Warning: Permanently added '[localhost]:32944' (ECDSA) to the list of known hosts. 2023/01/24 17:27:39 fuzzer started 2023/01/24 17:27:40 dialing manager at localhost:36587 syzkaller login: [ 44.968527] cgroup: Unknown subsys name 'net' [ 45.078338] cgroup: Unknown subsys name 'rlimit' 2023/01/24 17:27:56 syscalls: 2217 2023/01/24 17:27:56 code coverage: enabled 2023/01/24 17:27:56 comparison tracing: enabled 2023/01/24 17:27:56 extra coverage: enabled 2023/01/24 17:27:56 setuid sandbox: enabled 2023/01/24 17:27:56 namespace sandbox: enabled 2023/01/24 17:27:56 Android sandbox: enabled 2023/01/24 17:27:56 fault injection: enabled 2023/01/24 17:27:56 leak checking: enabled 2023/01/24 17:27:56 net packet injection: enabled 2023/01/24 17:27:56 net device setup: enabled 2023/01/24 17:27:56 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/01/24 17:27:56 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/01/24 17:27:56 USB emulation: enabled 2023/01/24 17:27:56 hci packet injection: enabled 2023/01/24 17:27:56 wifi device emulation: enabled 2023/01/24 17:27:56 802.15.4 emulation: enabled 2023/01/24 17:27:56 fetching corpus: 0, signal 0/2000 (executing program) 2023/01/24 17:27:56 fetching corpus: 50, signal 29550/33142 (executing program) 2023/01/24 17:27:56 fetching corpus: 100, signal 40533/45644 (executing program) 2023/01/24 17:27:56 fetching corpus: 150, signal 53019/59493 (executing program) 2023/01/24 17:27:56 fetching corpus: 200, signal 60442/68254 (executing program) 2023/01/24 17:27:56 fetching corpus: 250, signal 65975/75114 (executing program) 2023/01/24 17:27:56 fetching corpus: 300, signal 72204/82588 (executing program) 2023/01/24 17:27:57 fetching corpus: 350, signal 77033/88569 (executing program) 2023/01/24 17:27:57 fetching corpus: 400, signal 81033/93747 (executing program) 2023/01/24 17:27:57 fetching corpus: 450, signal 84095/97988 (executing program) 2023/01/24 17:27:57 fetching corpus: 500, signal 89378/104216 (executing program) 2023/01/24 17:27:57 fetching corpus: 550, signal 92584/108495 (executing program) 2023/01/24 17:27:57 fetching corpus: 600, signal 97134/113942 (executing program) 2023/01/24 17:27:57 fetching corpus: 650, signal 100182/117948 (executing program) 2023/01/24 17:27:58 fetching corpus: 700, signal 104048/122659 (executing program) 2023/01/24 17:27:58 fetching corpus: 750, signal 106752/126268 (executing program) 2023/01/24 17:27:58 fetching corpus: 800, signal 109724/130095 (executing program) 2023/01/24 17:27:58 fetching corpus: 850, signal 111963/133253 (executing program) 2023/01/24 17:27:58 fetching corpus: 900, signal 115212/137249 (executing program) 2023/01/24 17:27:58 fetching corpus: 950, signal 117919/140710 (executing program) 2023/01/24 17:27:58 fetching corpus: 1000, signal 120823/144275 (executing program) 2023/01/24 17:27:59 fetching corpus: 1050, signal 123006/147251 (executing program) 2023/01/24 17:27:59 fetching corpus: 1100, signal 125057/150113 (executing program) 2023/01/24 17:27:59 fetching corpus: 1150, signal 128966/154400 (executing program) 2023/01/24 17:27:59 fetching corpus: 1200, signal 131689/157697 (executing program) 2023/01/24 17:27:59 fetching corpus: 1250, signal 133230/159963 (executing program) 2023/01/24 17:27:59 fetching corpus: 1300, signal 135357/162703 (executing program) 2023/01/24 17:27:59 fetching corpus: 1350, signal 137035/165054 (executing program) 2023/01/24 17:27:59 fetching corpus: 1400, signal 138794/167437 (executing program) 2023/01/24 17:28:00 fetching corpus: 1450, signal 140359/169659 (executing program) 2023/01/24 17:28:00 fetching corpus: 1500, signal 141437/171479 (executing program) 2023/01/24 17:28:00 fetching corpus: 1550, signal 143166/173820 (executing program) 2023/01/24 17:28:00 fetching corpus: 1600, signal 144646/175920 (executing program) 2023/01/24 17:28:00 fetching corpus: 1650, signal 146261/178023 (executing program) 2023/01/24 17:28:00 fetching corpus: 1700, signal 148488/180613 (executing program) 2023/01/24 17:28:00 fetching corpus: 1750, signal 150152/182697 (executing program) 2023/01/24 17:28:01 fetching corpus: 1800, signal 152051/184957 (executing program) 2023/01/24 17:28:01 fetching corpus: 1850, signal 153815/187175 (executing program) 2023/01/24 17:28:01 fetching corpus: 1900, signal 155418/189276 (executing program) 2023/01/24 17:28:01 fetching corpus: 1950, signal 156718/191030 (executing program) 2023/01/24 17:28:01 fetching corpus: 2000, signal 158072/192836 (executing program) 2023/01/24 17:28:01 fetching corpus: 2050, signal 161006/195720 (executing program) 2023/01/24 17:28:01 fetching corpus: 2100, signal 162257/197395 (executing program) 2023/01/24 17:28:02 fetching corpus: 2150, signal 163664/199166 (executing program) 2023/01/24 17:28:02 fetching corpus: 2200, signal 165318/201102 (executing program) 2023/01/24 17:28:02 fetching corpus: 2250, signal 166439/202587 (executing program) 2023/01/24 17:28:02 fetching corpus: 2300, signal 167433/204039 (executing program) 2023/01/24 17:28:02 fetching corpus: 2350, signal 168345/205413 (executing program) 2023/01/24 17:28:02 fetching corpus: 2400, signal 169219/206761 (executing program) 2023/01/24 17:28:02 fetching corpus: 2450, signal 170524/208358 (executing program) 2023/01/24 17:28:02 fetching corpus: 2500, signal 171635/209800 (executing program) 2023/01/24 17:28:03 fetching corpus: 2550, signal 172318/210936 (executing program) 2023/01/24 17:28:03 fetching corpus: 2600, signal 173595/212480 (executing program) 2023/01/24 17:28:03 fetching corpus: 2650, signal 175268/214207 (executing program) 2023/01/24 17:28:03 fetching corpus: 2700, signal 175889/215284 (executing program) 2023/01/24 17:28:03 fetching corpus: 2750, signal 176696/216462 (executing program) 2023/01/24 17:28:03 fetching corpus: 2800, signal 177794/217764 (executing program) 2023/01/24 17:28:03 fetching corpus: 2850, signal 178968/219154 (executing program) 2023/01/24 17:28:03 fetching corpus: 2900, signal 179978/220423 (executing program) 2023/01/24 17:28:04 fetching corpus: 2950, signal 180803/221567 (executing program) 2023/01/24 17:28:04 fetching corpus: 3000, signal 181613/222695 (executing program) 2023/01/24 17:28:04 fetching corpus: 3050, signal 182413/223826 (executing program) 2023/01/24 17:28:04 fetching corpus: 3100, signal 183541/225092 (executing program) 2023/01/24 17:28:04 fetching corpus: 3150, signal 184656/226348 (executing program) 2023/01/24 17:28:04 fetching corpus: 3200, signal 185521/227477 (executing program) 2023/01/24 17:28:04 fetching corpus: 3250, signal 186339/228530 (executing program) 2023/01/24 17:28:05 fetching corpus: 3300, signal 187191/229567 (executing program) 2023/01/24 17:28:05 fetching corpus: 3350, signal 188094/230674 (executing program) 2023/01/24 17:28:05 fetching corpus: 3400, signal 188846/231693 (executing program) 2023/01/24 17:28:05 fetching corpus: 3450, signal 189927/232778 (executing program) 2023/01/24 17:28:05 fetching corpus: 3500, signal 190695/233755 (executing program) 2023/01/24 17:28:05 fetching corpus: 3550, signal 191482/234770 (executing program) 2023/01/24 17:28:05 fetching corpus: 3600, signal 192482/235831 (executing program) 2023/01/24 17:28:06 fetching corpus: 3650, signal 193048/236696 (executing program) 2023/01/24 17:28:06 fetching corpus: 3700, signal 193776/237626 (executing program) 2023/01/24 17:28:06 fetching corpus: 3750, signal 194375/238501 (executing program) 2023/01/24 17:28:06 fetching corpus: 3800, signal 194938/239343 (executing program) 2023/01/24 17:28:06 fetching corpus: 3850, signal 195753/240299 (executing program) 2023/01/24 17:28:06 fetching corpus: 3900, signal 196399/241130 (executing program) 2023/01/24 17:28:06 fetching corpus: 3950, signal 197078/241959 (executing program) 2023/01/24 17:28:06 fetching corpus: 4000, signal 198022/242909 (executing program) 2023/01/24 17:28:07 fetching corpus: 4050, signal 198713/243770 (executing program) 2023/01/24 17:28:07 fetching corpus: 4100, signal 199293/244547 (executing program) 2023/01/24 17:28:07 fetching corpus: 4150, signal 200088/245399 (executing program) 2023/01/24 17:28:07 fetching corpus: 4200, signal 200830/246230 (executing program) 2023/01/24 17:28:07 fetching corpus: 4250, signal 201555/247056 (executing program) 2023/01/24 17:28:07 fetching corpus: 4300, signal 202097/247771 (executing program) 2023/01/24 17:28:07 fetching corpus: 4350, signal 203461/248805 (executing program) 2023/01/24 17:28:08 fetching corpus: 4400, signal 204178/249571 (executing program) 2023/01/24 17:28:08 fetching corpus: 4450, signal 205226/250405 (executing program) 2023/01/24 17:28:08 fetching corpus: 4500, signal 206261/251242 (executing program) 2023/01/24 17:28:08 fetching corpus: 4550, signal 206951/251975 (executing program) 2023/01/24 17:28:08 fetching corpus: 4600, signal 207770/252708 (executing program) 2023/01/24 17:28:08 fetching corpus: 4650, signal 208980/253563 (executing program) 2023/01/24 17:28:08 fetching corpus: 4700, signal 209572/254229 (executing program) 2023/01/24 17:28:09 fetching corpus: 4750, signal 210247/254882 (executing program) 2023/01/24 17:28:09 fetching corpus: 4800, signal 211092/255653 (executing program) 2023/01/24 17:28:09 fetching corpus: 4850, signal 211592/256258 (executing program) 2023/01/24 17:28:09 fetching corpus: 4900, signal 212143/256893 (executing program) 2023/01/24 17:28:09 fetching corpus: 4950, signal 212848/257528 (executing program) 2023/01/24 17:28:09 fetching corpus: 5000, signal 213434/258130 (executing program) 2023/01/24 17:28:09 fetching corpus: 5050, signal 214151/258759 (executing program) 2023/01/24 17:28:09 fetching corpus: 5100, signal 214806/259316 (executing program) 2023/01/24 17:28:10 fetching corpus: 5150, signal 215223/259843 (executing program) 2023/01/24 17:28:10 fetching corpus: 5200, signal 216026/260443 (executing program) 2023/01/24 17:28:10 fetching corpus: 5250, signal 216735/261028 (executing program) 2023/01/24 17:28:10 fetching corpus: 5300, signal 217292/261581 (executing program) 2023/01/24 17:28:10 fetching corpus: 5350, signal 217909/262138 (executing program) 2023/01/24 17:28:10 fetching corpus: 5400, signal 218481/262681 (executing program) 2023/01/24 17:28:10 fetching corpus: 5450, signal 218896/263165 (executing program) 2023/01/24 17:28:11 fetching corpus: 5500, signal 219607/263709 (executing program) 2023/01/24 17:28:11 fetching corpus: 5550, signal 220055/264199 (executing program) 2023/01/24 17:28:11 fetching corpus: 5600, signal 220507/264699 (executing program) 2023/01/24 17:28:11 fetching corpus: 5650, signal 221247/265221 (executing program) 2023/01/24 17:28:11 fetching corpus: 5700, signal 221648/265668 (executing program) 2023/01/24 17:28:11 fetching corpus: 5750, signal 222414/266173 (executing program) 2023/01/24 17:28:11 fetching corpus: 5800, signal 222838/266618 (executing program) 2023/01/24 17:28:12 fetching corpus: 5850, signal 223483/267106 (executing program) 2023/01/24 17:28:12 fetching corpus: 5900, signal 224248/267570 (executing program) 2023/01/24 17:28:12 fetching corpus: 5950, signal 224915/268001 (executing program) 2023/01/24 17:28:12 fetching corpus: 6000, signal 225383/268413 (executing program) 2023/01/24 17:28:12 fetching corpus: 6050, signal 225817/268836 (executing program) 2023/01/24 17:28:12 fetching corpus: 6100, signal 226445/269254 (executing program) 2023/01/24 17:28:12 fetching corpus: 6150, signal 227003/269653 (executing program) 2023/01/24 17:28:12 fetching corpus: 6200, signal 227734/270039 (executing program) 2023/01/24 17:28:13 fetching corpus: 6250, signal 228040/270424 (executing program) 2023/01/24 17:28:13 fetching corpus: 6300, signal 228656/270793 (executing program) 2023/01/24 17:28:13 fetching corpus: 6350, signal 229204/271166 (executing program) 2023/01/24 17:28:13 fetching corpus: 6400, signal 229790/271538 (executing program) 2023/01/24 17:28:13 fetching corpus: 6450, signal 230484/271887 (executing program) 2023/01/24 17:28:13 fetching corpus: 6500, signal 231101/272206 (executing program) 2023/01/24 17:28:13 fetching corpus: 6550, signal 231607/272516 (executing program) 2023/01/24 17:28:14 fetching corpus: 6600, signal 232051/272853 (executing program) 2023/01/24 17:28:14 fetching corpus: 6650, signal 232515/273182 (executing program) 2023/01/24 17:28:14 fetching corpus: 6700, signal 232932/273477 (executing program) 2023/01/24 17:28:14 fetching corpus: 6750, signal 233359/273793 (executing program) 2023/01/24 17:28:14 fetching corpus: 6800, signal 233827/274120 (executing program) 2023/01/24 17:28:14 fetching corpus: 6850, signal 234366/274144 (executing program) 2023/01/24 17:28:14 fetching corpus: 6900, signal 234859/274144 (executing program) 2023/01/24 17:28:15 fetching corpus: 6950, signal 235419/274144 (executing program) 2023/01/24 17:28:15 fetching corpus: 7000, signal 235817/274144 (executing program) 2023/01/24 17:28:15 fetching corpus: 7050, signal 236164/274144 (executing program) 2023/01/24 17:28:15 fetching corpus: 7100, signal 236568/274144 (executing program) 2023/01/24 17:28:15 fetching corpus: 7150, signal 236954/274144 (executing program) 2023/01/24 17:28:15 fetching corpus: 7200, signal 237367/274144 (executing program) 2023/01/24 17:28:15 fetching corpus: 7250, signal 237913/274144 (executing program) 2023/01/24 17:28:16 fetching corpus: 7300, signal 238407/274145 (executing program) 2023/01/24 17:28:16 fetching corpus: 7350, signal 238774/274145 (executing program) 2023/01/24 17:28:16 fetching corpus: 7400, signal 239048/274145 (executing program) 2023/01/24 17:28:16 fetching corpus: 7450, signal 239605/274147 (executing program) 2023/01/24 17:28:16 fetching corpus: 7500, signal 239990/274147 (executing program) 2023/01/24 17:28:16 fetching corpus: 7550, signal 240334/274147 (executing program) 2023/01/24 17:28:16 fetching corpus: 7600, signal 240720/274147 (executing program) 2023/01/24 17:28:17 fetching corpus: 7650, signal 241169/274147 (executing program) 2023/01/24 17:28:17 fetching corpus: 7700, signal 241411/274147 (executing program) 2023/01/24 17:28:17 fetching corpus: 7750, signal 