Warning: Permanently added '[localhost]:35666' (ECDSA) to the list of known hosts. 2022/11/01 12:16:04 fuzzer started 2022/11/01 12:16:05 dialing manager at localhost:42881 syzkaller login: [ 45.578139] cgroup: Unknown subsys name 'net' [ 45.699180] cgroup: Unknown subsys name 'rlimit' 2022/11/01 12:16:21 syscalls: 2217 2022/11/01 12:16:21 code coverage: enabled 2022/11/01 12:16:21 comparison tracing: enabled 2022/11/01 12:16:21 extra coverage: enabled 2022/11/01 12:16:21 setuid sandbox: enabled 2022/11/01 12:16:21 namespace sandbox: enabled 2022/11/01 12:16:21 Android sandbox: enabled 2022/11/01 12:16:21 fault injection: enabled 2022/11/01 12:16:21 leak checking: enabled 2022/11/01 12:16:21 net packet injection: enabled 2022/11/01 12:16:21 net device setup: enabled 2022/11/01 12:16:21 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/11/01 12:16:21 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/11/01 12:16:21 USB emulation: enabled 2022/11/01 12:16:21 hci packet injection: enabled 2022/11/01 12:16:21 wifi device emulation: enabled 2022/11/01 12:16:21 802.15.4 emulation: enabled 2022/11/01 12:16:21 fetching corpus: 0, signal 0/2000 (executing program) 2022/11/01 12:16:21 fetching corpus: 45, signal 22092/25813 (executing program) 2022/11/01 12:16:21 fetching corpus: 95, signal 36670/41934 (executing program) 2022/11/01 12:16:22 fetching corpus: 145, signal 48017/54671 (executing program) 2022/11/01 12:16:22 fetching corpus: 195, signal 56774/64733 (executing program) 2022/11/01 12:16:22 fetching corpus: 245, signal 63568/72850 (executing program) 2022/11/01 12:16:22 fetching corpus: 295, signal 70369/80846 (executing program) 2022/11/01 12:16:22 fetching corpus: 344, signal 76418/88059 (executing program) 2022/11/01 12:16:22 fetching corpus: 394, signal 81516/94301 (executing program) 2022/11/01 12:16:22 fetching corpus: 444, signal 91788/105239 (executing program) 2022/11/01 12:16:22 fetching corpus: 494, signal 97245/111636 (executing program) 2022/11/01 12:16:22 fetching corpus: 544, signal 99787/115281 (executing program) 2022/11/01 12:16:23 fetching corpus: 593, signal 105341/121590 (executing program) 2022/11/01 12:16:23 fetching corpus: 643, signal 109625/126718 (executing program) 2022/11/01 12:16:23 fetching corpus: 693, signal 112682/130663 (executing program) 2022/11/01 12:16:23 fetching corpus: 743, signal 114901/133867 (executing program) 2022/11/01 12:16:23 fetching corpus: 793, signal 117954/137698 (executing program) 2022/11/01 12:16:23 fetching corpus: 843, signal 119849/140494 (executing program) 2022/11/01 12:16:23 fetching corpus: 891, signal 122372/143839 (executing program) 2022/11/01 12:16:23 fetching corpus: 940, signal 124139/146495 (executing program) 2022/11/01 12:16:24 fetching corpus: 989, signal 126316/149440 (executing program) 2022/11/01 12:16:24 fetching corpus: 1039, signal 130023/153653 (executing program) 2022/11/01 12:16:24 fetching corpus: 1089, signal 132965/157176 (executing program) 2022/11/01 12:16:24 fetching corpus: 1139, signal 135134/160047 (executing program) 2022/11/01 12:16:24 fetching corpus: 1188, signal 137613/163151 (executing program) 2022/11/01 12:16:24 fetching corpus: 1238, signal 139432/165669 (executing program) 2022/11/01 12:16:24 fetching corpus: 1288, signal 141515/168366 (executing program) 2022/11/01 12:16:25 fetching corpus: 1338, signal 143982/171333 (executing program) 2022/11/01 12:16:25 fetching corpus: 1387, signal 146495/174307 (executing program) 2022/11/01 12:16:25 fetching corpus: 1437, signal 147960/176449 (executing program) 2022/11/01 12:16:25 fetching corpus: 1487, signal 149678/178707 (executing program) 2022/11/01 12:16:25 fetching corpus: 1537, signal 151819/181302 (executing program) 2022/11/01 12:16:25 fetching corpus: 1587, signal 153515/183532 (executing program) 2022/11/01 12:16:25 fetching corpus: 1637, signal 155667/186081 (executing program) 2022/11/01 12:16:25 fetching corpus: 1686, signal 157141/188028 (executing program) 2022/11/01 12:16:26 fetching corpus: 1736, signal 159216/190488 (executing program) 2022/11/01 