad5031813837dc0a0ee32447fe4adc716cfef0084143f0e301bc1a96d504ac59be3662421c3c0", 0x80}}, 0x0) 16:41:12 executing program 5: syz_mount_image$nfs(&(0x7f0000003c40), &(0x7f0000003c80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000050c0)={[{'\x02\x00\x00\x00ntext'}]}) [ 361.373243] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 16:41:12 executing program 4: msgrcv(0x0, 0x0, 0x13, 0x8000000000000000, 0x0) 16:41:13 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000040)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x12, 0x0, 0x0, @u32}]}]}, 0x28}], 0x1}, 0x0) 16:41:13 executing program 5: syz_mount_image$nfs(&(0x7f0000003c40), &(0x7f0000003c80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000050c0)={[{'\x02\x00\x00\x00ntext'}]}) 16:41:13 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000180)={&(0x7f0000000080)="b98b8f487d0bc7e7a364572de5f9807d15a7d35aec15ad40c8c733270af7f7e502b59854116435c9b6a04c9a7e96562e6e8ad295b194263376c189446f9113b88b71d27c170aa86d69388f24e2bf4279b60dd37d9b7d2df13e2ad5031813837dc0a0ee32447fe4adc716cfef0084143f0e301bc1a96d504ac59be3662421c3c0", 0x80}}, 0x0) 16:41:13 executing program 4: msgrcv(0x0, 0x0, 0x13, 0x8000000000000000, 0x0) [ 361.483454] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 16:41:13 executing program 5: syz_mount_image$nfs(&(0x7f0000003c40), &(0x7f0000003c80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000050c0)={[{'\x02\x00\x00\x00ntext'}]}) 16:41:13 executing program 4: mlock(&(0x7f0000fed000/0x11000)=nil, 0x11000) mprotect(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x2) 16:41:13 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) write$bt_hci(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="0106200f0300ff01091f0800000000000005026d469b705371df48fd02ea5385b47f0255c07d0500000000000000ad3036e46ab5761157560311575e563c9091dbefde4f2b813edf56ee765212a206a7f9"], 0x13) r3 = getpid() r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x8008662c, &(0x7f0000000040)={0x10}) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000040)) r5 = fork() kcmp(r3, r5, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 16:41:13 executing program 1: mknod$loop(&(0x7f0000000040)='./file1\x00', 0x2000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 16:41:13 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) write$bt_hci(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="0106200f0300ff01091f0800000000000005026d469b705371df48fd02ea5385b47f0255c07d0500000000000000ad3036e46ab5761157560311575e563c9091dbefde4f2b813edf56ee765212a206a7f9"], 0x13) r3 = getpid() r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x8008662c, &(0x7f0000000040)={0x10}) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000040)) r5 = fork() kcmp(r3, r5, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 16:41:13 executing program 6: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) write$bt_hci(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="0106200f0300ff01091f0800000000000005026d469b705371df48fd02ea5385b47f0255c07d0500000000000000ad3036e46ab5761157560311575e563c9091dbefde4f2b813edf56ee765212a206a7f9"], 0x13) r3 = getpid() r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x8008662c, &(0x7f0000000040)={0x10}) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000040)) r5 = fork() kcmp(r3, r5, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 16:41:13 executing program 7: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e520d"], 0x55) 16:41:13 executing program 7: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e520d"], 0x55) 16:41:13 executing program 4: mlock(&(0x7f0000fed000/0x11000)=nil, 0x11000) mprotect(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x2) 16:41:13 executing program 1: mknod$loop(&(0x7f0000000040)='./file1\x00', 0x2000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 16:41:13 executing program 4: mlock(&(0x7f0000fed000/0x11000)=nil, 0x11000) mprotect(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x2) 16:41:13 executing program 7: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e520d"], 0x55) 16:41:13 executing program 1: mknod$loop(&(0x7f0000000040)='./file1\x00', 0x2000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 16:41:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000100)=0x1, 0x4) 16:41:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000000080)={0x2c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0xa, 0x0, 0x0, @binary='{'}]}]}, 0x2c}], 0x1}, 0x0) 16:41:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000000080)={0x2c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0xa, 0x0, 0x0, @binary='{'}]}]}, 0x2c}], 0x1}, 0x0) 16:41:13 executing program 4: mlock(&(0x7f0000fed000/0x11000)=nil, 0x11000) mprotect(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x2) 16:41:13 executing program 7: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e520d"], 0x55) 16:41:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) 16:41:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000000080)={0x2c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0xa, 0x0, 0x0, @binary='{'}]}]}, 0x2c}], 0x1}, 0x0) 16:41:14 executing program 4: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)=ANY=[@ANYBLOB="010088f6202a56420eb32a8539393fb04a2062ce0332e6130eb376e50018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) clone3(&(0x7f0000004c00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16:41:14 executing program 0: io_setup(0x380000, &(0x7f00000001c0)) 16:41:14 executing program 7: keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x1}) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_secret(0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000100)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1dc}], 0x1) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0)=0xffffffffffffffff, 0x12) syncfs(0xffffffffffffffff) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000680)={0x7, 0x20, 0x1, 0x20, 0x2c, "409334394a845720775f6c26427eda19eac4ad", 0x8, 0x15a}) open_tree(r1, &(0x7f00000006c0)='./file0\x00', 0x101001) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x40095505, 0x0) 16:41:14 executing program 1: mknod$loop(&(0x7f0000000040)='./file1\x00', 0x2000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 16:41:14 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x1) bind$802154_dgram(r0, &(0x7f0000000140)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb197}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000000000000000400bf003e0008026d1d59b13c9f39d01efb4f42cb664c95d3633dc0d9172ab069fc35f828deec8afcf8edd8994f1d253664cd2b8198b68e16d49325927f92a4662ca20f89513f1ffdf8af06b139e3d331913a0ba8d9cd52afd48e9b4e61a23effa1af361202a6b5ef6742a2a43f4017b338cfaf9c999e64ad30e75a061599f891315ed914b22589"], 0x125) read(r1, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)={{0x108, 0x0, 0x5, 0x3b4, 0x0, 0x81}, "3012338810ed1b902a01f9"}, 0x2b) socket$netlink(0x10, 0x3, 0x15) 16:41:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000000080)={0x2c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0xa, 0x0, 0x0, @binary='{'}]}]}, 0x2c}], 0x1}, 0x0) 16:41:14 executing program 0: io_setup(0x380000, &(0x7f00000001c0)) 16:41:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) 16:41:14 executing program 4: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)=ANY=[@ANYBLOB="010088f6202a56420eb32a8539393fb04a2062ce0332e6130eb376e50018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) clone3(&(0x7f0000004c00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16:41:14 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x8971, &(0x7f0000001000)={'sit0\x00', 0x0}) [ 362.553811] sg_write: data in/out 912/1 bytes for SCSI command 0x10-- guessing data in; [ 362.553811] program syz-executor.6 not setting count and/or reply_len properly [ 362.555928] ------------[ cut here ]------------ [ 362.555960] WARNING: CPU: 1 PID: 12134 at lib/iov_iter.c:629 _copy_from_iter+0x2bf/0x1170 [ 362.556037] Modules linked