241735/274147 (executing program) 2023/01/24 17:28:17 fetching corpus: 7800, signal 242059/274147 (executing program) 2023/01/24 17:28:17 fetching corpus: 7850, signal 242449/274147 (executing program) 2023/01/24 17:28:17 fetching corpus: 7900, signal 243228/274147 (executing program) 2023/01/24 17:28:17 fetching corpus: 7950, signal 243514/274147 (executing program) 2023/01/24 17:28:17 fetching corpus: 8000, signal 244059/274147 (executing program) 2023/01/24 17:28:17 fetching corpus: 8050, signal 244424/274147 (executing program) 2023/01/24 17:28:17 fetching corpus: 8100, signal 244793/274147 (executing program) 2023/01/24 17:28:17 fetching corpus: 8150, signal 247436/274147 (executing program) 2023/01/24 17:28:17 fetching corpus: 8200, signal 247838/274147 (executing program) 2023/01/24 17:28:18 fetching corpus: 8250, signal 248333/274147 (executing program) 2023/01/24 17:28:18 fetching corpus: 8300, signal 248755/274147 (executing program) 2023/01/24 17:28:18 fetching corpus: 8350, signal 249004/274147 (executing program) 2023/01/24 17:28:18 fetching corpus: 8400, signal 249801/274147 (executing program) 2023/01/24 17:28:18 fetching corpus: 8450, signal 250202/274147 (executing program) 2023/01/24 17:28:18 fetching corpus: 8500, signal 250550/274147 (executing program) 2023/01/24 17:28:18 fetching corpus: 8550, signal 251026/274147 (executing program) 2023/01/24 17:28:18 fetching corpus: 8600, signal 251245/274147 (executing program) 2023/01/24 17:28:18 fetching corpus: 8650, signal 251703/274147 (executing program) 2023/01/24 17:28:19 fetching corpus: 8700, signal 252044/274147 (executing program) 2023/01/24 17:28:19 fetching corpus: 8750, signal 252548/274147 (executing program) 2023/01/24 17:28:19 fetching corpus: 8800, signal 253096/274147 (executing program) 2023/01/24 17:28:19 fetching corpus: 8850, signal 253664/274147 (executing program) 2023/01/24 17:28:19 fetching corpus: 8900, signal 254016/274147 (executing program) 2023/01/24 17:28:19 fetching corpus: 8950, signal 254365/274147 (executing program) 2023/01/24 17:28:19 fetching corpus: 9000, signal 254707/274147 (executing program) 2023/01/24 17:28:19 fetching corpus: 9050, signal 255046/274147 (executing program) 2023/01/24 17:28:19 fetching corpus: 9100, signal 255360/274147 (executing program) 2023/01/24 17:28:20 fetching corpus: 9150, signal 255740/274147 (executing program) 2023/01/24 17:28:20 fetching corpus: 9200, signal 256208/274147 (executing program) 2023/01/24 17:28:20 fetching corpus: 9250, signal 256575/274147 (executing program) 2023/01/24 17:28:20 fetching corpus: 9300, signal 257141/274147 (executing program) 2023/01/24 17:28:20 fetching corpus: 9350, signal 257630/274147 (executing program) 2023/01/24 17:28:20 fetching corpus: 9400, signal 258109/274147 (executing program) 2023/01/24 17:28:20 fetching corpus: 9450, signal 258547/274147 (executing program) 2023/01/24 17:28:20 fetching corpus: 9500, signal 258869/274147 (executing program) 2023/01/24 17:28:20 fetching corpus: 9550, signal 259233/274147 (executing program) 2023/01/24 17:28:21 fetching corpus: 9600, signal 259863/274147 (executing program) 2023/01/24 17:28:21 fetching corpus: 9650, signal 260117/274147 (executing program) 2023/01/24 17:28:21 fetching corpus: 9700, signal 260503/274152 (executing program) 2023/01/24 17:28:21 fetching corpus: 9750, signal 260824/274152 (executing program) 2023/01/24 17:28:21 fetching corpus: 9800, signal 261121/274152 (executing program) 2023/01/24 17:28:21 fetching corpus: 9850, signal 261566/274152 (executing program) 2023/01/24 17:28:21 fetching corpus: 9900, signal 261905/274152 (executing program) 2023/01/24 17:28:21 fetching corpus: 9950, signal 262400/274152 (executing program) 2023/01/24 17:28:22 fetching corpus: 10000, signal 262739/274152 (executing program) 2023/01/24 17:28:22 fetching corpus: 10050, signal 263119/274157 (executing program) 2023/01/24 17:28:22 fetching corpus: 10100, signal 263345/274157 (executing program) 2023/01/24 17:28:22 fetching corpus: 10150, signal 263656/274157 (executing program) 2023/01/24 17:28:22 fetching corpus: 10200, signal 263987/274157 (executing program) 2023/01/24 17:28:22 fetching corpus: 10250, signal 264382/274157 (executing program) 2023/01/24 17:28:22 fetching corpus: 10300, signal 264761/274157 (executing program) 2023/01/24 17:28:22 fetching corpus: 10350, signal 265143/274157 (executing program) 2023/01/24 17:28:22 fetching corpus: 10400, signal 265412/274158 (executing program) 2023/01/24 17:28:23 fetching corpus: 10450, signal 265638/274158 (executing program) 2023/01/24 17:28:23 fetching corpus: 10500, signal 266036/274158 (executing program) 2023/01/24 17:28:23 fetching corpus: 10550, signal 266264/274158 (executing program) 2023/01/24 17:28:23 fetching corpus: 10600, signal 266530/274158 (executing program) 2023/01/24 17:28:23 fetching corpus: 10650, signal 266727/274158 (executing program) 2023/01/24 17:28:23 fetching corpus: 10700, signal 267108/274158 (executing program) 2023/01/24 17:28:23 fetching corpus: 10750, signal 267455/274158 (executing program) 2023/01/24 17:28:23 fetching corpus: 10800, signal 267842/274158 (executing program) 2023/01/24 17:28:23 fetching corpus: 10850, signal 268119/274158 (executing program) 2023/01/24 17:28:23 fetching corpus: 10900, signal 268419/274158 (executing program) 2023/01/24 17:28:24 fetching corpus: 10950, signal 268676/274158 (executing program) 2023/01/24 17:28:24 fetching corpus: 11000, signal 269017/274158 (executing program) 2023/01/24 17:28:24 fetching corpus: 11050, signal 269400/274158 (executing program) 2023/01/24 17:28:24 fetching corpus: 11100, signal 269737/274158 (executing program) 2023/01/24 17:28:24 fetching corpus: 11150, signal 269935/274158 (executing program) 2023/01/24 17:28:24 fetching corpus: 11200, signal 270387/274158 (executing program) 2023/01/24 17:28:24 fetching corpus: 11230, signal 270529/274158 (executing program) 2023/01/24 17:28:24 fetching corpus: 11230, signal 270529/274158 (executing program) 2023/01/24 17:28:28 starting 8 fuzzer processes 17:28:28 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) sendmmsg$inet(r1, &(0x7f0000005f00)=[{{&(0x7f0000000180)={0x2, 0x4e24, @dev}, 0x10, 0x0}}, {{&(0x7f0000000380)={0x2, 0x0, @dev}, 0xf, 0x0, 0x0, &(0x7f00000018c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @dev}}}], 0x20}}], 0x2, 0x0) 17:28:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_sset_info={0x2}}) 17:28:28 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x8) 17:28:28 executing program 3: setgroups(0x0, 0x0) r0 = io_uring_setup(0x454c, &(0x7f0000000240)) fchown(r0, 0xee01, 0xee00) [ 92.455983] audit: type=1400 audit(1674581308.071:6): avc: denied { execmem } for pid=259 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:28:28 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000180)={0x0, 0x2, r0}) 17:28:28 executing program 5: syz_io_uring_setup(0xeaf, &(0x7f0000000140), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}}, 0x0) sigaltstack(&(0x7f0000ffe000/0x2000)=nil, 0x0) 17:28:28 executing program 6: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8c) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') 17:28:28 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) [ 93.742516] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.745356] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.746793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.750425] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.753058] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.755385] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.793540] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.795463] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.798698] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.802705] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.805702] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.807049] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 93.808774] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.815963] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.818072] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.821736] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.826916] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.834458] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.834497] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.865057] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.869397] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 93.870958] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.873586] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.874836] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 93.877020] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 93.881520] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.883652] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 93.884974] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.891672] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.893918] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 93.902534] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.905756] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 93.907709] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.935447] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 93.937677] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 93.939075] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 93.945454] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 93.954713] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 93.954911] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 93.956828] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 93.960502] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 93.962993] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 93.987697] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 93.991059] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 93.993326] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 94.019004] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 94.019083] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 94.021112] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 95.825547] Bluetooth: hci0: command 0x0409 tx timeout [ 95.889475] Bluetooth: hci1: command 0x0409 tx timeout [ 95.953351] Bluetooth: hci3: command 0x0409 tx timeout [ 95.953374] Bluetooth: hci2: command 0x0409 tx timeout [ 95.953579] Bluetooth: hci4: command 0x0409 tx timeout [ 96.018262] Bluetooth: hci6: command 0x0409 tx timeout [ 96.081279] Bluetooth: hci5: command 0x0409 tx timeout [ 96.145416] Bluetooth: hci7: command 0x0409 tx timeout [ 97.873204] Bluetooth: hci0: command 0x041b tx timeout [ 97.937253] Bluetooth: hci1: command 0x041b tx timeout [ 98.001267] Bluetooth: hci4: command 0x041b tx timeout [ 98.002210] Bluetooth: hci3: command 0x041b tx timeout [ 98.002584] Bluetooth: hci2: command 0x041b tx timeout [ 98.065343] Bluetooth: hci6: command 0x041b tx timeout [ 98.129261] Bluetooth: hci5: command 0x041b tx timeout [ 98.193275] Bluetooth: hci7: command 0x041b tx timeout [ 99.921235] Bluetooth: hci0: command 0x040f tx timeout [ 99.985251] Bluetooth: hci1: command 0x040f tx timeout [ 100.049251] Bluetooth: hci2: command 0x040f tx timeout [ 100.049907] Bluetooth: hci3: command 0x040f tx timeout [ 100.050594] Bluetooth: hci4: command 0x040f tx timeout [ 100.113218] Bluetooth: hci6: command 0x040f tx timeout [ 100.177229] Bluetooth: hci5: command 0x040f tx timeout [ 100.241251] Bluetooth: hci7: command 0x040f tx timeout [ 101.969208] Bluetooth: hci0: command 0x0419 tx timeout [ 102.033257] Bluetooth: hci1: command 0x0419 tx timeout [ 102.097267] Bluetooth: hci4: command 0x0419 tx timeout [ 102.097675] Bluetooth: hci3: command 0x0419 tx timeout [ 102.098029] Bluetooth: hci2: command 0x0419 tx timeout [ 102.161237] Bluetooth: hci6: command 0x0419 tx timeout [ 102.225220] Bluetooth: hci5: command 0x0419 tx timeout [ 102.289200] Bluetooth: hci7: command 0x0419 tx timeout [ 151.089054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.089907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.091066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 151.377510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.378218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.380018] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 151.612928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.613732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.678684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 151.784411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.785452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.787857] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 151.945954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.947334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.949559] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 152.105838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.106714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.145773] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 152.251388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.253238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.256582] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 152.286243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.286992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.288795] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 152.438085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.438819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.440359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 152.470918] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=3859 'syz-executor.7' [ 152.474454] loop7: detected capacity change from 0 to 40 [ 152.516681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.517396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.519479] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 17:29:28 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) [ 