12:16:26 fetching corpus: 1786, signal 160814/192580 (executing program) 2022/11/01 12:16:26 fetching corpus: 1836, signal 162006/194331 (executing program) 2022/11/01 12:16:26 fetching corpus: 1886, signal 163772/196423 (executing program) 2022/11/01 12:16:26 fetching corpus: 1936, signal 164743/197923 (executing program) 2022/11/01 12:16:26 fetching corpus: 1986, signal 166335/199884 (executing program) 2022/11/01 12:16:26 fetching corpus: 2035, signal 167360/201386 (executing program) 2022/11/01 12:16:26 fetching corpus: 2085, signal 168934/203460 (executing program) 2022/11/01 12:16:27 fetching corpus: 2135, signal 170623/205459 (executing program) 2022/11/01 12:16:27 fetching corpus: 2185, signal 171847/207109 (executing program) 2022/11/01 12:16:27 fetching corpus: 2235, signal 173120/208783 (executing program) 2022/11/01 12:16:27 fetching corpus: 2285, signal 174594/210517 (executing program) 2022/11/01 12:16:27 fetching corpus: 2334, signal 175828/212100 (executing program) 2022/11/01 12:16:27 fetching corpus: 2384, signal 177904/214238 (executing program) 2022/11/01 12:16:27 fetching corpus: 2434, signal 179227/215805 (executing program) 2022/11/01 12:16:27 fetching corpus: 2483, signal 180427/217327 (executing program) 2022/11/01 12:16:28 fetching corpus: 2533, signal 181247/218559 (executing program) 2022/11/01 12:16:28 fetching corpus: 2583, signal 182277/219928 (executing program) 2022/11/01 12:16:28 fetching corpus: 2632, signal 183551/221415 (executing program) 2022/11/01 12:16:28 fetching corpus: 2682, signal 184569/222755 (executing program) 2022/11/01 12:16:28 fetching corpus: 2732, signal 185466/223972 (executing program) 2022/11/01 12:16:28 fetching corpus: 2781, signal 187192/225711 (executing program) 2022/11/01 12:16:28 fetching corpus: 2831, signal 188347/227104 (executing program) 2022/11/01 12:16:28 fetching corpus: 2881, signal 189661/228516 (executing program) 2022/11/01 12:16:29 fetching corpus: 2931, signal 191126/229979 (executing program) 2022/11/01 12:16:29 fetching corpus: 2981, signal 192574/231448 (executing program) 2022/11/01 12:16:29 fetching corpus: 3031, signal 193273/232486 (executing program) 2022/11/01 12:16:29 fetching corpus: 3081, signal 194072/233570 (executing program) 2022/11/01 12:16:29 fetching corpus: 3131, signal 194756/234604 (executing program) 2022/11/01 12:16:29 fetching corpus: 3181, signal 195386/235585 (executing program) 2022/11/01 12:16:29 fetching corpus: 3231, signal 196476/236814 (executing program) 2022/11/01 12:16:29 fetching corpus: 3281, signal 197074/237725 (executing program) 2022/11/01 12:16:30 fetching corpus: 3330, signal 197843/238730 (executing program) 2022/11/01 12:16:30 fetching corpus: 3380, signal 198750/239790 (executing program) 2022/11/01 12:16:30 fetching corpus: 3430, signal 199762/240869 (executing program) 2022/11/01 12:16:30 fetching corpus: 3480, signal 201096/242158 (executing program) 2022/11/01 12:16:30 fetching corpus: 3530, signal 201816/243097 (executing program) 2022/11/01 12:16:30 fetching corpus: 3580, signal 203117/244235 (executing program) 2022/11/01 12:16:30 fetching corpus: 3630, signal 203962/245187 (executing program) 2022/11/01 12:16:30 fetching corpus: 3680, signal 205015/246220 (executing program) 2022/11/01 12:16:30 fetching corpus: 3730, signal 205647/247068 (executing program) 2022/11/01 12:16:31 fetching corpus: 3780, signal 206853/248171 (executing program) 2022/11/01 12:16:31 fetching corpus: 3829, signal 207847/249160 (executing program) 2022/11/01 12:16:31 fetching corpus: 3879, signal 208535/250034 (executing program) 2022/11/01 12:16:31 fetching corpus: 3929, signal 209323/250890 (executing program) 2022/11/01 12:16:31 fetching corpus: 3979, signal 210093/251771 (executing program) 2022/11/01 12:16:31 fetching corpus: 4029, signal 210759/252556 (executing program) 2022/11/01 12:16:31 fetching corpus: 4079, signal 211400/253307 (executing program) 2022/11/01 12:16:31 fetching corpus: 4129, signal 212516/254263 (executing program) 2022/11/01 12:16:32 fetching corpus: 4179, signal 213359/255140 (executing