in: [ 362.556668] CPU: 1 PID: 12134 Comm: syz-executor.6 Not tainted 6.2.0-rc5-next-20230123 #1 [ 362.556708] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 16:41:14 executing program 0: io_setup(0x380000, &(0x7f00000001c0)) [ 362.556727] RIP: 0010:_copy_from_iter+0x2bf/0x1170 [ 362.556768] Code: 5d 41 5e 41 5f e9 35 4a 33 02 e8 7c c3 37 ff be 79 02 00 00 48 c7 c7 80 e4 9e 84 e8 5b 5f 5b ff e9 48 fe ff ff e8 61 c3 37 ff <0f> 0b 45 31 f6 eb 87 e8 55 c3 37 ff 31 ff 89 ee e8 1c bf 37 ff 40 16:41:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 362.556811] RSP: 0018:ffff88802f897608 EFLAGS: 00010212 [ 362.556890] RAX: 00000000000009a3 RBX: 0000000000000000 RCX: ffffc9000982b000 [ 362.556920] RDX: 0000000000040000 RSI: ffffffff8211b5af RDI: 0000000000000001 [ 362.556940] RBP: 0000000000000390 R08: 0000000000000001 R09: 0000000000000000 [ 362.556960] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88802f897838 [ 362.556980] R13: ffffea00010aee00 R14: 0000000000000390 R15: ffff88802f897838 [ 362.557017] FS: 00007fa77fd29700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 362.557059] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 362.557091] CR2: 00007f5bf0683004 CR3: 00000000411cc000 CR4: 0000000000350ee0 [ 362.557149] Call Trace: [ 362.557178] [ 362.557220] ? lockdep_hardirqs_on+0x7d/0x100 [ 362.557287] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 362.557369] ? __pfx__copy_from_iter+0x10/0x10 [ 362.557467] ? bio_add_pc_page+0xbc/0x100 [ 362.557561] copy_page_from_iter+0x251/0x430 [ 362.557638] blk_rq_map_user_iov+0xb41/0x16c0 [ 362.557717] ? lock_is_held_type+0x31/0x130 [ 362.557798] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 362.557838] ? sg_common_write.constprop.0+0xc51/0x15f0 [ 362.557918] ? trace_contention_end+0xfc/0x140 [ 362.557988] ? __mutex_lock+0x231/0x14c0 [ 362.558078] blk_rq_map_user_io+0x1d1/0x200 [ 362.558159] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 362.558208] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 362.558357] sg_common_write.constprop.0+0xd8d/0x15f0 [ 362.558477] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 362.558541] ? _raw_spin_unlock_irqrestore+0x37/0x60 [ 362.558649] sg_write.part.0+0x698/0xa90 [ 362.558718] ? __pfx_sg_write.part.0+0x10/0x10 [ 362.558749] ? lock_is_held_type+0xdb/0x130 [ 362.558817] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 362.558868] ? lockdep_hardirqs_on+0x7d/0x100 [ 362.558917] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 362.559040] ? lock_is_held_type+0xdb/0x130 [ 362.559178] ? inode_security+0x105/0x140 [ 362.559238] ? avc_policy_seqno+0xd/0x70 [ 362.559298] ? selinux_file_permission+0x96/0x520 [ 362.559399] sg_write+0x8d/0xe0 [ 362.559458] vfs_write+0x2cf/0xdd0 [ 362.559497] ? __pfx_sg_write+0x10/0x10 [ 362.559560] ? __pfx_vfs_write+0x10/0x10 [ 362.559597] ? __pfx___fget_files+0x10/0x10 [ 362.559671] ? __fget_files+0x270/0x480 [ 362.559761] ? __fget_light+0xe5/0x280 [ 362.559841] ksys_write+0x12b/0x260 [ 362.559887] ? __pfx_ksys_write+0x10/0x10 [ 362.559978] ? syscall_enter_from_user_mode+0x2b/0x50 [ 362.560058] do_syscall_64+0x3f/0x90 [ 362.560158] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 362.560208] RIP: 0033:0x7fa7827b3b19 [ 362.560237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 362.560270] RSP: 002b:00007fa77fd29188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 362.560321] RAX: ffffffffffffffda RBX: 00007fa7828c6f60 RCX: 00007fa7827b3b19 [ 362.560341] RDX: 000000000000002b RSI: 0000000020000380 RDI: 0000000000000007 [ 362.560360] RBP: 00007fa78280df6d R08: 0000000000000000 R09: 0000000000000000 [ 362.560380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.560400] R13: 00007ffc840fbb4f R14: 00007fa77fd29300 R15: 0000000000022000 [ 362.560538] [ 362.560578] irq event stamp: 3743 [ 362.560611] hardirqs last enabled at (3755): [] vprintk_emit+0x50e/0x560 [ 362.560657] hardirqs last disabled at (3762): [] vprintk_emit+0x4a5/0x560 [ 362.560711] softirqs last enabled at (2784): [] irq_exit_rcu+0x11f/0x190 [ 362.560760] softirqs last disabled at (2635): [] irq_exit_rcu+0x11f/0x190 [ 362.560801] ---[ end trace 0000000000000000 ]--- [ 362.724059] sg_write: data in/out 912/1 bytes for SCSI command 0x10-- guessing data in; [ 362.724059] program syz-executor.6 not setting count and/or reply_len properly 16:41:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) 16:41:14 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x8971, &(0x7f0000001000)={'sit0\x00', 0x0}) 16:41:14 executing program 1: r0 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) syz_io_uring_setup(0x614f, &(0x7f0000000180)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r1}, &(0x7f0000fee000/0x4000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) 16:41:14 executing program 4: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)=ANY=[@ANYBLOB="010088f6202a56420eb32a8539393fb04a2062ce0332e6130eb376e50018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) clone3(&(0x7f0000004c00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16:41:14 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x5, 0x1, 0x401}, 0x14}}, 0x0) 16:41:14 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x1) bind$802154_dgram(r0, &(0x7f0000000140)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb197}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000000000000000400bf003e0008026d1d59b13c9f39d01efb4f42cb664c95d3633dc0d9172ab069fc35f828deec8afcf8edd8994f1d253664cd2b8198b68e16d49325927f92a4662ca20f89513f1ffdf8af06b139e3d331913a0ba8d9cd52afd48e9b4e61a23effa1af361202a6b5ef6742a2a43f4017b338cfaf9c999e64ad30e75a061599f891315ed914b22589"], 0x125) read(r1, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)={{0x108, 0x0, 0x5, 0x3b4, 0x0, 0x81}, "3012338810ed1b902a01f9"}, 0x2b) socket$netlink(0x10, 0x3, 0x15) 16:41:14 executing program 7: keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x1}) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_secret(0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000100)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1dc}], 0x1) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0)=0xffffffffffffffff, 0x12) syncfs(0xffffffffffffffff) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000680)={0x7, 0x20, 0x1, 0x20, 0x2c, "409334394a845720775f6c26427eda19eac4ad", 0x8, 0x15a}) open_tree(r1, &(0x7f00000006c0)='./file0\x00', 0x101001) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x40095505, 0x0) 16:41:14 executing program 0: io_setup(0x380000, &(0x7f00000001c0)) 16:41:14 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x5, 0x1, 0x401}, 0x14}}, 0x0) 16:41:14 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x8971, &(0x7f0000001000)={'sit0\x00', 0x0}) [ 362.900018] sg_write: data in/out 912/1 bytes for SCSI command 0x10-- guessing data in; [ 362.900018] program syz-executor.6 not setting count and/or reply_len properly 16:41:14 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x1) bind$802154_dgram(r0, &(0x7f0000000140)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb197}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000000000000000400bf003e0008026d1d59b13c9f39d01efb4f42cb664c95d3633dc0d9172ab069fc35f828deec8afcf8edd8994f1d253664cd2b8198b68e16d49325927f92a4662ca20f89513f1ffdf8af06b139e3d331913a0ba8d9cd52afd48e9b4e61a23effa1af361202a6b5ef6742a2a43f4017b338cfaf9c999e64ad30e75a061599f891315ed914b22589"], 0x125) read(r1, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)={{0x108, 0x0, 0x5, 0x3b4, 0x0, 0x81}, "3012338810ed1b902a01f9"}, 0x2b) socket$netlink(0x10, 0x3, 0x15) 16:41:14 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x1) bind$802154_dgram(r0, &(0x7f0000000140)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb197}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000000000000000400bf003e0008026d1d59b13c9f39d01efb4f42cb664c95d3633dc0d9172ab069fc35f828deec8afcf8edd8994f1d253664cd2b8198b68e16d49325927f92a4662ca20f89513f1ffdf8af06b139e3d331913a0ba8d9cd52afd48e9b4e61a23effa1af361202a6b5ef6742a2a43f4017b338cfaf9c999e64ad30e75a061599f891315ed914b22589"], 