152.590085] loop7: detected capacity change from 0 to 40 17:29:28 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) [ 152.652889] loop7: detected capacity change from 0 to 40 17:29:28 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) [ 152.729843] loop7: detected capacity change from 0 to 40 17:29:28 executing program 7: syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@random="5398acdc7185", @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x3a, 0x0, @private2, @empty, [], "52168a0f02b79fbf"}}}}}}}, 0x0) 17:29:28 executing program 7: syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@random="5398acdc7185", @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x3a, 0x0, @private2, @empty, [], "52168a0f02b79fbf"}}}}}}}, 0x0) 17:29:28 executing program 7: syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@random="5398acdc7185", @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x3a, 0x0, @private2, @empty, [], "52168a0f02b79fbf"}}}}}}}, 0x0) 17:29:28 executing program 7: syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@random="5398acdc7185", @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x3a, 0x0, @private2, @empty, [], "52168a0f02b79fbf"}}}}}}}, 0x0) 17:29:28 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@empty, 0x0, 0x3c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x104}}, 0x0) [ 155.926847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.934378] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.940053] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.945789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.947036] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 155.948598] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 156.164178] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 156.167892] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 156.169076] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 156.177721] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 156.181079] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 156.183431] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 156.243539] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 156.264808] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 156.266097] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 156.268869] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 156.270532] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 156.272346] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 156.277561] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 156.279976] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 156.281656] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 156.284552] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 156.287991] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 156.289971] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 156.294655] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 156.310729] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 156.314050] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 156.314068] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 156.316570] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 156.318940] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 156.319912] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 156.321365] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 156.323222] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 156.476616] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 156.479247] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 156.482456] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 157.969287] Bluetooth: hci0: command 0x0409 tx timeout [ 158.289380] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 158.353283] Bluetooth: hci1: command 0x0409 tx timeout [ 158.355705] Bluetooth: hci2: command 0x0409 tx timeout [ 158.355757] Bluetooth: hci3: command 0x0409 tx timeout [ 158.417618] Bluetooth: hci6: command 0x0409 tx timeout [ 158.610309] Bluetooth: hci5: command 0x0409 tx timeout [ 160.017299] Bluetooth: hci0: command 0x041b tx timeout [ 160.401411] Bluetooth: hci1: command 0x041b tx timeout [ 160.402744] Bluetooth: hci2: command 0x041b tx timeout [ 160.403965] Bluetooth: hci3: command 0x041b tx timeout [ 160.465303] Bluetooth: hci6: command 0x041b tx timeout [ 160.657264] Bluetooth: hci5: command 0x041b tx timeout [ 161.547071] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 161.548822] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 161.550300] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 161.553455] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 161.555707] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 161.557396] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 162.065246] Bluetooth: hci0: command 0x040f tx timeout [ 162.449368] Bluetooth: hci3: command 0x040f tx timeout [ 162.449426] Bluetooth: hci2: command 0x040f tx timeout [ 162.449868] Bluetooth: hci1: command 0x040f tx timeout [ 162.514546] Bluetooth: hci6: command 0x040f tx timeout [ 162.705227] Bluetooth: hci5: command 0x040f tx timeout [ 163.666279] Bluetooth: hci7: command 0x0409 tx timeout [ 164.114238] Bluetooth: hci0: command 0x0419 tx timeout [ 164.498717] Bluetooth: hci2: command 0x0419 tx timeout [ 164.499439] Bluetooth: hci3: command 0x0419 tx timeout [ 164.499867] Bluetooth: hci1: command 0x0419 tx timeout [ 164.561242] Bluetooth: hci6: command 0x0419 tx timeout [ 164.753227] Bluetooth: hci5: command 0x0419 tx timeout [ 165.713222] Bluetooth: hci7: command 0x041b tx timeout [ 167.761303] Bluetooth: hci7: command 0x040f tx timeout [ 169.809238] Bluetooth: hci7: command 0x0419 tx timeout [ 216.722951] Bluetooth: hci4: command 0x0406 tx timeout [ 218.148695] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 218.150636] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.152453] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.154870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.155972] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 218.157650] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.517540] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 218.518871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 218.520105] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 218.522330] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 218.524229] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 218.525020] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 218.626910] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 218.627292] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 218.634500] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 218.640614] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 218.641529] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 218.644738] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 218.645896] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 218.646904] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 218.713483] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 218.715030] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 218.725814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 218.726487] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 218.761428] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 218.762295] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 218.771416] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 218.772027] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 218.777478] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 218.778108] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 220.241435] Bluetooth: hci0: command 0x0409 tx timeout [ 220.561455] Bluetooth: hci1: command 0x0409 tx timeout [ 220.626357] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 220.689256] Bluetooth: hci5: command 0x0409 tx timeout [ 220.818310] Bluetooth: hci2: command 0x0409 tx timeout [ 220.819313] Bluetooth: hci3: command 0x0409 tx timeout [ 222.290217] Bluetooth: hci0: command 0x041b tx timeout [ 222.610221] Bluetooth: hci1: command 0x041b tx timeout [ 222.737216] Bluetooth: hci5: command 0x041b tx timeout [ 222.866384] Bluetooth: hci3: command 0x041b tx timeout [ 222.867594] Bluetooth: hci2: command 0x041b tx timeout [ 223.510627] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 223.511950] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 223.513639] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 223.516582] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 223.518590] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 223.519971] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 224.337225] Bluetooth: hci0: command 0x040f tx timeout [ 224.658213] Bluetooth: hci1: command 0x040f tx timeout [ 224.785290] Bluetooth: hci5: command 0x040f tx timeout [ 224.913269] Bluetooth: hci2: command 0x040f tx timeout [ 224.913348] Bluetooth: hci3: command 0x040f tx timeout [ 225.553254] Bluetooth: hci6: command 0x0409 tx timeout [ 226.130241] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 226.385266] Bluetooth: hci0: command 0x0419 tx timeout [ 226.706393] Bluetooth: hci1: command 0x0419 tx timeout [ 226.833239] Bluetooth: hci5: command 0x0419 tx timeout [ 226.961879] Bluetooth: hci2: command 0x0419 tx timeout [ 226.962255] Bluetooth: hci3: command 0x0419 tx timeout [ 227.601213] Bluetooth: hci6: command 0x041b tx timeout [ 229.649261] Bluetooth: hci6: command 0x040f tx timeout [ 231.313322] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 231.698214] Bluetooth: hci6: command 0x0419 tx timeout [ 234.607104] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 234.635620] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 234.641129] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 234.658395] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 234.663896] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 234.665666] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 236.691038] Bluetooth: hci7: command 0x0409 tx timeout [ 238.738247] Bluetooth: hci7: command 0x041b tx timeout [ 240.785423] Bluetooth: hci7: command 0x040f tx timeout [ 242.833267] Bluetooth: hci7: command 0x0419 tx timeout [ 280.616585] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 280.618756] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 280.623697] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 280.627118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 280.629740] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 280.632092] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 280.860601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.862512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.865777] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 280.931380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.933476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.936457] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 281.447385] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 281.447985] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 281.452499] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 281.452571] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 281.456290] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 281.457198] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 281.460406] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 281.465589] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 281.470798] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 281.471823] audit: type=1400 audit(1674581497.087:7): avc: denied { open } for pid=9717 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 281.472922] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 281.473570] audit: type=1400 audit(1674581497.087:8): avc: denied { kernel } for pid=9717 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 281.474019] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 281.477645] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 281.519168] hrtimer: interrupt took 28324 ns [ 282.642343] Bluetooth: hci0: command 0x0409 tx timeout [ 283.345246] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 283.410387] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 283.537579] Bluetooth: hci3: command 0x0409 tx timeout [ 283.537621] Bluetooth: hci5: command 0x0409 tx timeout [ 284.689272] Bluetooth: hci0: command 0x041b tx timeout [ 285.585259] Bluetooth: hci5: command 0x041b tx timeout [ 285.587424] Bluetooth: hci3: command 0x041b tx timeout [ 286.381824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 286.388024] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 286.390719] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 286.410094] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 286.419422] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 286.426013] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 286.738248] Bluetooth: hci0: command 0x040f tx timeout [ 287.013331] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 287.016069] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 287.029571] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 287.043723] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 287.057788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 287.073095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 287.634549] Bluetooth: hci5: command 0x040f tx timeout [ 287.634603] Bluetooth: hci3: command 0x040f tx timeout [ 288.466259] Bluetooth: hci1: command 0x0409 tx timeout [ 288.785423] Bluetooth: hci0: command 0x0419 tx timeout [ 289.106358] Bluetooth: hci2: command 0x0409 tx timeout [ 289.682854] Bluetooth: hci3: command 0x0419 tx timeout [ 289.682894] Bluetooth: hci5: command 0x0419 tx timeout [ 290.513340] Bluetooth: hci1: command 0x041b tx timeout [ 290.891974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.892743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.895098] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 