program) 2022/11/01 12:16:32 fetching corpus: 4229, signal 213802/255841 (executing program) 2022/11/01 12:16:32 fetching corpus: 4278, signal 214513/256592 (executing program) 2022/11/01 12:16:32 fetching corpus: 4328, signal 215401/257394 (executing program) 2022/11/01 12:16:32 fetching corpus: 4378, signal 216079/258108 (executing program) 2022/11/01 12:16:32 fetching corpus: 4428, signal 216924/258862 (executing program) 2022/11/01 12:16:32 fetching corpus: 4478, signal 217596/259590 (executing program) 2022/11/01 12:16:33 fetching corpus: 4527, signal 218071/260213 (executing program) 2022/11/01 12:16:33 fetching corpus: 4576, signal 218964/260971 (executing program) 2022/11/01 12:16:33 fetching corpus: 4626, signal 219658/261662 (executing program) 2022/11/01 12:16:33 fetching corpus: 4676, signal 220237/262368 (executing program) 2022/11/01 12:16:33 fetching corpus: 4724, signal 220946/263053 (executing program) 2022/11/01 12:16:33 fetching corpus: 4774, signal 221673/263689 (executing program) 2022/11/01 12:16:33 fetching corpus: 4823, signal 222272/264351 (executing program) 2022/11/01 12:16:33 fetching corpus: 4870, signal 222825/264948 (executing program) 2022/11/01 12:16:33 fetching corpus: 4919, signal 223369/265530 (executing program) 2022/11/01 12:16:34 fetching corpus: 4969, signal 223785/266024 (executing program) 2022/11/01 12:16:34 fetching corpus: 5019, signal 224319/266583 (executing program) 2022/11/01 12:16:34 fetching corpus: 5069, signal 225082/267218 (executing program) 2022/11/01 12:16:34 fetching corpus: 5119, signal 225966/267869 (executing program) 2022/11/01 12:16:34 fetching corpus: 5169, signal 226536/268418 (executing program) 2022/11/01 12:16:34 fetching corpus: 5219, signal 227186/268978 (executing program) 2022/11/01 12:16:34 fetching corpus: 5269, signal 227830/269503 (executing program) 2022/11/01 12:16:34 fetching corpus: 5319, signal 228374/270034 (executing program) 2022/11/01 12:16:35 fetching corpus: 5369, signal 229317/270636 (executing program) 2022/11/01 12:16:35 fetching corpus: 5419, signal 229784/271117 (executing program) 2022/11/01 12:16:35 fetching corpus: 5469, signal 230361/271616 (executing program) 2022/11/01 12:16:35 fetching corpus: 5519, signal 230795/272071 (executing program) 2022/11/01 12:16:35 fetching corpus: 5569, signal 231772/272609 (executing program) 2022/11/01 12:16:35 fetching corpus: 5619, signal 232262/273073 (executing program) 2022/11/01 12:16:35 fetching corpus: 5668, signal 233098/273574 (executing program) 2022/11/01 12:16:35 fetching corpus: 5717, signal 233621/273964 (executing program) 2022/11/01 12:16:35 fetching corpus: 5767, signal 233965/274373 (executing program) 2022/11/01 12:16:36 fetching corpus: 5817, signal 234293/274738 (executing program) 2022/11/01 12:16:36 fetching corpus: 5866, signal 235277/275231 (executing program) 2022/11/01 12:16:36 fetching corpus: 5916, signal 235801/275642 (executing program) 2022/11/01 12:16:36 fetching corpus: 5966, signal 236521/276063 (executing program) 2022/11/01 12:16:36 fetching corpus: 6014, signal 237316/276536 (executing program) 2022/11/01 12:16:36 fetching corpus: 6064, signal 237668/276902 (executing program) 2022/11/01 12:16:36 fetching corpus: 6112, signal 238085/277247 (executing program) 2022/11/01 12:16:37 fetching corpus: 6162, signal 238712/277652 (executing program) 2022/11/01 12:16:37 fetching corpus: 6209, signal 239180/278015 (executing program) 2022/11/01 12:16:37 fetching corpus: 6258, signal 240066/278405 (executing program) 2022/11/01 12:16:37 fetching corpus: 6308, signal 240442/278725 (executing program) 2022/11/01 12:16:37 fetching corpus: 6358, signal 240888/279081 (executing program) 2022/11/01 12:16:37 fetching corpus: 6408, signal 241203/279384 (executing program) 2022/11/01 12:16:37 fetching corpus: 6458, signal 241710/279708 (executing program) 2022/11/01 12:16:38 fetching corpus: 6508, signal 242388/280018 (executing program) 2022/11/01 12:16:38 fetching corpus: 6558, signal 242957/280338 (executing program) 2022/11/01 12:16:38 fetching corpus: 6608, signal 