0x125) read(r1, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)={{0x108, 0x0, 0x5, 0x3b4, 0x0, 0x81}, "3012338810ed1b902a01f9"}, 0x2b) socket$netlink(0x10, 0x3, 0x15) 16:41:14 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x1) bind$802154_dgram(r0, &(0x7f0000000140)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb197}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000000000000000400bf003e0008026d1d59b13c9f39d01efb4f42cb664c95d3633dc0d9172ab069fc35f828deec8afcf8edd8994f1d253664cd2b8198b68e16d49325927f92a4662ca20f89513f1ffdf8af06b139e3d331913a0ba8d9cd52afd48e9b4e61a23effa1af361202a6b5ef6742a2a43f4017b338cfaf9c999e64ad30e75a061599f891315ed914b22589"], 0x125) read(r1, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)={{0x108, 0x0, 0x5, 0x3b4, 0x0, 0x81}, "3012338810ed1b902a01f9"}, 0x2b) socket$netlink(0x10, 0x3, 0x15) 16:41:14 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x8971, &(0x7f0000001000)={'sit0\x00', 0x0}) 16:41:14 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x5, 0x1, 0x401}, 0x14}}, 0x0) 16:41:14 executing program 4: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)=ANY=[@ANYBLOB="010088f6202a56420eb32a8539393fb04a2062ce0332e6130eb376e50018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) clone3(&(0x7f0000004c00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 362.997968] sg_write: data in/out 912/1 bytes for SCSI command 0x10-- guessing data in; [ 362.997968] program syz-executor.0 not setting count and/or reply_len properly [ 362.999587] sg_write: data in/out 912/1 bytes for SCSI command 0x10-- guessing data in; [ 362.999587] program syz-executor.1 not setting count and/or reply_len properly [ 363.017316] sg_write: data in/out 912/1 bytes for SCSI command 0x10-- guessing data in; [ 363.017316] program syz-executor.5 not setting count and/or reply_len properly 16:41:14 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x5, 0x1, 0x401}, 0x14}}, 0x0) 16:41:14 executing program 7: keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x1}) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_secret(0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000100)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0x1dc}], 0x1) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0)=0xffffffffffffffff, 0x12) syncfs(0xffffffffffffffff) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000680)={0x7, 0x20, 0x1, 0x20, 0x2c, "409334394a845720775f6c26427eda19eac4ad", 0x8, 0x15a}) open_tree(r1, &(0x7f00000006c0)='./file0\x00', 0x101001) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x40095505, 0x0) 16:41:14 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x1) bind$802154_dgram(r0, &(0x7f0000000140)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb197}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000000000000000400bf003e0008026d1d59b13c9f39d01efb4f42cb664c95d3633dc0d9172ab069fc35f828deec8afcf8edd8994f1d253664cd2b8198b68e16d49325927f92a4662ca20f89513f1ffdf8af06b139e3d331913a0ba8d9cd52afd48e9b4e61a23effa1af361202a6b5ef6742a2a43f4017b338cfaf9c999e64ad30e75a061599f891315ed914b22589"], 0x125) read(r1, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)={{0x108, 0x0, 0x5, 0x3b4, 0x0, 0x81}, "3012338810ed1b902a01f9"}, 0x2b) socket$netlink(0x10, 0x3, 0x15) 16:41:14 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x1) bind$802154_dgram(r0, &(0x7f0000000140)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb197}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000000000000000400bf003e0008026d1d59b13c9f39d01efb4f42cb664c95d3633dc0d9172ab069fc35f828deec8afcf8edd8994f1d253664cd2b8198b68e16d49325927f92a4662ca20f89513f1ffdf8af06b139e3d331913a0ba8d9cd52afd48e9b4e61a23effa1af361202a6b5ef6742a2a43f4017b338cfaf9c999e64ad30e75a061599f891315ed914b22589"], 0x125) read(r1, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)={{0x108, 0x0, 0x5, 0x3b4, 0x0, 0x81}, "3012338810ed1b902a01f9"}, 0x2b) socket$netlink(0x10, 0x3, 0x15) 16:41:14 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x1) bind$802154_dgram(r0, &(0x7f0000000140)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb197}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000000000000000400bf003e0008026d1d59b13c9f39d01efb4f42cb664c95d3633dc0d9172ab069fc35f828deec8afcf8edd8994f1d253664cd2b8198b68e16d49325927f92a4662ca20f89513f1ffdf8af06b139e3d331913a0ba8d9cd52afd48e9b4e61a23effa1af361202a6b5ef6742a2a43f4017b338cfaf9c999e64ad30e75a061599f891315ed914b22589"], 0x125) read(r1, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)={{0x108, 0x0, 0x5, 0x3b4, 0x0, 0x81}, "3012338810ed1b902a01f9"}, 0x2b) socket$netlink(0x10, 0x3, 0x15) 16:41:14 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x1) bind$802154_dgram(r0, &(0x7f0000000140)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb197}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000000000000000400bf003e0008026d1d59b13c9f39d01efb4f42cb664c95d3633dc0d9172ab069fc35f828deec8afcf8edd8994f1d253664cd2b8198b68e16d49325927f92a4662ca20f89513f1ffdf8af06b139e3d331913a0ba8d9cd52afd48e9b4e61a23effa1af361202a6b5ef6742a2a43f4017b338cfaf9c999e64ad30e75a061599f891315ed914b22589"], 0x125) read(r1, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)={{0x108, 0x0, 0x5, 0x3b4, 0x0, 0x81}, "3012338810ed1b902a01f9"}, 0x2b) socket$netlink(0x10, 0x3, 0x15) 16:41:14 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) [ 363.264806] sg_write: data in/out 912/1 bytes for SCSI command 0x10-- guessing data in; [ 363.264806] program syz-executor.0 not setting count and/or reply_len properly [ 363.266480] sg_write: data in/out 912/1 bytes for SCSI command 0x10-- guessing data in; [ 363.266480] program syz-executor.6 not setting count and/or reply_len properly [ 363.299732] sg_write: data in/out 912/1 bytes for SCSI command 0x10-- guessing data in; [ 363.299732] program syz-executor.1 not setting count and/or reply_len properly [ 363.312790] sg_write: data in/out 912/1 bytes for SCSI command 0x10-- guessing data in; [ 363.312790] program syz-executor.5 not setting count and/or reply_len properly 16:41:14 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 16:41:14 executing program 4: syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}}}, 0x8) 16:41:14 executing program 2: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x5000) mincore(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001480)='/sys/module/mac80211_hwsim', 0x0, 0x0) getdents(r3, &(0x7f0000001680)=""/87, 0x57) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x10, r3, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x5, 0x7f, 0x2, 0x0, 0x0, 0x4, 0x8000, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x40418, 0xfffffffffffffffa, 0x7, 0x0, 0x2, 0xa44, 0x62, 0x0, 0x7303, 0x0, 0x4b5c}, 0x0, 0x6, r0, 0x2) 16:41:15 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 16:41:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x1) bind$802154_dgram(r0, &(0x7f0000000140)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb197}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000000000000000400bf003e0008026d1d59b13c9f39d01efb4f42cb664c95d3633dc0d9172ab069fc35f828deec8afcf8edd8994f1d253664cd2b8198b68e16d49325927f92a4662ca20f89513f1ffdf8af06b139e3d331913a0ba8d9cd52afd48e9b4e61a23effa1af361202a6b5ef6742a2a43f4017b338cfaf9c999e64ad30e75a061599f891315ed914b22589"], 0x125) read(r1, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)={{0x108, 0x0, 0x5, 0x3b4, 0x0, 0x81}, "3012338810ed1b902a01f9"}, 0x2b) socket$netlink(0x10, 0x3, 0x15) 16:41:15 executing program 4: syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}}}, 0x8) 16:41:15 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x1) bind$802154_dgram(r0, &(0x7f0000000140)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb197}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000000000000000400bf003e0008026d1d59b13c9f39d01efb4f42cb664c95d3633dc0d9172ab069fc35f828deec8afcf8edd8994f1d253664cd2b8198b68e16d49325927f92a4662ca20f89513f1ffdf8af06b139e3d331913a0ba8d9cd52afd48e9b4e61a23effa1af361202a6b5ef6742a2a43f4017b338cfaf9c999e64ad30e75a061599f891315ed914b22589"], 