291.055042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.055891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.059748] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 291.153256] Bluetooth: hci2: command 0x041b tx timeout [ 292.561311] Bluetooth: hci1: command 0x040f tx timeout [ 293.202214] Bluetooth: hci2: command 0x040f tx timeout [ 294.609265] Bluetooth: hci1: command 0x0419 tx timeout [ 295.250216] Bluetooth: hci2: command 0x0419 tx timeout [ 329.146650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.147425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.149578] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 329.338944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.339718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.341931] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 330.008943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.010989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.028013] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 330.076860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.078836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.081777] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 330.163854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.165678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.168968] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 330.276671] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.278554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.281409] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 332.816649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.818331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.820784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 332.867277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.868022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.870302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 333.049237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.050619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.053332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 333.086092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.086830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.088890] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 17:32:29 executing program 5: syz_io_uring_setup(0xeaf, &(0x7f0000000140), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}}, 0x0) sigaltstack(&(0x7f0000ffe000/0x2000)=nil, 0x0) 17:32:29 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@empty, 0x0, 0x3c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x104}}, 0x0) 17:32:29 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000180)={0x0, 0x2, r0}) 17:32:29 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x8) 17:32:29 executing program 3: setgroups(0x0, 0x0) r0 = io_uring_setup(0x454c, &(0x7f0000000240)) fchown(r0, 0xee01, 0xee00) 17:32:29 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@empty, 0x0, 0x3c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x104}}, 0x0) 17:32:29 executing program 6: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8c) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') 17:32:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000024c0)=0x1d, 0x4) 17:32:29 executing program 0: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x29, 0x0, &(0x7f0000000000)=0x28) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0x0, 0x0, r0}) r4 = signalfd(r2, &(0x7f0000000400)={[0xff]}, 0x8) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f0000000440), &(0x7f0000000480)=0x8) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r3, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc) setsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000180)={@multicast2, @private=0xac141400}, 0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@dev, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f00000001c0)=0x109) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000240)={@remote, @broadcast}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'wlan0\x00'}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) 17:32:29 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@empty, 0x0, 0x3c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x104}}, 0x0) 17:32:30 executing program 5: syz_io_uring_setup(0xeaf, &(0x7f0000000140), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}}, 0x0) sigaltstack(&(0x7f0000ffe000/0x2000)=nil, 0x0) 17:32:30 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@empty, 0x0, 0x3c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x104}}, 0x0) 17:32:30 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x8) 17:32:30 executing program 6: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8c) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') 17:32:30 executing program 3: setgroups(0x0, 0x0) r0 = io_uring_setup(0x454c, &(0x7f0000000240)) fchown(r0, 0xee01, 0xee00) 17:32:30 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@empty, 0x0, 0x3c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x104}}, 0x0) 17:32:30 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000180)={0x0, 0x2, r0}) 17:32:30 executing program 0: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x29, 0x0, &(0x7f0000000000)=0x28) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0x0, 0x0, r0}) r4 = signalfd(r2, &(0x7f0000000400)={[0xff]}, 0x8) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f0000000440), &(0x7f0000000480)=0x8) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r3, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc) setsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000180)={@multicast2, @private=0xac141400}, 0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@dev, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f00000001c0)=0x109) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000240)={@remote, @broadcast}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'wlan0\x00'}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) 17:32:30 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup(r0) syncfs(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003f00)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="dde482cd37b01fb049f92c2ce6c9a8510391fbffffffffffffff329839bfd5c42f60ab7c105292da5995fadc49efe38ee81a78a30bfb0b78"], 0x60}}], 0x1, 0x0) ioctl$CDROMMULTISESSION(r2, 0x5310, &(0x7f0000000000)={@msf={0x8, 0x6, 0x1}, 0x1, 0x1}) 17:32:30 executing program 3: setgroups(0x0, 0x0) r0 = io_uring_setup(0x454c, &(0x7f0000000240)) fchown(r0, 0xee01, 0xee00) 17:32:30 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@empty, 0x0, 0x3c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x104}}, 0x0) 17:32:30 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x8) 17:32:30 executing program 6: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8c) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') 17:32:30 executing program 5: syz_io_uring_setup(0xeaf, &(0x7f0000000140), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}}, 0x0) sigaltstack(&(0x7f0000ffe000/0x2000)=nil, 0x0) 17:32:30 executing program 3: accept4$packet(0xffffffffffffffff, &(0x7f0000001b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001b80)=0x14, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@empty, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3, 0x4649, 0x1, 0x200, 0x95, 0x10200, r0}) r3 = syz_open_dev$vcsa(&(0x7f0000001c80), 0x496, 0x400) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="00000000971a0000002e2f66696c653000"]) fcntl$getownex(r4, 0x10, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x200, 0x1, 0x0, 0x29}, {0x6, 0x80, 0x1, 0x7f}]}) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x2, 0x2, &(0x7f0000001f00)=[{0x0, 0x0, 0x100000000}, {0x0}]) 17:32:30 executing program 0: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x29, 0x0, &(0x7f0000000000)=0x28) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0x0, 0x0, r0}) r4 = signalfd(r2, &(0x7f0000000400)={[0xff]}, 0x8) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f0000000440), &(0x7f0000000480)=0x8) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r3, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc) setsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000180)={@multicast2, @private=0xac141400}, 0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@dev, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f00000001c0)=0x109) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000240)={@remote, @broadcast}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'wlan0\x00'}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) 17:32:31 executing program 6: timer_create(0xfffffff4, 0x0, &(0x7f0000000040)) 17:32:31 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/kexec_crash_size', 0x7d1204c4af9dbdae, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, r2, 0x805}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb197}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000000000000000400bf003e0008026d1d59b13c9f39d01efb4f42cb664c95d3633dc0d9172ab06dfc35f828deec8afcf8ed"], 0x125) 17:32:31 executing program 6: kexec_load(0x0, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x480000000000000}], 0x0) 17:32:31 executing program 6: kexec_load(0x0, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x480000000000000}], 0x0) 17:32:31 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup(r0) syncfs(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003f00)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="dde482cd37b01fb049f92c2ce6c9a8510391fbffffffffffffff329839bfd5c42f60ab7c105292da5995fadc49efe38ee81a78a30bfb0b78"], 0x60}}], 0x1, 0x0) ioctl$CDROMMULTISESSION(r2, 0x5310, &(0x7f0000000000)={@msf={0x8, 0x6, 0x1}, 0x1, 0x1}) 17:32:31 executing program 6: kexec_load(0x0, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x480000000000000}], 0x0) [ 345.009406] loop3: detected capacity change from 0 to 264192 [ 347.796593] Bluetooth: hci6: command 0x0406 tx timeout 17:32:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000180)={0x0, 0x2, r0}) 17:32:54 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup(r0) syncfs(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003f00)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="dde482cd37b01fb049f92c2ce6c9a8510391fbffffffffffffff329839bfd5c42f60ab7c105292da5995fadc49efe38ee81a78a30bfb0b78"], 0x60}}], 0x1, 0x0) ioctl$CDROMMULTISESSION(r2, 0x5310, &(0x7f0000000000)={@msf={0x8, 0x6, 0x1}, 0x1, 0x1}) 17:32:54 executing program 2: read(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ptrace$setsig(0x4203, 0x0, 0x8, &(0x7f0000000200)={0x7}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000040)=ANY=[]) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x44) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) 17:32:54 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/kexec_crash_size', 0x7d1204c4af9dbdae, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, r2, 0x805}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb197}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000000000000000400bf003e0008026d1d59b13c9f39d01efb4f42cb664c95d3633dc0d9172ab06dfc35f828deec8afcf8ed"], 0x125) 17:32:54 executing program 6: kexec_load(0x0, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x480000000000000}], 0x0) 17:32:54 executing program 0: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x29, 0x0, &(0x7f0000000000)=0x28) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0x0, 0x0, r0}) r4 = signalfd(r2, &(0x7f0000000400)={[0xff]}, 0x8) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f0000000440), &(0x7f0000000480)=0x8) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r3, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc) setsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000180)={@multicast2, @private=0xac141400}, 0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@dev, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f00000001c0)=0x109) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000240)={@remote, @broadcast}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'wlan0\x00'}) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) 17:32:54 executing program 7: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) fcntl$dupfd(0xffffffffffffffff, 0x1193f424852396c6, 0xffffffffffffffff) 17:32:54 executing program 3: accept4$packet(0xffffffffffffffff, &(0x7f0000001b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001b80)=0x14, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@empty, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3, 0x4649, 0x1, 0x200, 0x95, 0x10200, r0}) r3 = syz_open_dev$vcsa(&(0x7f0000001c80), 0x496, 0x400) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="00000000971a0000002e2f66696c653000"]) fcntl$getownex(r4, 0x10, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x200, 0x1, 0x0, 0x29}, {0x6, 0x80, 0x1, 0x7f}]}) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x2, 0x2, &(0x7f0000001f00)=[{0x0, 0x0, 0x100000000}, {0x0}]) [ 358.715141] blktrace: Concurrent blktraces are not allowed on sg0 17:32:54 executing program 6: r0 = syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000840), 0x0, 0x0, 0x1}, 0x101) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) [ 359.633339] loop3: detected capacity change from 0 to 264192 [ 360.146235] Bluetooth: hci7: command 0x0406 tx timeout 17:32:57 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup(r0) syncfs(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003f00)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="dde482cd37b01fb049f92c2ce6c9a8510391fbffffffffffffff329839bfd5c42f60ab7c105292da5995fadc49efe38ee81a78a30bfb0b78"], 0x60}}], 0x1, 0x0) ioctl$CDROMMULTISESSION(r2, 0x5310, &(0x7f0000000000)={@msf={0x8, 0x6, 0x1}, 0x1, 0x1}) 17:32:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001fc0)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) 17:32:57 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/kexec_crash_size', 0x7d1204c4af9dbdae, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, r2, 