243693/280674 (executing program) 2022/11/01 12:16:38 fetching corpus: 6657, signal 244174/280966 (executing program) 2022/11/01 12:16:38 fetching corpus: 6707, signal 244634/281238 (executing program) 2022/11/01 12:16:38 fetching corpus: 6756, signal 244976/281494 (executing program) 2022/11/01 12:16:38 fetching corpus: 6806, signal 245478/281779 (executing program) 2022/11/01 12:16:39 fetching corpus: 6854, signal 246055/282070 (executing program) 2022/11/01 12:16:39 fetching corpus: 6904, signal 246595/282344 (executing program) 2022/11/01 12:16:39 fetching corpus: 6954, signal 247210/282599 (executing program) 2022/11/01 12:16:39 fetching corpus: 7004, signal 247640/282599 (executing program) 2022/11/01 12:16:39 fetching corpus: 7054, signal 248317/282599 (executing program) 2022/11/01 12:16:39 fetching corpus: 7103, signal 248821/282599 (executing program) 2022/11/01 12:16:39 fetching corpus: 7152, signal 249322/282599 (executing program) 2022/11/01 12:16:40 fetching corpus: 7202, signal 249964/282599 (executing program) 2022/11/01 12:16:40 fetching corpus: 7252, signal 250458/282599 (executing program) 2022/11/01 12:16:40 fetching corpus: 7302, signal 250983/282600 (executing program) 2022/11/01 12:16:40 fetching corpus: 7351, signal 251417/282611 (executing program) 2022/11/01 12:16:40 fetching corpus: 7401, signal 252053/282611 (executing program) 2022/11/01 12:16:40 fetching corpus: 7451, signal 252550/282614 (executing program) 2022/11/01 12:16:40 fetching corpus: 7501, signal 252998/282614 (executing program) 2022/11/01 12:16:40 fetching corpus: 7551, signal 253926/282614 (executing program) 2022/11/01 12:16:41 fetching corpus: 7601, signal 254260/282623 (executing program) 2022/11/01 12:16:41 fetching corpus: 7650, signal 254734/282623 (executing program) 2022/11/01 12:16:41 fetching corpus: 7700, signal 255189/282624 (executing program) 2022/11/01 12:16:41 fetching corpus: 7750, signal 255672/282624 (executing program) 2022/11/01 12:16:41 fetching corpus: 7799, signal 256235/282624 (executing program) 2022/11/01 12:16:41 fetching corpus: 7849, signal 256577/282626 (executing program) 2022/11/01 12:16:41 fetching corpus: 7897, signal 257175/282629 (executing program) 2022/11/01 12:16:41 fetching corpus: 7947, signal 257528/282629 (executing program) 2022/11/01 12:16:42 fetching corpus: 7997, signal 258067/282629 (executing program) 2022/11/01 12:16:42 fetching corpus: 8047, signal 258506/282629 (executing program) 2022/11/01 12:16:42 fetching corpus: 8096, signal 258991/282629 (executing program) 2022/11/01 12:16:42 fetching corpus: 8146, signal 259413/282663 (executing program) 2022/11/01 12:16:42 fetching corpus: 8196, signal 259887/282663 (executing program) 2022/11/01 12:16:42 fetching corpus: 8246, signal 260395/282663 (executing program) 2022/11/01 12:16:42 fetching corpus: 8295, signal 260647/282663 (executing program) 2022/11/01 12:16:43 fetching corpus: 8345, signal 261153/282663 (executing program) 2022/11/01 12:16:43 fetching corpus: 8395, signal 261530/282665 (executing program) 2022/11/01 12:16:43 fetching corpus: 8445, signal 261817/282700 (executing program) 2022/11/01 12:16:43 fetching corpus: 8495, signal 262439/282700 (executing program) 2022/11/01 12:16:43 fetching corpus: 8544, signal 262897/282700 (executing program) 2022/11/01 12:16:43 fetching corpus: 8593, signal 263203/282700 (executing program) 2022/11/01 12:16:43 fetching corpus: 8643, signal 263528/282702 (executing program) 2022/11/01 12:16:43 fetching corpus: 8693, signal 263883/282706 (executing program) 2022/11/01 12:16:43 fetching corpus: 8743, signal 264423/282706 (executing program) 2022/11/01 12:16:44 fetching corpus: 8792, signal 264918/282711 (executing program) 2022/11/01 12:16:44 fetching corpus: 8842, signal 265212/282712 (executing program) 2022/11/01 12:16:44 fetching corpus: 8892, signal 265538/282712 (executing program) 2022/11/01 12:16:44 fetching corpus: 8941, signal 265929/282719 (executing program) 2022/11/01 12:16:44 fetching corpus: 8991, signal 266553/282719 (executing program) 2022/11/01 12:16:44 fetching corpus: 