0x125) read(r1, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)={{0x108, 0x0, 0x5, 0x3b4, 0x0, 0x81}, "3012338810ed1b902a01f9"}, 0x2b) socket$netlink(0x10, 0x3, 0x15) 16:41:15 executing program 7: keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x1}) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_secret(0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000100)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="02b2dccad213e1e6cf54b7a797f8f22a47f25b7658fb110b2e76f95b0f318b8fa745e6ffba4414d29a42bfab524bc5bffb17decc4540a6f00b9772f5f9789a9525790df8d989b23530d0a1398f2ad734c7ff47961be476ffeec81efa3d3aa64b8ea329261dfc2e1047a68670f0e5950d6a5414956bddd09e101b5b66e5742fe843413e065e3b86a242b37bc58c68153a45015f6f1ea67762c302e461e0c84bbb7f8d464f5a72d9fad56dac0c5028a4012a93dbc7da640786e3c9898cdd8fe091b166bfcd66e6257abc923ceaf90e994deded3fe8a59c2105f5caf366d32170ef51299dbf441bc3cddda352a2e07375fb44e75fed8082f3e960015d9bcddb0c834feda68d113a9a9fc0d1c30153685caf43b176219b666d74e67b6192cfd8a561c6c4aadcc80ed8c469bc41b028f1db515d699e45ad3379f9b1edb8de4bb2f8615d6716297baac7e45073fcecf31e51ec78c40edd78f245bced04414f849fb961fbbe79ff2ed7c48ec1b5331f9755d7094986fc8da198ce4a12f9ddfb43e565bc4fed618da9a693d03c3e7ec4b3014dfc022103e277c1b12efb03ef8b197f3a931f6cbe238cf8a4e7639b409b4586f66da41b94eed69d52ba9fde5aa1ee774d4e626932dc3511b10ae3bc3e8688a7a83b0467dfbf92951747396735c9", 0x1dc}], 0x1) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0)=0xffffffffffffffff, 0x12) syncfs(0xffffffffffffffff) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000680)={0x7, 0x20, 0x1, 0x20, 0x2c, "409334394a845720775f6c26427eda19eac4ad", 0x8, 0x15a}) open_tree(r1, &(0x7f00000006c0)='./file0\x00', 0x101001) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x40095505, 0x0) 16:41:15 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x1) bind$802154_dgram(r0, &(0x7f0000000140)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb197}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000000000000000400bf003e0008026d1d59b13c9f39d01efb4f42cb664c95d3633dc0d9172ab069fc35f828deec8afcf8edd8994f1d253664cd2b8198b68e16d49325927f92a4662ca20f89513f1ffdf8af06b139e3d331913a0ba8d9cd52afd48e9b4e61a23effa1af361202a6b5ef6742a2a43f4017b338cfaf9c999e64ad30e75a061599f891315ed914b22589"], 0x125) read(r1, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)={{0x108, 0x0, 0x5, 0x3b4, 0x0, 0x81}, "3012338810ed1b902a01f9"}, 0x2b) socket$netlink(0x10, 0x3, 0x15) 16:41:15 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x1) bind$802154_dgram(r0, &(0x7f0000000140)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb197}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000000000000000400bf003e0008026d1d59b13c9f39d01efb4f42cb664c95d3633dc0d9172ab069fc35f828deec8afcf8edd8994f1d253664cd2b8198b68e16d49325927f92a4662ca20f89513f1ffdf8af06b139e3d331913a0ba8d9cd52afd48e9b4e61a23effa1af361202a6b5ef6742a2a43f4017b338cfaf9c999e64ad30e75a061599f891315ed914b22589"], 0x125) read(r1, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)={{0x108, 0x0, 0x5, 0x3b4, 0x0, 0x81}, "3012338810ed1b902a01f9"}, 0x2b) socket$netlink(0x10, 0x3, 0x15) 16:41:15 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 16:41:15 executing program 4: syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}}}, 0x8) 16:41:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 16:41:15 executing program 4: syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}}}, 0x8) [ 363.753846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.062681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:41:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 16:41:15 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') 16:41:15 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x6, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0xfe16) 16:41:15 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x5}, 0x14}}, 0x0) 16:41:15 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x0) 16:41:15 executing program 2: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x5000) mincore(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001480)='/sys/module/mac80211_hwsim', 0x0, 0x0) getdents(r3, &(0x7f0000001680)=""/87, 0x57) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x10, r3, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x5, 0x7f, 0x2, 0x0, 0x0, 0x4, 0x8000, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x40418, 0xfffffffffffffffa, 0x7, 0x0, 0x2, 0xa44, 0x62, 0x0, 0x7303, 0x0, 0x4b5c}, 0x0, 0x6, r0, 0x2) 16:41:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x14, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}, 0x14}], 0x1}, 0x0) 16:41:15 executing program 6: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x5000) mincore(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001480)='/sys/module/mac80211_hwsim', 0x0, 0x0) getdents(r3, &(0x7f0000001680)=""/87, 0x57) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x10, r3, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x5, 0x7f, 0x2, 0x0, 0x0, 0x4, 0x8000, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x40418, 0xfffffffffffffffa, 0x7, 0x0, 0x2, 0xa44, 0x62, 0x0, 0x7303, 0x0, 0x4b5c}, 0x0, 0x6, r0, 0x2) 16:41:15 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x6, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0xfe16) 16:41:15 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x0) 16:41:15 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x5}, 0x14}}, 0x0) 16:41:15 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') 16:41:15 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x0) [ 364.300231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.360287] syz-executor.0 (12266) used greatest stack depth: 23896 bytes left 16:41:16 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x6, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0xfe16) 16:41:16 executing program 2: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x5000) mincore(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001480)='/sys/module/mac80211_hwsim', 0x0, 0x0) getdents(r3, &(0x7f0000001680)=""/87, 0x57) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x10, r3, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x5, 0x7f, 0x2, 0x0, 0x0, 0x4, 0x8000, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x40418, 0xfffffffffffffffa, 0x7, 0x0, 0x2, 0xa44, 0x62, 0x0, 0x7303, 0x0, 0x4b5c}, 0x0, 0x6, r0, 0x2) 16:41:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 16:41:16 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') 16:41:16 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x5}, 0x14}}, 0x0) 16:41:16 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x14, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}, 0x14}], 0x1}, 0x0) 16:41:16 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x0) 16:41:16 executing program 6: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x5000) mincore(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001480)='/sys/module/mac80211_hwsim', 0x0, 0x0) getdents(r3, &(0x7f0000001680)=""/87, 0x57) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x10, r3, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x5, 0x7f, 0x2, 0x0, 0x0, 0x4, 0x8000, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x40418, 0xfffffffffffffffa, 0x7, 0x0, 0x2, 0xa44, 0x62, 0x0, 0x7303, 0x0, 0x4b5c}, 0x0, 0x6, r0, 0x2) 16:41:16 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x5}, 0x14}}, 0x0) 16:41:16 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') 16:41:16 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x6, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0xfe16) 16:41:16 executing program 7: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x5000) mincore(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001480)='/sys/module/mac80211_hwsim', 