0x805}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb197}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000000000000000400bf003e0008026d1d59b13c9f39d01efb4f42cb664c95d3633dc0d9172ab06dfc35f828deec8afcf8ed"], 0x125) 17:32:57 executing program 7: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) fcntl$dupfd(0xffffffffffffffff, 0x1193f424852396c6, 0xffffffffffffffff) 17:32:57 executing program 6: r0 = syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000840), 0x0, 0x0, 0x1}, 0x101) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 17:32:57 executing program 3: accept4$packet(0xffffffffffffffff, &(0x7f0000001b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001b80)=0x14, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@empty, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3, 0x4649, 0x1, 0x200, 0x95, 0x10200, r0}) r3 = syz_open_dev$vcsa(&(0x7f0000001c80), 0x496, 0x400) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="00000000971a0000002e2f66696c653000"]) fcntl$getownex(r4, 0x10, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x200, 0x1, 0x0, 0x29}, {0x6, 0x80, 0x1, 0x7f}]}) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x2, 0x2, &(0x7f0000001f00)=[{0x0, 0x0, 0x100000000}, {0x0}]) 17:32:57 executing program 2: read(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ptrace$setsig(0x4203, 0x0, 0x8, &(0x7f0000000200)={0x7}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000040)=ANY=[]) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x44) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) 17:32:57 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) fcntl$dupfd(0xffffffffffffffff, 0x1193f424852396c6, 0xffffffffffffffff) 17:32:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ab6e2, 0x0) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=virtio,', {[{@mmap}, {@cache_loose}, {@privport}, {@noextend}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@msize={'msize', 0x3d, 0x3}}], [{@appraise}, {@obj_user}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '*#i\xc9\xfc\xd8U\xd9\xda\v\xf9\x8f\xb0I]+&[\x1b\v\x8e)x\xb0\xa8SnG\xa0\xaf\xd47\xffU\xbc!-,\x11m\x84\xec\xa9i5\t\x1a(\xd4\x15\xba\xd8\x1e\x00\x00'}}, {@seclabel}, {@euid_lt={'euid<', 0xee00}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]}}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) [ 362.462172] loop3: detected capacity change from 0 to 264192 17:32:58 executing program 6: r0 = syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000840), 0x0, 0x0, 0x1}, 0x101) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 17:32:58 executing program 2: read(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ptrace$setsig(0x4203, 0x0, 0x8, &(0x7f0000000200)={0x7}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000040)=ANY=[]) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x44) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) 17:32:58 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/kexec_crash_size', 0x7d1204c4af9dbdae, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, r2, 0x805}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb197}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000000000000000400bf003e0008026d1d59b13c9f39d01efb4f42cb664c95d3633dc0d9172ab06dfc35f828deec8afcf8ed"], 0x125) 17:32:58 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x7041, 0x0) 17:32:58 executing program 5: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000580)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) [ 363.045734] audit: type=1401 audit(1674581578.660:9): op=setxattr invalid_context="" 17:32:58 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() sched_getparam(0x0, 0x0) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000340)="a9", 0x1}, {0x0}], 0x0, 0x0) 17:32:59 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ab6e2, 0x0) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=virtio,', {[{@mmap}, {@cache_loose}, {@privport}, {@noextend}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@msize={'msize', 0x3d, 0x3}}], [{@appraise}, {@obj_user}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '*#i\xc9\xfc\xd8U\xd9\xda\v\xf9\x8f\xb0I]+&[\x1b\v\x8e)x\xb0\xa8SnG\xa0\xaf\xd47\xffU\xbc!-,\x11m\x84\xec\xa9i5\t\x1a(\xd4\x15\xba\xd8\x1e\x00\x00'}}, {@seclabel}, {@euid_lt={'euid<', 0xee00}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]}}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) [ 363.779292] audit: type=1400 audit(1674581579.393:10): avc: denied { write } for pid=12244 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 17:33:01 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) fcntl$dupfd(0xffffffffffffffff, 0x1193f424852396c6, 0xffffffffffffffff) 17:33:01 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ab6e2, 0x0) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=virtio,', {[{@mmap}, {@cache_loose}, {@privport}, {@noextend}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@msize={'msize', 0x3d, 0x3}}], [{@appraise}, {@obj_user}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '*#i\xc9\xfc\xd8U\xd9\xda\v\xf9\x8f\xb0I]+&[\x1b\v\x8e)x\xb0\xa8SnG\xa0\xaf\xd47\xffU\xbc!-,\x11m\x84\xec\xa9i5\t\x1a(\xd4\x15\xba\xd8\x1e\x00\x00'}}, {@seclabel}, {@euid_lt={'euid<', 0xee00}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]}}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 17:33:01 executing program 3: accept4$packet(0xffffffffffffffff, &(0x7f0000001b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001b80)=0x14, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@empty, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3, 0x4649, 0x1, 0x200, 0x95, 0x10200, r0}) r3 = syz_open_dev$vcsa(&(0x7f0000001c80), 0x496, 0x400) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="00000000971a0000002e2f66696c653000"]) fcntl$getownex(r4, 0x10, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x200, 0x1, 0x0, 0x29}, {0x6, 0x80, 0x1, 0x7f}]}) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x2, 0x2, &(0x7f0000001f00)=[{0x0, 0x0, 0x100000000}, {0x0}]) 17:33:01 executing program 7: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) fcntl$dupfd(0xffffffffffffffff, 0x1193f424852396c6, 0xffffffffffffffff) 17:33:01 executing program 6: r0 = syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000840), 0x0, 0x0, 0x1}, 0x101) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 17:33:01 executing program 2: read(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x535081, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ptrace$setsig(0x4203, 0x0, 0x8, &(0x7f0000000200)={0x7}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000040)=ANY=[]) r0 = fork() ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x44) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) 17:33:01 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() sched_getparam(0x0, 0x0) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000340)="a9", 0x1}, {0x0}], 0x0, 0x0) 17:33:01 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ab6e2, 0x0) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=virtio,', {[{@mmap}, {@cache_loose}, {@privport}, {@noextend}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@msize={'msize', 0x3d, 0x3}}], [{@appraise}, {@obj_user}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '*#i\xc9\xfc\xd8U\xd9\xda\v\xf9\x8f\xb0I]+&[\x1b\v\x8e)x\xb0\xa8SnG\xa0\xaf\xd47\xffU\xbc!-,\x11m\x84\xec\xa9i5\t\x1a(\xd4\x15\xba\xd8\x1e\x00\x00'}}, {@seclabel}, {@euid_lt={'euid<', 0xee00}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]}}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 17:33:01 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ab6e2, 0x0) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=virtio,', {[{@mmap}, {@cache_loose}, {@privport}, {@noextend}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@msize={'msize', 0x3d, 0x3}}], [{@appraise}, {@obj_user}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '*#i\xc9\xfc\xd8U\xd9\xda\v\xf9\x8f\xb0I]+&[\x1b\v\x8e)x\xb0\xa8SnG\xa0\xaf\xd47\xffU\xbc!-,\x11m\x84\xec\xa9i5\t\x1a(\xd4\x15\xba\xd8\x1e\x00\x00'}}, {@seclabel}, {@euid_lt={'euid<', 0xee00}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]}}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 17:33:01 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() sched_getparam(0x0, 0x0) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000340)="a9", 0x1}, {0x0}], 0x0, 0x0) [ 368.016114] loop3: detected capacity change from 0 to 264192 17:33:03 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ab6e2, 0x0) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=virtio,', {[{@mmap}, {@cache_loose}, {@privport}, {@noextend}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@msize={'msize', 0x3d, 0x3}}], [{@appraise}, {@obj_user}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '*#i\xc9\xfc\xd8U\xd9\xda\v\xf9\x8f\xb0I]+&[\x1b\v\x8e)x\xb0\xa8SnG\xa0\xaf\xd47\xffU\xbc!-,\x11m\x84\xec\xa9i5\t\x1a(\xd4\x15\xba\xd8\x1e\x00\x00'}}, {@seclabel}, {@euid_lt={'euid<', 0xee00}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]}}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 17:33:03 executing program 3: r0 = fsopen(&(0x7f0000000080)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mknodat$null(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) move_mount(r1, &(0x7f00000007c0)='./file0\x00', r1, &(0x7f0000000800)='./file0\x00', 0x0) 17:33:03 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ab6e2, 0x0) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=virtio,', {[{@mmap}, {@cache_loose}, {@privport}, {@noextend}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@msize={'msize', 0x3d, 0x3}}], [{@appraise}, {@obj_user}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '*#i\xc9\xfc\xd8U\xd9\xda\v\xf9\x8f\xb0I]+&[\x1b\v\x8e)x\xb0\xa8SnG\xa0\xaf\xd47\xffU\xbc!-,\x11m\x84\xec\xa9i5\t\x1a(\xd4\x15\xba\xd8\x1e\x00\x00'}}, {@seclabel}, {@euid_lt={'euid<', 0xee00}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]}}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 17:33:03 executing program 6: r0 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000001600)='./file0\x00', 0x0, 0x7) ioctl$int_in(r2, 0x5421, &(0x7f0000001640)=0xffffffff) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000500)={{}, r1, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000001680)=ANY=[@ANYBLOB="0200b5009ebfd162aeb6b2b946f1d86171e936645bc9101120788ada944916095ed7e4d045ebe7a296eb4b5a850d92b63224a8225be948656f0a8a5c84ee11363cbfe28c6932ac1cfdd864edf14467b61ddbffd0eab715f90ecaf183b3fb5ff68a966f7c248f7f195a693a7ecb592715c261a5613da0a2121cde043240e63fab8f9b1ef51fc1b2d7d4ae57e9036cacecf008468aa7a5d8eff801d10c97760000000000001dbeebbbd85f7fa87db0a22d44cfecf8ab6743adb7"]) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000002600), 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4b00, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)) ppoll(&(0x7f00000001c0)=[{r4, 0x100}, {0xffffffffffffffff, 0x2001}, {0xffffffffffffffff, 0x280}, {0xffffffffffffffff, 0x1184}, {0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x3119}], 0x7, &(0x7f0000001500), &(0x7f0000001540)={[0x4]}, 0x8) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000000)=0x59b) sendfile(0xffffffffffffffff, r4, 0x0, 0x5) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x7}, 0x8550, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x862a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f0000000100)="791b7d2577ec32834a9a9aafee0def956e242de950d5fb727f8252a2dc6dddf0b7989216f868d4bb30764ab9b8b02c", 0x2f, 0x59, 0x0) accept$unix(r3, 0x0, &(0x7f0000000200)) fork() 17:33:03 executing program 7: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) fcntl$dupfd(0xffffffffffffffff, 0x1193f424852396c6, 0xffffffffffffffff) 17:33:03 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() sched_getparam(0x0, 0x0) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000340)="a9", 0x1}, {0x0}], 0x0, 0x0) 17:33:03 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/locks\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) fcntl$dupfd(0xffffffffffffffff, 0x1193f424852396c6, 0xffffffffffffffff) 17:33:04 executing program 3: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) mount$9p_unix(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x100000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 17:33:04 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x7174, &(0x7f00000001c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 17:33:04 executing program 3: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) mount$9p_unix(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x100000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 17:33:04 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x7174, &(0x7f00000001c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 17:33:04 executing program 0: r0 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x9, 0x0, 0x0, 0x0) 17:33:04 executing program 3: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) mount$9p_unix(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x100000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 17:33:04 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x24e1, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000002000)) 17:33:04 executing program 3: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) mount$9p_unix(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x100000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 17:33:04 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0xc) 17:33:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 17:33:04 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x0) 17:33:04 executing program 5: keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x1}) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="02b2dccad213e1e6cf54b7a797f8f22a47f25b7658fb110b2e76f95b0f318b8fa745e6ffba4414d29a42bfab524bc5bffb17decc4540a6f00b9772f5f9789a9525790df8d989b23530d0a1398f2ad734c7ff47961be476ffeec81efa3d3aa64b8ea329261dfc2e1047a68670f0e5950d6a5414956bddd09e101b5b66e5742fe843413e065e3b86a242b37bc58c68153a45015f6f1ea67762c302e461e0c84bbb7f8d464f5a72d9fad56dac0c5028a4012a93dbc7da640786e3c9898cdd8fe091b166bfcd66e6257abc923ceaf90e994deded3fe8a59c2105f5caf366d32170ef51299dbf441bc3cddda352a2e07375fb44e75fed8082f3e960015d9bcddb0c834feda68d113a9a9fc0d1c30153685caf43b176219b666d74e67b6192cfd8a561c6c4aadcc80ed8c469bc41b028f1db515d699e45ad3379f9b1edb8de4bb2f8615d6716297baac7e45073fcecf31e51ec78c40edd78f245bced04414f849fb961fbbe79ff2ed7c48ec1b5331f9755d7094986fc8da198ce4a12f9ddfb43e565bc4fed618da9a693d03c3e7ec4b3014dfc022103e277c1b12efb03ef8b197f3a931f6cbe238cf8a4e7639b409b4586f66da41b94eed69d52ba9fde5aa1ee774d4e626932dc3511b10ae3bc3e8688a7", 0x1ce}], 0x1) syncfs(0xffffffffffffffff) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x101001) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x40095505, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) perf_event_open(&(0x7f0000000580)={0x4, 0x80, 0x9, 0x40, 0x81, 0xf4, 0x0, 0x5, 0xb2080, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3908, 0x0, @perf_bp={0x0, 0x4}, 0x49668, 0x0, 0x6, 0x6, 0x5, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc) 17:33:05 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x25, 0x1, 0x0, 0x0, {{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x0) 17:33:05 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000300)='\x00', 0x14) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYBLOB]) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000e0f4655fe0f4655fe0f4655f000000000000040040", 0x1d, 0x2400}], 0x0, &(0x7f0000013e00)=ANY=[]) [ 370.154441] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.7'. 