9041, signal 266985/282725 (executing program) 2022/11/01 12:16:44 fetching corpus: 9091, signal 267287/282727 (executing program) 2022/11/01 12:16:44 fetching corpus: 9141, signal 267847/282727 (executing program) 2022/11/01 12:16:45 fetching corpus: 9191, signal 268314/282727 (executing program) 2022/11/01 12:16:45 fetching corpus: 9241, signal 268571/282727 (executing program) 2022/11/01 12:16:45 fetching corpus: 9291, signal 269185/282727 (executing program) 2022/11/01 12:16:45 fetching corpus: 9341, signal 269467/282735 (executing program) 2022/11/01 12:16:45 fetching corpus: 9390, signal 269816/282736 (executing program) 2022/11/01 12:16:45 fetching corpus: 9439, signal 270152/282736 (executing program) 2022/11/01 12:16:45 fetching corpus: 9487, signal 270487/282739 (executing program) 2022/11/01 12:16:45 fetching corpus: 9537, signal 271082/282741 (executing program) 2022/11/01 12:16:46 fetching corpus: 9587, signal 271551/282750 (executing program) 2022/11/01 12:16:46 fetching corpus: 9636, signal 271824/282751 (executing program) 2022/11/01 12:16:46 fetching corpus: 9684, signal 272359/282751 (executing program) 2022/11/01 12:16:46 fetching corpus: 9733, signal 272723/282751 (executing program) 2022/11/01 12:16:46 fetching corpus: 9783, signal 273158/282751 (executing program) 2022/11/01 12:16:46 fetching corpus: 9833, signal 273794/282751 (executing program) 2022/11/01 12:16:46 fetching corpus: 9883, signal 274089/282751 (executing program) 2022/11/01 12:16:47 fetching corpus: 9933, signal 274520/282751 (executing program) 2022/11/01 12:16:47 fetching corpus: 9983, signal 275135/282751 (executing program) 2022/11/01 12:16:47 fetching corpus: 10032, signal 275411/282751 (executing program) 2022/11/01 12:16:47 fetching corpus: 10081, signal 275916/282751 (executing program) 2022/11/01 12:16:47 fetching corpus: 10131, signal 276229/282770 (executing program) 2022/11/01 12:16:47 fetching corpus: 10181, signal 276924/282770 (executing program) 2022/11/01 12:16:47 fetching corpus: 10193, signal 276966/282770 (executing program) 2022/11/01 12:16:47 fetching corpus: 10193, signal 276966/282770 (executing program) 2022/11/01 12:16:50 starting 8 fuzzer processes 12:16:50 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}) 12:16:50 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fsync(r1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) 12:16:50 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x27) 12:16:50 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat2(0xffffffffffffffff, &(0x7f00000009c0)='./file1\x00', &(0x7f0000000a00)={0x80900}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x0, 0x0) syncfs(0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000100)={0x6, &(0x7f0000000000)=[{0x3, 0x7fff}, {0x5, 0x8000}, {0x4, 0x7d}, {0x7}, {0x3, 0x200}, {0x81, 0x9}]}) syz_io_uring_setup(0x6c69, &(0x7f0000000340)={0x0, 0x92c5, 0x0, 0x3, 0x26, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000c, 0x810, r1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_bp={&(0x7f0000000300), 0xd}, 0x8fa6, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x400}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x101, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x3c, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00bb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000), 0x4) socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x4, 0x3, 0x5, 0x9f, 0x0, 0x8, 0x10020, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000400), 0x8}, 0x8214, 0xfff, 0x5, 0x7, 0x40, 0x3, 0x0, 0x0, 0x4, 0x0, 0x400}, 0xffffffffffffffff, 0x4, r1, 0x1) creat(&(0x7f0000000080)='./file0\x00', 0x0) accept4$unix(r0, &(0x7f00000001c0), &(0x7f0000000240)=0x6e, 0x80800) 12:16:50 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0x185) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8a403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xa}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0xffffffffffff0000, 0xda, 0x2, 0x0, 0x3, 0x15}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) 12:16:50 executing