0x0, 0x0) getdents(r3, &(0x7f0000001680)=""/87, 0x57) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x10, r3, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x5, 0x7f, 0x2, 0x0, 0x0, 0x4, 0x8000, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x40418, 0xfffffffffffffffa, 0x7, 0x0, 0x2, 0xa44, 0x62, 0x0, 0x7303, 0x0, 0x4b5c}, 0x0, 0x6, r0, 0x2) [ 364.755858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:41:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x74, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x57, 0x33, @beacon={@with_ht={{{}, {}, @broadcast}}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x74}}, 0x0) 16:41:16 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x14, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}, 0x14}], 0x1}, 0x0) 16:41:16 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x0, 0xfffffffffffffffe}, 0x0) 16:41:16 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x41, 0x0) migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080)=0xff) 16:41:16 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYRES32=0x0]) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="44b1363000316f2a295b60ec084edba27c136c2d337116e4dda7581f517c13fdfc4599d3603a56b8a0f6e793aeb123b92ce81aa4d3746f16771269e1b8bba0c110c45051ba751ac2e6ac676f68d0069a7bd5cb1834cd1d697fdad0e188bc93a84266fe4e2fecbf9b9ce5634a87b494398952"], 0x59) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0xd2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x211c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x8}, 0x0, 0x80000000, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create(0x400) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) recvmmsg$unix(r1, &(0x7f0000001540)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000400)=[{&(0x7f0000000200)=""/61, 0x3d}, {&(0x7f0000000240)=""/34, 0x22}, {&(0x7f0000000300)=""/121, 0x79}, {&(0x7f0000000080)=""/68, 0xffffffffffffffa0}, {&(0x7f00000003c0)=""/50, 0x32}], 0x5, &(0x7f0000000480)=[@rights={{0x10}}], 0x10}}], 0x1, 0x40000000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000540)={0x40, 0x75, 0x1, {0x35, "78924a3bc580cedadf121214651bb1dcef982602761b140ae9e3398f6ea5bbb053cd780902e34b686068eb58f74c106bdda67f03ea"}}, 0x40) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), 0x4) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000000), 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x228842, 0x120) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x81) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x30, 0x0, &(0x7f0000000900)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000001580)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) 16:41:16 executing program 7: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x5000) mincore(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001480)='/sys/module/mac80211_hwsim', 0x0, 0x0) getdents(r3, &(0x7f0000001680)=""/87, 0x57) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x10, r3, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x5, 0x7f, 0x2, 0x0, 0x0, 0x4, 0x8000, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x40418, 0xfffffffffffffffa, 0x7, 0x0, 0x2, 0xa44, 0x62, 0x0, 0x7303, 0x0, 0x4b5c}, 0x0, 0x6, r0, 0x2) 16:41:16 executing program 2: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x5000) mincore(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001480)='/sys/module/mac80211_hwsim', 0x0, 0x0) getdents(r3, &(0x7f0000001680)=""/87, 0x57) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x10, r3, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x5, 0x7f, 0x2, 0x0, 0x0, 0x4, 0x8000, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x40418, 0xfffffffffffffffa, 0x7, 0x0, 0x2, 0xa44, 0x62, 0x0, 0x7303, 0x0, 0x4b5c}, 0x0, 0x6, r0, 0x2) 16:41:16 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYRES32=0x0]) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="44b1363000316f2a295b60ec084edba27c136c2d337116e4dda7581f517c13fdfc4599d3603a56b8a0f6e793aeb123b92ce81aa4d3746f16771269e1b8bba0c110c45051ba751ac2e6ac676f68d0069a7bd5cb1834cd1d697fdad0e188bc93a84266fe4e2fecbf9b9ce5634a87b494398952"], 0x59) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0xd2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x211c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x8}, 0x0, 0x80000000, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create(0x400) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) recvmmsg$unix(r1, &(0x7f0000001540)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000400)=[{&(0x7f0000000200)=""/61, 0x3d}, {&(0x7f0000000240)=""/34, 0x22}, {&(0x7f0000000300)=""/121, 0x79}, {&(0x7f0000000080)=""/68, 0xffffffffffffffa0}, {&(0x7f00000003c0)=""/50, 0x32}], 0x5, &(0x7f0000000480)=[@rights={{0x10}}], 0x10}}], 0x1, 0x40000000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000540)={0x40, 0x75, 0x1, {0x35, "78924a3bc580cedadf121214651bb1dcef982602761b140ae9e3398f6ea5bbb053cd780902e34b686068eb58f74c106bdda67f03ea"}}, 0x40) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), 0x4) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000000), 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x228842, 0x120) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x81) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x30, 0x0, &(0x7f0000000900)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000001580)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) 16:41:17 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x0, 0xfffffffffffffffe}, 0x0) 16:41:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 16:41:17 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x14, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}, 0x14}], 0x1}, 0x0) 16:41:17 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x41, 0x0) migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080)=0xff) 16:41:17 executing program 6: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x5000) mincore(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001480)='/sys/module/mac80211_hwsim', 0x0, 0x0) getdents(r3, &(0x7f0000001680)=""/87, 0x57) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x10, r3, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x5, 0x7f, 0x2, 0x0, 0x0, 0x4, 0x8000, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x40418, 0xfffffffffffffffa, 0x7, 0x0, 0x2, 0xa44, 0x62, 0x0, 0x7303, 0x0, 0x4b5c}, 0x0, 0x6, r0, 0x2) [ 365.423837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:41:17 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x41, 0x0) migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080)=0xff) 16:41:17 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x0, 0xfffffffffffffffe}, 0x0) 16:41:17 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x0, 0xfffffffffffffffe}, 0x0) 16:41:17 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x41, 0x0) migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000080)=0xff) 16:41:17 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYRES32=0x0]) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="44b1363000316f2a295b60ec084edba27c136c2d337116e4dda7581f517c13fdfc4599d3603a56b8a0f6e793aeb123b92ce81aa4d3746f16771269e1b8bba0c110c45051ba751ac2e6ac676f68d0069a7bd5cb1834cd1d697fdad0e188bc93a84266fe4e2fecbf9b9ce5634a87b494398952"], 0x59) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0xd2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x211c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x8}, 0x0, 0x80000000, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create(0x400) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) recvmmsg$unix(r1, &(0x7f0000001540)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000400)=[{&(0x7f0000000200)=""/61, 0x3d}, {&(0x7f0000000240)=""/34, 0x22}, {&(0x7f0000000300)=""/121, 0x79}, {&(0x7f0000000080)=""/68, 0xffffffffffffffa0}, {&(0x7f00000003c0)=""/50, 0x32}], 0x5, &(0x7f0000000480)=[@rights={{0x10}}], 0x10}}], 0x1, 