17:33:05 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x14, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}, 0x14}], 0x1}, 0x0) clock_gettime(0x0, &(0x7f0000006480)) clock_gettime(0xb43e8647eac494d8, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8001}}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) mq_timedsend(r1, &(0x7f0000000140)="a314c171c3fcfe2b2b2324ddab99ffc57d26e9ec598ca664c9837daa66e7554668dee403d71578b45aa0b22cf23954b85c36d3ab567fbc4d0c6a933f2ffb6bcfd7d88aeb25ddb5392c9f1180278dde24b58d228dd3b1302e1e0fe4b7d8fc6c8b04b76d6d11ac1c9ffae8410c1d7d185862cca70530b6177784e58f501300dd85c6db77034d979e76b9f9ac5fe4656f463186308221", 0x95, 0x6f5, &(0x7f0000000240)={r2, r3+10000000}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) flock(0xffffffffffffffff, 0x4) 17:33:05 executing program 4: syz_mount_image$ext4(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) 17:33:05 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x7174, &(0x7f00000001c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 17:33:05 executing program 6: r0 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000001600)='./file0\x00', 0x0, 0x7) ioctl$int_in(r2, 0x5421, &(0x7f0000001640)=0xffffffff) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000500)={{}, r1, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000001680)=ANY=[@ANYBLOB="0200b5009ebfd162aeb6b2b946f1d86171e936645bc9101120788ada944916095ed7e4d045ebe7a296eb4b5a850d92b63224a8225be948656f0a8a5c84ee11363cbfe28c6932ac1cfdd864edf14467b61ddbffd0eab715f90ecaf183b3fb5ff68a966f7c248f7f195a693a7ecb592715c261a5613da0a2121cde043240e63fab8f9b1ef51fc1b2d7d4ae57e9036cacecf008468aa7a5d8eff801d10c97760000000000001dbeebbbd85f7fa87db0a22d44cfecf8ab6743adb7"]) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000002600), 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4b00, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)) ppoll(&(0x7f00000001c0)=[{r4, 0x100}, {0xffffffffffffffff, 0x2001}, {0xffffffffffffffff, 0x280}, {0xffffffffffffffff, 0x1184}, {0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x3119}], 0x7, &(0x7f0000001500), &(0x7f0000001540)={[0x4]}, 0x8) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000000)=0x59b) sendfile(0xffffffffffffffff, r4, 0x0, 0x5) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x7}, 0x8550, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x862a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f0000000100)="791b7d2577ec32834a9a9aafee0def956e242de950d5fb727f8252a2dc6dddf0b7989216f868d4bb30764ab9b8b02c", 0x2f, 0x59, 0x0) accept$unix(r3, 0x0, &(0x7f0000000200)) fork() [ 371.293087] loop3: detected capacity change from 0 to 2048 [ 371.360078] EXT4-fs: error -4 creating inode table initialization thread [ 371.361373] EXT4-fs (loop3): mount failed 17:33:08 executing program 0: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x12, 0x0, 0x1) 17:33:08 executing program 5: r0 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000001600)='./file0\x00', 0x0, 0x7) ioctl$int_in(r2, 0x5421, &(0x7f0000001640)=0xffffffff) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000500)={{}, r1, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000001680)=ANY=[@ANYBLOB="0200b5009ebfd162aeb6b2b946f1d86171e936645bc9101120788ada944916095ed7e4d045ebe7a296eb4b5a850d92b63224a8225be948656f0a8a5c84ee11363cbfe28c6932ac1cfdd864edf14467b61ddbffd0eab715f90ecaf183b3fb5ff68a966f7c248f7f195a693a7ecb592715c261a5613da0a2121cde043240e63fab8f9b1ef51fc1b2d7d4ae57e9036cacecf008468aa7a5d8eff801d10c97760000000000001dbeebbbd85f7fa87db0a22d44cfecf8ab6743adb7"]) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000002600), 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4b00, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)) ppoll(&(0x7f00000001c0)=[{r4, 0x100}, {0xffffffffffffffff, 0x2001}, {0xffffffffffffffff, 0x280}, {0xffffffffffffffff, 0x1184}, {0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x3119}], 0x7, &(0x7f0000001500), &(0x7f0000001540)={[0x4]}, 0x8) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000000)=0x59b) sendfile(0xffffffffffffffff, r4, 0x0, 0x5) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x7}, 0x8550, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x862a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f0000000100)="791b7d2577ec32834a9a9aafee0def956e242de950d5fb727f8252a2dc6dddf0b7989216f868d4bb30764ab9b8b02c", 0x2f, 0x59, 0x0) accept$unix(r3, 0x0, &(0x7f0000000200)) fork() 17:33:08 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x7174, &(0x7f00000001c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 17:33:08 executing program 1: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x20082000) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x0}) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0}) 17:33:08 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x25, 0x1, 0x0, 0x0, {{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x0) 17:33:08 executing program 6: r0 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000001600)='./file0\x00', 0x0, 0x7) ioctl$int_in(r2, 0x5421, &(0x7f0000001640)=0xffffffff) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000500)={{}, r1, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000001680)=ANY=[@ANYBLOB="0200b5009ebfd162aeb6b2b946f1d86171e936645bc9101120788ada944916095ed7e4d045ebe7a296eb4b5a850d92b63224a8225be948656f0a8a5c84ee11363cbfe28c6932ac1cfdd864edf14467b61ddbffd0eab715f90ecaf183b3fb5ff68a966f7c248f7f195a693a7ecb592715c261a5613da0a2121cde043240e63fab8f9b1ef51fc1b2d7d4ae57e9036cacecf008468aa7a5d8eff801d10c97760000000000001dbeebbbd85f7fa87db0a22d44cfecf8ab6743adb7"]) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000002600), 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4b00, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)) ppoll(&(0x7f00000001c0)=[{r4, 0x100}, {0xffffffffffffffff, 0x2001}, {0xffffffffffffffff, 0x280}, {0xffffffffffffffff, 0x1184}, {0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x3119}], 0x7, &(0x7f0000001500), &(0x7f0000001540)={[0x4]}, 0x8) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000000)=0x59b) sendfile(0xffffffffffffffff, r4, 0x0, 0x5) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x7}, 0x8550, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x862a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f0000000100)="791b7d2577ec32834a9a9aafee0def956e242de950d5fb727f8252a2dc6dddf0b7989216f868d4bb30764ab9b8b02c", 0x2f, 0x59, 0x0) accept$unix(r3, 0x0, &(0x7f0000000200)) fork() 17:33:08 executing program 4: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = openat2(r0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) readahead(0xffffffffffffffff, 0x60, 0x9) syz_io_uring_setup(0x2c9e, &(0x7f0000000040), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$SNAPSHOT_FREE(r4, 0x3305) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 17:33:08 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000300)='\x00', 0x14) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYBLOB]) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000e0f4655fe0f4655fe0f4655f000000000000040040", 0x1d, 0x2400}], 0x0, &(0x7f0000013e00)=ANY=[]) [ 372.823594] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.7'. 17:33:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, 0x0) [ 373.023629] random: crng reseeded on system resumption [ 373.086603] Restarting kernel threads ... done. [ 373.310196] random: crng reseeded on system resumption [ 373.318305] Restarting kernel threads ... done. 17:33:11 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x25, 0x1, 0x0, 0x0, {{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x0) 17:33:11 executing program 0: syz_io_uring_setup(0x4a2f, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x6c) 17:33:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, 0x0) 17:33:11 executing program 2: ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f00000000c0)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000000)='./file0\x00', 0x280000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0xa0202, 0x0) openat(r1, &(0x7f00000001c0)='./file1\x00', 0x40000, 0x185) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x6991, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x1}) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(r2, r0, 0x0, 0xfffffdef) 17:33:11 executing program 4: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = openat2(r0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) readahead(0xffffffffffffffff, 0x60, 0x9) syz_io_uring_setup(0x2c9e, &(0x7f0000000040), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$SNAPSHOT_FREE(r4, 0x3305) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 17:33:11 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000300)='\x00', 0x14) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYBLOB]) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000e0f4655fe0f4655fe0f4655f000000000000040040", 0x1d, 0x2400}], 0x0, &(0x7f0000013e00)=ANY=[]) 17:33:11 executing program 5: r0 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000001600)='./file0\x00', 0x0, 0x7) ioctl$int_in(r2, 0x5421, &(0x7f0000001640)=0xffffffff) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000500)={{}, r1, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000001680)=ANY=[@ANYBLOB="0200b5009ebfd162aeb6b2b946f1d86171e936645bc9101120788ada944916095ed7e4d045ebe7a296eb4b5a850d92b63224a8225be948656f0a8a5c84ee11363cbfe28c6932ac1cfdd864edf14467b61ddbffd0eab715f90ecaf183b3fb5ff68a966f7c248f7f195a693a7ecb592715c261a5613da0a2121cde043240e63fab8f9b1ef51fc1b2d7d4ae57e9036cacecf008468aa7a5d8eff801d10c97760000000000001dbeebbbd85f7fa87db0a22d44cfecf8ab6743adb7"]) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000002600), 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4b00, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)) ppoll(&(0x7f00000001c0)=[{r4, 0x100}, {0xffffffffffffffff, 0x2001}, {0xffffffffffffffff, 0x280}, {0xffffffffffffffff, 0x1184}, {0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x3119}], 0x7, &(0x7f0000001500), &(0x7f0000001540)={[0x4]}, 0x8) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000000)=0x59b) sendfile(0xffffffffffffffff, r4, 0x0, 0x5) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x7}, 0x8550, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x862a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f0000000100)="791b7d2577ec32834a9a9aafee0def956e242de950d5fb727f8252a2dc6dddf0b7989216f868d4bb30764ab9b8b02c", 0x2f, 0x59, 0x0) accept$unix(r3, 0x0, &(0x7f0000000200)) fork() 17:33:11 executing program 6: r0 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000001600)='./file0\x00', 0x0, 0x7) ioctl$int_in(r2, 0x5421, &(0x7f0000001640)=0xffffffff) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000500)={{}, r1, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000001680)=ANY=[@ANYBLOB="0200b5009ebfd162aeb6b2b946f1d86171e936645bc9101120788ada944916095ed7e4d045ebe7a296eb4b5a850d92b63224a8225be948656f0a8a5c84ee11363cbfe28c6932ac1cfdd864edf14467b61ddbffd0eab715f90ecaf183b3fb5ff68a966f7c248f7f195a693a7ecb592715c261a5613da0a2121cde043240e63fab8f9b1ef51fc1b2d7d4ae57e9036cacecf008468aa7a5d8eff801d10c97760000000000001dbeebbbd85f7fa87db0a22d44cfecf8ab6743adb7"]) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000002600), 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4b00, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)) ppoll(&(0x7f00000001c0)=[{r4, 0x100}, {0xffffffffffffffff, 0x2001}, {0xffffffffffffffff, 0x280}, {0xffffffffffffffff, 0x1184}, {0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x3119}], 0x7, &(0x7f0000001500), &(0x7f0000001540)={[0x4]}, 0x8) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000000)=0x59b) sendfile(0xffffffffffffffff, r4, 0x0, 0x5) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x7}, 0x8550, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x862a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f0000000100)="791b7d2577ec32834a9a9aafee0def956e242de950d5fb727f8252a2dc6dddf0b7989216f868d4bb30764ab9b8b02c", 0x2f, 0x59, 0x0) accept$unix(r3, 0x0, &(0x7f0000000200)) fork() [ 375.918845] loop2: detected capacity change from 0 to 40 [ 376.005929] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.7'. 