program 4: r0 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000001600)='./file0\x00', 0x0, 0x7) ioctl$int_in(r2, 0x5421, &(0x7f0000001640)=0xffffffff) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000500)={{}, r1, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000000)=0x59b) sendfile(r4, r5, 0x0, 0x5) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x862a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f0000000100)="791b7d2577ec32834a9a9aafee0def956e242de950d5fb727f8252a2dc6dddf0b7989216f868d4bb30764ab9b8b02c", 0x2f, 0x59, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x810, 0xffffffffffffffff, 0x0) mq_notify(r3, &(0x7f0000000240)={0x0, 0xb, 0x0, @thr={&(0x7f0000001500)="18ff8ab69fe079c8b5b5e95cd5b3ceb2c3ba4f1eb41775ae27bce5c809cad555d17f699f173eec22eb0b62af84bc3199a78276f553f13758a422a604f3a0b92c7c7437ec0ece54b2ab4396cd630de022276af6c9e7b908a27acc65e1541d1b8d6cb1cf", &(0x7f0000001580)="7ad4eb7093e7e9893ea5f96e11eba6d01c25f7c08897343b8a3e9d16eb5fd0cbe269af49543dd9478b1df798ad82823d9100af85f945fa1b18d5a0f23add35dbb30f67147441821d189ebcb4da0a48087db274bcebb3d612370bfccac341e3e916dc71"}}) accept$unix(r3, 0x0, &(0x7f0000000200)) fork() 12:16:50 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0x40505331, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6}) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./file1\x00', &(0x7f0000000300)='xfs\x00', 0x4000, &(0x7f0000000340)='/dev/snd/seq\x00') pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) 12:16:50 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x6, 0xd, 0x0, 0xffffffffffffffff) [ 88.483733] audit: type=1400 audit(1667305010.452:6): avc: denied { execmem } for pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 89.725580] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.732966] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.735473] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.741140] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.743740] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.745268] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.752428] Bluetooth: hci0: HCI_REQ-0x0c1a [ 89.846280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.847841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.849289] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.851312] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.852448] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.853833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.854724] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.858513] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.859508] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.861217] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 89.862266] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 89.863574] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.864566] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.865834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.878842] Bluetooth: hci4: HCI_REQ-0x0c1a [ 89.880126] Bluetooth: hci3: HCI_REQ-0x0c1a [ 89.900624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.908282] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 89.910664] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 89.912117] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.914529] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 89.918090] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.919225] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.922512] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.929107] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 89.931626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.934185] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.944151] Bluetooth: hci2: HCI_REQ-0x0c1a [ 89.945108] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 89.946559] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.955659] Bluetooth: hci5: HCI_REQ-0x0c1a [ 90.013214] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.021134] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 