0x40000000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000540)={0x40, 0x75, 0x1, {0x35, "78924a3bc580cedadf121214651bb1dcef982602761b140ae9e3398f6ea5bbb053cd780902e34b686068eb58f74c106bdda67f03ea"}}, 0x40) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), 0x4) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000000), 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x228842, 0x120) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x81) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x30, 0x0, &(0x7f0000000900)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000001580)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) 16:41:17 executing program 7: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x5000) mincore(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001480)='/sys/module/mac80211_hwsim', 0x0, 0x0) getdents(r3, &(0x7f0000001680)=""/87, 0x57) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x10, r3, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) shmget(0x3, 0xa000, 0x20, &(0x7f0000ff6000/0xa000)=nil) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x5, 0x7f, 0x2, 0x0, 0x0, 0x4, 0x8000, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x40418, 0xfffffffffffffffa, 0x7, 0x0, 0x2, 0xa44, 0x62, 0x0, 0x7303, 0x0, 0x4b5c}, 0x0, 0x6, r0, 0x2) 16:41:18 executing program 0: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYRES32=0x0]) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="44b1363000316f2a295b60ec084edba27c136c2d337116e4dda7581f517c13fdfc4599d3603a56b8a0f6e793aeb123b92ce81aa4d3746f16771269e1b8bba0c110c45051ba751ac2e6ac676f68d0069a7bd5cb1834cd1d697fdad0e188bc93a84266fe4e2fecbf9b9ce5634a87b494398952"], 0x59) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0xd2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x211c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x8}, 0x0, 0x80000000, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create(0x400) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) recvmmsg$unix(r1, &(0x7f0000001540)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000400)=[{&(0x7f0000000200)=""/61, 0x3d}, {&(0x7f0000000240)=""/34, 0x22}, {&(0x7f0000000300)=""/121, 0x79}, {&(0x7f0000000080)=""/68, 0xffffffffffffffa0}, {&(0x7f00000003c0)=""/50, 0x32}], 0x5, &(0x7f0000000480)=[@rights={{0x10}}], 0x10}}], 0x1, 0x40000000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000540)={0x40, 0x75, 0x1, {0x35, "78924a3bc580cedadf121214651bb1dcef982602761b140ae9e3398f6ea5bbb053cd780902e34b686068eb58f74c106bdda67f03ea"}}, 0x40) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), 0x4) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000000), 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x228842, 0x120) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x81) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x30, 0x0, &(0x7f0000000900)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000001580)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) 16:41:18 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) r0 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xa0002000}) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) io_submit(0x0, 0x30, &(0x7f0000001340)) eventfd2(0x5, 0x80000) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x3, 0x7fff}, {0x5, 0x8000}, {0x4, 0x7d}, {0x7}, {0xc, 0x1}, {0x3, 0x200}, {0x81, 0x9}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file1\x00', 0x119) 16:41:18 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYRES32=0x0]) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="44b1363000316f2a295b60ec084edba27c136c2d337116e4dda7581f517c13fdfc4599d3603a56b8a0f6e793aeb123b92ce81aa4d3746f16771269e1b8bba0c110c45051ba751ac2e6ac676f68d0069a7bd5cb1834cd1d697fdad0e188bc93a84266fe4e2fecbf9b9ce5634a87b494398952"], 0x59) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0xd2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x211c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x8}, 0x0, 0x80000000, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create(0x400) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) recvmmsg$unix(r1, &(0x7f0000001540)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000400)=[{&(0x7f0000000200)=""/61, 0x3d}, {&(0x7f0000000240)=""/34, 0x22}, {&(0x7f0000000300)=""/121, 0x79}, {&(0x7f0000000080)=""/68, 0xffffffffffffffa0}, {&(0x7f00000003c0)=""/50, 0x32}], 0x5, &(0x7f0000000480)=[@rights={{0x10}}], 0x10}}], 0x1, 0x40000000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000540)={0x40, 0x75, 0x1, {0x35, "78924a3bc580cedadf121214651bb1dcef982602761b140ae9e3398f6ea5bbb053cd780902e34b686068eb58f74c106bdda67f03ea"}}, 0x40) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), 0x4) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000000), 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x228842, 0x120) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x81) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x30, 0x0, &(0x7f0000000900)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000001580)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) 16:41:18 executing program 2: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYRES32=0x0]) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="44b1363000316f2a295b60ec084edba27c136c2d337116e4dda7581f517c13fdfc4599d3603a56b8a0f6e793aeb123b92ce81aa4d3746f16771269e1b8bba0c110c45051ba751ac2e6ac676f68d0069a7bd5cb1834cd1d697fdad0e188bc93a84266fe4e2fecbf9b9ce5634a87b494398952"], 0x59) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0xd2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x211c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x8}, 0x0, 0x80000000, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create(0x400) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) recvmmsg$unix(r1, &(0x7f0000001540)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000400)=[{&(0x7f0000000200)=""/61, 0x3d}, {&(0x7f0000000240)=""/34, 0x22}, {&(0x7f0000000300)=""/121, 0x79}, {&(0x7f0000000080)=""/68, 0xffffffffffffffa0}, {&(0x7f00000003c0)=""/50, 0x32}], 0x5, &(0x7f0000000480)=[@rights={{0x10}}], 0x10}}], 0x1, 0x40000000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000540)={0x40, 0x75, 0x1, {0x35, "78924a3bc580cedadf121214651bb1dcef982602761b140ae9e3398f6ea5bbb053cd780902e34b686068eb58f74c106bdda67f03ea"}}, 0x40) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), 0x4) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000000), 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x228842, 0x120) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x81) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x30, 0x0, &(0x7f0000000900)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000001580)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) 16:41:18 executing program 5: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x44, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)='a', 0x1}], 0x1, 0x0, 0x8000000) socket$unix(0x1, 0x5, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) ioctl$CDROMREADTOCENTRY(r2, 0x125d, &(0x7f0000000000)) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0xff, 0x7, 0x9, 0x3f, 0x0, 0x4, 0x80001, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x4, 0x80}, 0x208, 0x0, 0x1, 0x0, 0x0, 0x2, 0x400, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0x3, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) 16:41:18 executing program 6: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYRES32=0x0]) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="44b1363000316f2a295b60ec084edba27c136c2d337116e4dda7581f517c13fdfc4599d3603a56b8a0f6e793aeb123b92ce81aa4d3746f16771269e1b8bba0c110c45051ba751ac2e6ac676f68d0069a7bd5cb1834cd1d697fdad0e188bc93a84266fe4e2fecbf9b9ce5634a87b494398952"], 0x59) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0xd2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x211c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x8}, 0x0, 