17:33:11 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = getpid() ptrace$peek(0x2, r3, &(0x7f0000000480)) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="74726103714d8f89733d66642c7266", @ANYRESHEX, @ANYBLOB="2c7766646e6f3d014f29ef99ad8b2ee6ab88d3ddf9f64fb3263bd7d202acf75f549842835d6fb6b6d4a6bd2e86e600000080ff23", @ANYRESHEX]) open_by_handle_at(r1, 0x0, 0x100) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setlease(r0, 0x400, 0x2) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x40001) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) 17:33:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, 0x0) 17:33:11 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x25, 0x1, 0x0, 0x0, {{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x0) [ 376.130322] random: crng reseeded on system resumption [ 376.193609] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.7'. [ 376.226868] Restarting kernel threads ... done. 17:33:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, 0x0) [ 376.799242] loop3: detected capacity change from 0 to 2048 17:33:20 executing program 5: r0 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000001600)='./file0\x00', 0x0, 0x7) ioctl$int_in(r2, 0x5421, &(0x7f0000001640)=0xffffffff) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000500)={{}, r1, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000001680)=ANY=[@ANYBLOB="0200b5009ebfd162aeb6b2b946f1d86171e936645bc9101120788ada944916095ed7e4d045ebe7a296eb4b5a850d92b63224a8225be948656f0a8a5c84ee11363cbfe28c6932ac1cfdd864edf14467b61ddbffd0eab715f90ecaf183b3fb5ff68a966f7c248f7f195a693a7ecb592715c261a5613da0a2121cde043240e63fab8f9b1ef51fc1b2d7d4ae57e9036cacecf008468aa7a5d8eff801d10c97760000000000001dbeebbbd85f7fa87db0a22d44cfecf8ab6743adb7"]) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000002600), 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4b00, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)) ppoll(&(0x7f00000001c0)=[{r4, 0x100}, {0xffffffffffffffff, 0x2001}, {0xffffffffffffffff, 0x280}, {0xffffffffffffffff, 0x1184}, {0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x3119}], 0x7, &(0x7f0000001500), &(0x7f0000001540)={[0x4]}, 0x8) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000000)=0x59b) sendfile(0xffffffffffffffff, r4, 0x0, 0x5) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x7}, 0x8550, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x862a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f0000000100)="791b7d2577ec32834a9a9aafee0def956e242de950d5fb727f8252a2dc6dddf0b7989216f868d4bb30764ab9b8b02c", 0x2f, 0x59, 0x0) accept$unix(r3, 0x0, &(0x7f0000000200)) fork() 17:33:20 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = getpid() ptrace$peek(0x2, r3, &(0x7f0000000480)) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="74726103714d8f89733d66642c7266", @ANYRESHEX, @ANYBLOB="2c7766646e6f3d014f29ef99ad8b2ee6ab88d3ddf9f64fb3263bd7d202acf75f549842835d6fb6b6d4a6bd2e86e600000080ff23", @ANYRESHEX]) open_by_handle_at(r1, 0x0, 0x100) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setlease(r0, 0x400, 0x2) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x40001) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) 17:33:20 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000300)='\x00', 0x14) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYBLOB]) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000e0f4655fe0f4655fe0f4655f000000000000040040", 0x1d, 0x2400}], 0x0, &(0x7f0000013e00)=ANY=[]) 17:33:20 executing program 6: syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x20100000, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100), 0x0, 0x0) umount2(&(0x7f0000000040)='./file0/../file0\x00', 0x0) 17:33:20 executing program 2: ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f00000000c0)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000000)='./file0\x00', 0x280000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0xa0202, 0x0) openat(r1, &(0x7f00000001c0)='./file1\x00', 0x40000, 0x185) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x6991, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x1}) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(r2, r0, 0x0, 0xfffffdef) 17:33:20 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0xff, 0x1, 0x6, 0x0, 0x3, 0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x100, 0x3}, 0x1010c, 0x400, 0x2, 0x5, 0x4, 0x1, 0x3f, 0x0, 0x3, 0x0, 0x100000000}, 0x0, 0x3, 0xffffffffffffffff, 0x8) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xc79}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000006, 0x30, r3, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @local}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00'}) fdatasync(r1) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0) [ 385.075561] loop2: detected capacity change from 0 to 40 17:33:20 executing program 4: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = openat2(r0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) readahead(0xffffffffffffffff, 0x60, 0x9) syz_io_uring_setup(0x2c9e, &(0x7f0000000040), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$SNAPSHOT_FREE(r4, 0x3305) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 17:33:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x7, 0x4) sendmmsg$sock(r0, &(0x7f00000038c0)=[{{&(0x7f00000036c0)=@in={0xa, 0x4e23, @local}, 0x80, 0x0}}], 0x1, 0x4c804) sendmmsg$inet6(r0, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0}}], 0x2, 0x0) [ 385.200870] random: crng reseeded on system resumption 17:33:20 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0c0583b, &(0x7f0000000040)) [ 385.237357] Restarting kernel threads ... done. 17:33:20 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x3, 0x8, 0x100000000, r2}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xff}}, './file0\x00'}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000300), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000001500)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x42, 0x0, "ae41ba3d08ae79cbef4c72343e141dc83dd4a24a447556e055d70b3b61fd7929acb571c66cd984146d66ae44bb567da9a6e26c17246bf5ac5a0b74d1cfdbac75e919f15f27d44a1e807ff95985c6f996"}, 0xd8) creat(&(0x7f0000000380)='./file0\x00', 0x0) kcmp(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) r4 = open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x8000) bind$bt_hci(r4, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) 17:33:20 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = getpid() ptrace$peek(0x2, r3, &(0x7f0000000480)) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="74726103714d8f89733d66642c7266", @ANYRESHEX, @ANYBLOB="2c7766646e6f3d014f29ef99ad8b2ee6ab88d3ddf9f64fb3263bd7d202acf75f549842835d6fb6b6d4a6bd2e86e600000080ff23", @ANYRESHEX]) open_by_handle_at(r1, 0x0, 0x100) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setlease(r0, 0x400, 0x2) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x40001) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) 17:33:21 executing program 4: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = openat2(r0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) readahead(0xffffffffffffffff, 0x60, 0x9) syz_io_uring_setup(0x2c9e, &(0x7f0000000040), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$SNAPSHOT_FREE(r4, 0x3305) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 17:33:21 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0xff, 0x1, 0x6, 0x0, 0x3, 0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x100, 0x3}, 0x1010c, 0x400, 0x2, 0x5, 0x4, 0x1, 0x3f, 0x0, 0x3, 0x0, 0x100000000}, 0x0, 0x3, 0xffffffffffffffff, 0x8) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xc79}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000006, 0x30, r3, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @local}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00'}) fdatasync(r1) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0) 17:33:21 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) [ 385.575939] loop3: detected capacity change from 0 to 2048 17:33:21 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 17:33:21 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = getpid() ptrace$peek(0x2, r3, &(0x7f0000000480)) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="74726103714d8f89733d66642c7266", @ANYRESHEX, @ANYBLOB="2c7766646e6f3d014f29ef99ad8b2ee6ab88d3ddf9f64fb3263bd7d202acf75f549842835d6fb6b6d4a6bd2e86e600000080ff23", @ANYRESHEX]) open_by_handle_at(r1, 0x0, 0x100) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setlease(r0, 0x400, 0x2) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x40001) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) [ 386.362726] syz-executor.2: attempt to access beyond end of device [ 386.362726] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 386.366413] Buffer I/O error on dev loop2, logical block 10, lost async page write 17:33:32 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0xff, 0x1, 0x6, 0x0, 0x3, 0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x100, 0x3}, 0x1010c, 0x400, 0x2, 0x5, 0x4, 0x1, 0x3f, 0x0, 0x3, 0x0, 0x100000000}, 0x0, 0x3, 0xffffffffffffffff, 0x8) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xc79}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000006, 0x30, r3, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @local}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00'}) fdatasync(r1) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0) 17:33:32 executing program 6: socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, 0x1c) syz_open_dev$mouse(&(0x7f0000000180), 0x7fff, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:33:34 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x3, 0x8, 0x100000000, r2}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xff}}, './file0\x00'}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000300), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000001500)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x42, 0x0, "ae41ba3d08ae79cbef4c72343e141dc83dd4a24a447556e055d70b3b61fd7929acb571c66cd984146d66ae44bb567da9a6e26c17246bf5ac5a0b74d1cfdbac75e919f15f27d44a1e807ff95985c6f996"}, 0xd8) creat(&(0x7f0000000380)='./file0\x00', 0x0) kcmp(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) r4 = open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x8000) bind$bt_hci(r4, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) 17:33:34 executing program 2: ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f00000000c0)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000000)='./file0\x00', 0x280000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0xa0202, 0x0) openat(r1, &(0x7f00000001c0)='./file1\x00', 0x40000, 0x185) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x6991, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x1}) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(r2, r0, 0x0, 0xfffffdef) 17:33:34 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xb) 17:33:34 executing program 5: sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x0) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x6, 0x0, 0x0, 0x81, 0x6, 0x89}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) epoll_create(0x4) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600), 0x400000, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) ioctl$CDROMSTART(r1, 0x5308) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000004b80)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x10000009}) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:33:34 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0xff, 0x1, 0x6, 0x0, 0x3, 0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x100, 0x3}, 0x1010c, 0x400, 0x2, 0x5, 0x4, 0x1, 0x3f, 0x0, 0x3, 0x0, 0x100000000}, 0x0, 0x3, 0xffffffffffffffff, 0x8) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xc79}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000006, 0x30, r3, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @local}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00'}) fdatasync(r1) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0) 17:33:34 executing program 6: socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, 0x1c) syz_open_dev$mouse(&(0x7f0000000180), 0x7fff, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:33:34 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000002, 0x401a012, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x87ffffc) write(r0, &(0x7f0000000080)="01", 0x41030) [ 398.709899] loop2: detected capacity change from 0 to 40 17:33:34 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ustat(0x6, &(0x7f0000000380)) 17:33:34 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000200), 0xf}, 0x40040}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) io_submit(0x0, 0x1, &(0x7f0000001a00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000180)={'\x00', 0x200, 0x5, 0x10000, 0x7, 0x7fff}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) syz_open_procfs(0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, r5}, 0xc) 17:33:34 executing program 0: prctl$PR_SET_MM_MAP(0x21, 0xe, &(0x7f0000000880)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0}, 0x68) 17:33:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8931, &(0x7f0000000080)={'syz_tun\x00', 0x0}) 17:33:34 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) 17:33:34 executing program 6: socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, 0x1c) syz_open_dev$mouse(&(0x7f0000000180), 0x7fff, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:33:34 executing program 0: sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x0) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x6, 0x0, 0x20, 0x81, 0x6, 0x89}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0xffffffffffffffc8}}], 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) epoll_create(0x4) openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600), 0x400000, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000004b80)={0xfffffffc, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x10000009}) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = fsopen(&(0x7f0000000180)='bdev\x00', 