0x80000000, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create(0x400) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) recvmmsg$unix(r1, &(0x7f0000001540)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000400)=[{&(0x7f0000000200)=""/61, 0x3d}, {&(0x7f0000000240)=""/34, 0x22}, {&(0x7f0000000300)=""/121, 0x79}, {&(0x7f0000000080)=""/68, 0xffffffffffffffa0}, {&(0x7f00000003c0)=""/50, 0x32}], 0x5, &(0x7f0000000480)=[@rights={{0x10}}], 0x10}}], 0x1, 0x40000000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000540)={0x40, 0x75, 0x1, {0x35, "78924a3bc580cedadf121214651bb1dcef982602761b140ae9e3398f6ea5bbb053cd780902e34b686068eb58f74c106bdda67f03ea"}}, 0x40) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), 0x4) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000000), 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x228842, 0x120) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x81) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x30, 0x0, &(0x7f0000000900)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000001580)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) 16:41:18 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) 16:41:18 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000011c0), 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r1, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x18b0c2, 0x21) fcntl$dupfd(r0, 0x0, r2) write(r2, &(0x7f0000000080)="01", 0x41030) close(r2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) close(r3) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 16:41:18 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) 16:41:18 executing program 0: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYRES32=0x0]) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="44b1363000316f2a295b60ec084edba27c136c2d337116e4dda7581f517c13fdfc4599d3603a56b8a0f6e793aeb123b92ce81aa4d3746f16771269e1b8bba0c110c45051ba751ac2e6ac676f68d0069a7bd5cb1834cd1d697fdad0e188bc93a84266fe4e2fecbf9b9ce5634a87b494398952"], 0x59) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0xd2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x211c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x8}, 0x0, 0x80000000, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create(0x400) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) recvmmsg$unix(r1, &(0x7f0000001540)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000400)=[{&(0x7f0000000200)=""/61, 0x3d}, {&(0x7f0000000240)=""/34, 0x22}, {&(0x7f0000000300)=""/121, 0x79}, {&(0x7f0000000080)=""/68, 0xffffffffffffffa0}, {&(0x7f00000003c0)=""/50, 0x32}], 0x5, &(0x7f0000000480)=[@rights={{0x10}}], 0x10}}], 0x1, 0x40000000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000540)={0x40, 0x75, 0x1, {0x35, "78924a3bc580cedadf121214651bb1dcef982602761b140ae9e3398f6ea5bbb053cd780902e34b686068eb58f74c106bdda67f03ea"}}, 0x40) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), 0x4) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000000), 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x228842, 0x120) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x81) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x30, 0x0, &(0x7f0000000900)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000001580)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) 16:41:18 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) 16:41:18 executing program 6: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYRES32=0x0]) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="44b1363000316f2a295b60ec084edba27c136c2d337116e4dda7581f517c13fdfc4599d3603a56b8a0f6e793aeb123b92ce81aa4d3746f16771269e1b8bba0c110c45051ba751ac2e6ac676f68d0069a7bd5cb1834cd1d697fdad0e188bc93a84266fe4e2fecbf9b9ce5634a87b494398952"], 0x59) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0xd2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x211c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x8}, 0x0, 0x80000000, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create(0x400) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) recvmmsg$unix(r1, &(0x7f0000001540)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000400)=[{&(0x7f0000000200)=""/61, 0x3d}, {&(0x7f0000000240)=""/34, 0x22}, {&(0x7f0000000300)=""/121, 0x79}, {&(0x7f0000000080)=""/68, 0xffffffffffffffa0}, {&(0x7f00000003c0)=""/50, 0x32}], 0x5, &(0x7f0000000480)=[@rights={{0x10}}], 0x10}}], 0x1, 0x40000000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000540)={0x40, 0x75, 0x1, {0x35, "78924a3bc580cedadf121214651bb1dcef982602761b140ae9e3398f6ea5bbb053cd780902e34b686068eb58f74c106bdda67f03ea"}}, 0x40) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), 0x4) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000000), 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x228842, 0x120) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x81) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x30, 0x0, &(0x7f0000000900)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000001580)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) 16:41:18 executing program 2: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYRES32=0x0]) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="44b1363000316f2a295b60ec084edba27c136c2d337116e4dda7581f517c13fdfc4599d3603a56b8a0f6e793aeb123b92ce81aa4d3746f16771269e1b8bba0c110c45051ba751ac2e6ac676f68d0069a7bd5cb1834cd1d697fdad0e188bc93a84266fe4e2fecbf9b9ce5634a87b494398952"], 0x59) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0xd2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x211c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x8}, 0x0, 0x80000000, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create(0x400) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) recvmmsg$unix(r1, &(0x7f0000001540)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000400)=[{&(0x7f0000000200)=""/61, 0x3d}, {&(0x7f0000000240)=""/34, 0x22}, {&(0x7f0000000300)=""/121, 0x79}, {&(0x7f0000000080)=""/68, 0xffffffffffffffa0}, {&(0x7f00000003c0)=""/50, 0x32}], 0x5, &(0x7f0000000480)=[@rights={{0x10}}], 0x10}}], 0x1, 0x40000000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000540)={0x40, 0x75, 0x1, {0x35, "78924a3bc580cedadf121214651bb1dcef982602761b140ae9e3398f6ea5bbb053cd780902e34b686068eb58f74c106bdda67f03ea"}}, 0x40) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), 0x4) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000000), 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x228842, 0x120) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x81) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x30, 0x0, &(0x7f0000000900)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000001580)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) 16:41:18 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[{@huge_never}, {@size={'size', 0x3d, [0x30, 0x0]}}]}) 16:41:18 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000011c0), 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r1, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x18b0c2, 0x21) fcntl$dupfd(r0, 0x0, r2) write(r2, &(0x7f0000000080)="01", 0x41030) close(r2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) close(r3) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 16:41:18 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) 16:41:18 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000011c0), 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r1, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x18b0c2, 0x21) fcntl$dupfd(r0, 0x0, r2) write(r2, &(0x7f0000000080)="01", 0x41030) close(r2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) close(r3) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 16:41:19 executing program 2: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYRES32=0x0]) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="44b1363000316f2a295b60ec084edba27c136c2d337116e4dda7581f517c13fdfc4599d3603a56b8a0f6e793aeb123b92ce81aa4d3746f16771269e1b8bba0c110c45051ba751ac2e6ac676f68d0069a7bd5cb1834cd1d697fdad0e188bc93a84266fe4e2fecbf9b9ce5634a87b494398952"], 0x59) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0xd2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x211c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x8}, 0x0, 0x80000000, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create(0x400) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) recvmmsg$unix(r1, &(0x7f0000001540)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000400)=[{&(0x7f0000000200)=""/61, 0x3d}, {&(0x7f0000000240)=""/34, 0x22}, {&(0x7f0000000300)=""/121, 0x79}, {&(0x7f0000000080)=""/68, 0xffffffffffffffa0}, {&(0x7f00000003c0)=""/50, 0x32}], 0x5, &(0x7f0000000480)=[@rights={{0x10}}], 0x10}}], 0x1, 0x40000000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000540)={0x40, 0x75, 0x1, {0x35, "78924a3bc580cedadf121214651bb1dcef982602761b140ae9e3398f6ea5bbb053cd780902e34b686068eb58f74c106bdda67f03ea"}}, 0x40) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), 0x4) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000000), 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x228842, 0x120) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x81) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x30, 0x0, &(0x7f0000000900)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000001580)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) 16:41:19 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x1) r0 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xa0002000}) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) io_submit(0x0, 0x30, &(0x7f0000001340)) eventfd2(0x5, 0x80000) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x7, &(0x7f0000000000)=[{0x3, 0x7fff}, {0x5, 0x8000}, {0x4, 0x7d}, {0x7}, {0xc, 0x1}, {0x3, 0x200}, {0x81, 0x9}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file1\x00', 0x119) 16:41:19 executing program 0: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYRES32=0x0]) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="44b1363000316f2a295b60ec084edba27c136c2d337116e4dda7581f517c13fdfc4599d3603a56b8a0f6e793aeb123b92ce81aa4d3746f16771269e1b8bba0c110c45051ba751ac2e6ac676f68d0069a7bd5cb1834cd1d697fdad0e188bc93a84266fe4e2fecbf9b9ce5634a87b494398952"], 0x59) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0xd2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x211c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x8}, 0x0, 0x80000000, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create(0x400) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) recvmmsg$unix(r1, &(0x7f0000001540)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000400)=[{&(0x7f0000000200)=""/61, 0x3d}, {&(0x7f0000000240)=""/34, 0x22}, {&(0x7f0000000300)=""/121, 0x79}, {&(0x7f0000000080)=""/68, 0xffffffffffffffa0}, {&(0x7f00000003c0)=""/50, 0x32}], 0x5, &(0x7f0000000480)=[@rights={{0x10}}], 0x10}}], 0x1, 0x40000000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000540)={0x40, 0x75, 0x1, {0x35, "78924a3bc580cedadf121214651bb1dcef982602761b140ae9e3398f6ea5bbb053cd780902e34b686068eb58f74c106bdda67f03ea"}}, 0x40) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), 0x4) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000000), 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x228842, 0x120) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x81) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x30, 0x0, &(0x7f0000000900)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000001580)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) 16:41:19 executing program 6: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYRES32=0x0]) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="44b1363000316f2a295b60ec084edba27c136c2d337116e4dda7581f517c13fdfc4599d3603a56b8a0f6e793aeb123b92ce81aa4d3746f16771269e1b8bba0c110c45051ba751ac2e6ac676f68d0069a7bd5cb1834cd1d697fdad0e188bc93a84266fe4e2fecbf9b9ce5634a87b494398952"], 0x59) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0xd2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x211c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x8}, 0x0, 0x80000000, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create(0x400) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) recvmmsg$unix(r1, &(0x7f0000001540)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000400)=[{&(0x7f0000000200)=""/61, 0x3d}, {&(0x7f0000000240)=""/34, 0x22}, {&(0x7f0000000300)=""/121, 0x79}, {&(0x7f0000000080)=""/68, 0xffffffffffffffa0}, {&(0x7f00000003c0)=""/50, 0x32}], 0x5, &(0x7f0000000480)=[@rights={{0x10}}], 0x10}}], 0x1, 0x40000000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syncfs(r2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000540)={0x40, 0x75, 0x1, {0x35, "78924a3bc580cedadf121214651bb1dcef982602761b140ae9e3398f6ea5bbb053cd780902e34b686068eb58f74c106bdda67f03ea"}}, 0x40) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), 0x4) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000000), 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x228842, 0x120) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x81) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x30, 0x0, &(0x7f0000000900)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000001580)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) 16:41:19 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000011c0), 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r1, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x18b0c2, 0x21) fcntl$dupfd(r0, 0x0, r2) write(r2, &(0x7f0000000080)="01", 0x41030) close(r2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) close(r3) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 16:41:19 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000011c0), 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r1, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x18b0c2, 0x21) fcntl$dupfd(r0, 0x0, r2) write(r2, &(0x7f0000000080)="01", 0x41030) close(r2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) close(r3) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 16:41:19 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[{@huge_never}, {@size={'size', 0x3d, [0x30, 0x0]}}]}) 16:41:19 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x680068af1a41d326) 16:41:19 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x680068af1a41d326) 16:41:19 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[{@huge_never}, {@size={'size', 0x3d, [0x30, 0x0]}}]}) 16:41:19 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x680068af1a41d326) 16:41:20 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x680068af1a41d326) 16:41:20 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[{@huge_never}, {@size={'size', 0x3d, [0x30, 0x0]}}]}) 16:41:20 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, VM DIAGNOSIS: 16:41:14 Registers: info registers vcpu 0 RAX=0000000080000001 RBX=0000000000000000 RCX=ffffffff8172af86 RDX=ffff888042ad9ac0 RSI=0000000000000000 RDI=0000000000000005 RBP=ffffea0000f61380 RSP=ffff888031d1f6c8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffffea0000f61380 R13=ffff888039dd61a0 R14=0000000000000000 R15=ffffea0000f61380 RIP=ffffffff8149791b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe102e069000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe102e067000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8a67765900 CR3=0000000039244000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000001 RDX=0000000000000000 RSI=00000000ffffffff RDI=ffffffff8560afa0 RBP=ffffffff8560afa0 RSP=ffff88806cf09910 R8 =0000000000000000 R9 =ffffffff85d113d7 R10=fffffbfff0ba227a R11=0000000000000001 R12=ffff888042af1ac0 R13=00000000ffffffff R14=00000000ffffffff R15=0000000000000001 RIP=ffffffff8442c028 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe7d386a0000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe7d3869e000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555555d32c58 CR3=0000000037ecc000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000