0x1) close_range(0xffffffffffffffff, r2, 0x0) sendfile(r1, r1, 0x0, 0x100000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup2(r1, r3) 17:33:35 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x3, 0x8, 0x100000000, r2}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xff}}, './file0\x00'}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000300), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000001500)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x42, 0x0, "ae41ba3d08ae79cbef4c72343e141dc83dd4a24a447556e055d70b3b61fd7929acb571c66cd984146d66ae44bb567da9a6e26c17246bf5ac5a0b74d1cfdbac75e919f15f27d44a1e807ff95985c6f996"}, 0xd8) creat(&(0x7f0000000380)='./file0\x00', 0x0) kcmp(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) r4 = open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x8000) bind$bt_hci(r4, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) 17:33:35 executing program 2: ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f00000000c0)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000000)='./file0\x00', 0x280000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0xa0202, 0x0) openat(r1, &(0x7f00000001c0)='./file1\x00', 0x40000, 0x185) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x6991, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x1}) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(r2, r0, 0x0, 0xfffffdef) 17:33:35 executing program 5: sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x0) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x6, 0x0, 0x0, 0x81, 0x6, 0x89}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) epoll_create(0x4) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600), 0x400000, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) ioctl$CDROMSTART(r1, 0x5308) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000004b80)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x10000009}) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:33:35 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)={0x18, 0x12, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) 17:33:35 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000100), 0x4) sendmsg$inet6(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) [ 400.469506] loop2: detected capacity change from 0 to 40 17:33:36 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='mpol=prOfer=rEmative:', @ANYRESOCT]) [ 402.257048] tmpfs: Bad value for 'mpol' [ 402.288579] tmpfs: Bad value for 'mpol' 17:33:37 executing program 7: syz_emit_ethernet(0xbe, &(0x7f0000000280)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x7, 0x0, @wg=@initiation={0x1, 0x0, "0cb0fae138cd1f2e03243f93be39f2c6d2a536c1f5f8d74a43b4c0bc27497234", "c04746ec5b12cf97d11a8bb546b56bcb9d3d359d9d4acaff8add614d1e90e4eab444f4e0c00eae0446225ae1436cfdf0", "ea96db76c1999c1a572451cf464ab9976bb3f922008ab90918dd869e", {"fba05ec01197a4559adff2fa54ac3691", "c0244d2350165cdb4de9cebb63137649"}}}}}}}, 0x0) 17:33:38 executing program 7: perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:33:38 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="000204"], 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002dc0)=[{{0x0, 0x31, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@pktinfo={{0x19, 0x29, 0x32, {@private2}}}], 0x28}}], 0x2, 0x0) 17:33:38 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="000204"], 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002dc0)=[{{0x0, 0x31, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@pktinfo={{0x19, 0x29, 0x32, {@private2}}}], 0x28}}], 0x2, 0x0) [ 405.201224] Bluetooth: hci3: command 0x0406 tx timeout [ 405.637664] Bluetooth: hci0: command 0x0406 tx timeout [ 405.638332] Bluetooth: hci5: command 0x0406 tx timeout [ 409.364668] Bluetooth: hci1: command 0x0406 tx timeout [ 409.458303] Bluetooth: hci2: command 0x0406 tx timeout 17:33:52 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="000204"], 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002dc0)=[{{0x0, 0x31, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@pktinfo={{0x19, 0x29, 0x32, {@private2}}}], 0x28}}], 0x2, 0x0) 17:33:52 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x3, 0x8, 0x100000000, r2}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xff}}, './file0\x00'}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000300), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000001500)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x42, 0x0, "ae41ba3d08ae79cbef4c72343e141dc83dd4a24a447556e055d70b3b61fd7929acb571c66cd984146d66ae44bb567da9a6e26c17246bf5ac5a0b74d1cfdbac75e919f15f27d44a1e807ff95985c6f996"}, 0xd8) creat(&(0x7f0000000380)='./file0\x00', 0x0) kcmp(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) r4 = open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x8000) bind$bt_hci(r4, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef) 17:33:52 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="000204"], 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002dc0)=[{{0x0, 0x31, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@pktinfo={{0x19, 0x29, 0x32, {@private2}}}], 0x28}}], 0x2, 0x0) 17:33:52 executing program 2: munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0) [ 440.924147] watchdog: BUG: soft lockup - CPU#1 stuck for 22s! [syz-executor.0:12534] [ 440.924809] Modules linked in: [ 440.925067] irq event stamp: 5093385 [ 440.925356] hardirqs last enabled at (5093384): [] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 440.926169] hardirqs last disabled at (5093385): [] sysvec_apic_timer_interrupt+0xf/0xc0 [ 440.926932] softirqs last enabled at (5051810): [] irq_exit_rcu+0x11f/0x190 [ 440.927884] softirqs last disabled at (5051813): [] irq_exit_rcu+0x11f/0x190 [ 440.928573] CPU: 1 PID: 12534 Comm: syz-executor.0 Not tainted 6.2.0-rc5-next-20230123 #1 [ 440.929175] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 440.929852] RIP: 0010:lock_is_held_type+0xfc/0x130 [ 440.930643] Code: 00 0b 87 84 e8 f5 0e 00 00 b8 ff ff ff ff 65 0f c1 05 e8 c6 bf 7b 83 f8 01 75 26 48 f7 04 24 00 02 00 00 74 01 fb 48 83 c4 08 <44> 89 e8 5b 5d 41 5c 41 5d 41 5e 41 5f e9 e6 3e 02 00 45 31 ed eb [ 440.932017] RSP: 0018:ffff88806cf09a98 EFLAGS: 00000282 [ 440.932425] RAX: 0000000000000001 RBX: 0000000000000004 RCX: 0000000000000001 [ 440.932955] RDX: 0000000000000000 RSI: 0000000000000101 RDI: 0000000000000000 [ 440.933487] RBP: ffffffff8560afa0 R08: 0000000000000000 R09: ffffffff85d113d7 [ 440.934520] R10: fffffbfff0ba227a R11: 0000000000000001 R12: ffff888043acd040 [ 440.935048] R13: 0000000000000000 R14: 00000000ffffffff R15: ffff888043acda18 [ 440.935690] FS: 00007f154b6df700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 440.936349] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 440.936789] CR2: 00007fbb8879dff8 CR3: 00000000367ec000 CR4: 0000000000350ee0 [ 440.937422] Call Trace: [ 440.937649] [ 440.937976] rcu_read_lock_sched_held+0x42/0x80 [ 440.939641] lock_release+0x56b/0x760 [ 440.940552] ? ieee80211_get_buffered_bc+0x544/0x8a0 [ 440.941814] ? __pfx_lock_release+0x10/0x10 [ 440.942834] ? trace_lock_acquire+0x16c/0x1c0 [ 440.943885] ieee80211_get_buffered_bc+0x566/0x8a0 [ 440.945014] ? __pfx_ieee80211_get_buffered_bc+0x10/0x10 [ 440.946365] ? mark_lock.part.0+0xef/0x2f70 [ 440.947367] ? kasan_quarantine_put+0x91/0x1f0 [ 440.948424] ? kfree_skbmem+0xef/0x1b0 [ 440.949376] ? kmem_cache_free+0xff/0x510 [ 440.950331] ? kfree_skbmem+0xef/0x1b0 [ 440.951219] ? consume_skb+0xd8/0x170 [ 440.952044] ? mac80211_hwsim_tx_frame+0x1f6/0x2a0 [ 440.953261] mac80211_hwsim_beacon_tx+0x5c2/0xb10 [ 440.954397] __iterate_interfaces+0x2d3/0x580 [ 440.955432] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 440.956649] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 440.957871] ieee80211_iterate_active_interfaces_atomic+0x73/0x1c0 [ 440.960091] mac80211_hwsim_beacon+0x105/0x200 [ 440.961069] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 440.962429] __hrtimer_run_queues+0x54b/0xcb0 [ 440.963424] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 440.964482] ? ktime_get_update_offsets_now+0x25a/0x360 [ 440.965665] hrtimer_run_softirq+0x176/0x350 [ 440.966644] __do_softirq+0x274/0x8ff [ 440.967499] irq_exit_rcu+0x11f/0x190 [ 440.968345] sysvec_apic_timer_interrupt+0x92/0xc0 [ 440.969440] [ 440.969912] [ 440.970414] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 440.971539] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 440.972674] Code: be a8 01 00 00 e8 a0 ff ff ff 31 c0 e9 cd 86 fb 02 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 8b 05 6d 10 ba 7e 89 c1 48 8b 34 24 81 e1 00 01 00 [ 440.976646] RSP: 0018:ffff888044bff420 EFLAGS: 00000293 [ 440.977830] RAX: 0000000000000002 RBX: 0000000000000000 RCX: ffffffff83ab5617 [ 440.979391] RDX: ffff888043acd040 RSI: 0000000000000000 RDI: 0000000000000005 [ 440.980879] RBP: 0000000000000024 R08: 0000000000000005 R09: 0000000000000005 [ 440.982887] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000051 [ 440.984438] R13: ffff8880181cc200 R14: 0000000000000001 R15: 0000000000000000 [ 440.987039] ? inet6_netconf_notify_devconf+0x67/0x1b0 [ 440.988173] inet6_netconf_notify_devconf+0x179/0x1b0 [ 440.989227] addrconf_sysctl_unregister+0x131/0x1c0 [ 440.990268] addrconf_ifdown.isra.0+0x137a/0x1780 [ 440.991269] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 440.992336] ? addrconf_notify+0x111/0x2530 [ 440.993227] ? __sanitizer_cov_trace_switch+0x40/0x90 [ 440.994297] addrconf_notify+0x15d/0x2530 [ 440.995151] ? tun_device_event+0x75/0x1160 [ 440.996039] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 440.997127] ? __pfx_addrconf_notify+0x10/0x10 [ 440.998094] ? __pfx_failover_event+0x10/0x10 [ 440.999030] ? cfg80211_netdev_notifier_call+0x19f/0x1270 [ 441.000153] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 441.001221] ? ipmr_device_event+0x18f/0x1f0 [ 441.002150] raw_notifier_call_chain+0xb7/0x110 [ 441.003119] call_netdevice_notifiers_info+0xb5/0x130 [ 441.004182] unregister_netdevice_many_notify+0x8f4/0x15e0 [ 441.005398] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 441.006662] ? unregister_netdevice_queue+0x16e/0x2c0 [ 441.007722] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 441.008870] default_device_exit_batch+0x453/0x5a0 [ 441.009913] ? __pfx_default_device_exit_batch+0x10/0x10 [ 441.011068] ? lock_is_held_type+0xdb/0x130 [ 441.011986] ? __pfx_default_device_exit_batch+0x10/0x10 [ 441.013145] ops_exit_list+0x12b/0x180 [ 441.013993] setup_net+0x61d/0x9d0 [ 441.014757] ? __pfx_setup_net+0x10/0x10 [ 441.015614] ? lock_is_held_type+0xdb/0x130 [ 441.016541] copy_net_ns+0x321/0x770 [ 441.017343] create_new_namespaces+0x3f6/0xb30 [ 441.018347] copy_namespaces+0x414/0x500 [ 441.019219] copy_process+0x2a5e/0x7390 [ 441.020090] ? __pfx_copy_process+0x10/0x10 [ 441.021008] ? copy_clone_args_from_user+0x1d6/0x790 [ 441.022093] ? __sanitizer_cov_trace_pc+0x4/0x70 [ 441.023111] kernel_clone+0xeb/0x8c0 [ 441.023899] ? __pfx_kernel_clone+0x10/0x10 [ 441.024828] ? finish_task_switch.isra.0+0x22d/0x8a0 [ 441.025930] __do_sys_clone3+0x1d5/0x2e0 [ 441.026792] ? __pfx___do_sys_clone3+0x10/0x10 [ 441.027772] ? perf_trace_preemptirq_template+0xa6/0x410 [ 441.028940] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 441.030221] ? lock_is_held_type+0xdb/0x130 [ 441.031187] ? lock_is_held_type+0xdb/0x130 [ 441.032144] ? syscall_enter_from_user_mode+0x21/0x50 [ 441.033290] do_syscall_64+0x3f/0x90 [ 441.034112] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 441.035243] RIP: 0033:0x7f154e169b19 [ 441.036069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 441.040058] RSP: 002b:00007f154b6df188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 441.041691] RAX: ffffffffffffffda RBX: 00007f154e27cf60 RCX: 00007f154e169b19 [ 441.043232] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020004c00 [ 441.044767] RBP: 00007f154e1c3f6d R08: 0000000000000000 R09: 0000000000000000 [ 441.046324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.047885] R13: 00007ffebfd5bf9f R14: 00007f154b6df300 R15: 0000000000022000 [ 441.049414] [ 441.049934] Sending NMI from CPU 1 to CPUs 0: [ 441.052072] NMI backtrace for cpu 0 skipped: idling at default_idle+0xf/0x20 VM DIAGNOSIS: 17:34:16 Registers: info registers vcpu 0 RAX=0000000000116cbd RBX=0000000000000000 RCX=ffffffff8442c8e2 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=ffffffff8542a800 RSP=ffffffff85407e38 R8 =0000000000000001 R9 =ffff88806ce34f83 R10=ffffed100d9c69f0 R11=0000000000000001 R12=fffffbfff0a85500 R13=ffffffff85d113d0 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8442dbdf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe39afe59000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe39afe57000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f67b6e6e920 CR3=0000000013f9c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004183cdf6c0000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff824846a5 RDI=ffffffff87dedca0 RBP=ffffffff87dedc60 RSP=ffff88806cf09250 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000030 R11=0000000000000001 R12=0000000000000030 R13=ffffffff87dedc60 R14=0000000000000010 R15=ffffffff82484690 RIP=ffffffff824846fd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f154b6df700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe344399c000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe344399a000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbb8879dff8 CR3=00000000367ec000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=7064755f74656e692474656b636f7320 XMM02=0000000000000000413223c000000000 XMM03=00000000000000000000000000000000 XMM04=64616d0a29303030327830202c6c696e XMM05=30303030306637783028262865736976 XMM06=696e3d293030303378302f3030303130 XMM07=0a29307830202c303030337830202c6c XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=000000c005fcc84000000000004643c1 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=65353763616264666331643437623061 XMM14=38653161343464373266353166393139 XMM15=22363939663663353839353966663730