90.025196] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 90.034102] Bluetooth: hci7: HCI_REQ-0x0c1a [ 91.806480] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 91.808703] Bluetooth: hci0: command 0x0409 tx timeout [ 91.933861] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 91.935286] Bluetooth: hci4: command 0x0409 tx timeout [ 91.936568] Bluetooth: hci3: command 0x0409 tx timeout [ 91.998987] Bluetooth: hci5: command 0x0409 tx timeout [ 92.000469] Bluetooth: hci2: command 0x0409 tx timeout [ 92.061945] Bluetooth: hci7: command 0x0409 tx timeout [ 93.853912] Bluetooth: hci0: command 0x041b tx timeout [ 93.981866] Bluetooth: hci3: command 0x041b tx timeout [ 93.982454] Bluetooth: hci4: command 0x041b tx timeout [ 94.045939] Bluetooth: hci2: command 0x041b tx timeout [ 94.046477] Bluetooth: hci5: command 0x041b tx timeout [ 94.109944] Bluetooth: hci7: command 0x041b tx timeout [ 95.901858] Bluetooth: hci0: command 0x040f tx timeout [ 96.029814] Bluetooth: hci4: command 0x040f tx timeout [ 96.030229] Bluetooth: hci3: command 0x040f tx timeout [ 96.093838] Bluetooth: hci5: command 0x040f tx timeout [ 96.094220] Bluetooth: hci2: command 0x040f tx timeout [ 96.157810] Bluetooth: hci7: command 0x040f tx timeout [ 97.949864] Bluetooth: hci0: command 0x0419 tx timeout [ 98.077894] Bluetooth: hci3: command 0x0419 tx timeout [ 98.077927] Bluetooth: hci4: command 0x0419 tx timeout [ 98.141915] Bluetooth: hci2: command 0x0419 tx timeout [ 98.142109] Bluetooth: hci5: command 0x0419 tx timeout [ 98.205946] Bluetooth: hci7: command 0x0419 tx timeout [ 98.333904] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 98.525854] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 102.193717] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 102.196275] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 102.205939] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 102.213490] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 102.214458] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 102.216383] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 102.221890] Bluetooth: hci6: HCI_REQ-0x0c1a [ 103.965843] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 104.285931] Bluetooth: hci6: command 0x0409 tx timeout [ 106.333812] Bluetooth: hci6: command 0x041b tx timeout [ 107.049770] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 107.052200] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 107.053052] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 107.054984] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 107.059947] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 107.061521] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 107.082976] Bluetooth: hci1: HCI_REQ-0x0c1a [ 108.381967] Bluetooth: hci6: command 0x040f tx timeout [ 109.150048] Bluetooth: hci1: command 0x0409 tx timeout [ 110.430868] Bluetooth: hci6: command 0x0419 tx timeout [ 111.197816] Bluetooth: hci1: command 0x041b tx timeout [ 113.245810] Bluetooth: hci1: command 0x040f tx timeout [ 115.294264] Bluetooth: hci1: command 0x0419 tx timeout [ 141.764915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.765501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.767083] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 141.942610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.943282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.944993] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 142.040609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.041386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.042865] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 142.230082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.230704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.232193] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 143.344313] audit: type=1400 audit(1667305065.313:7): avc: denied { open } for pid=3640 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 143.345687] audit: type=1400 audit(1667305065.313:8): avc: denied { kernel } for pid=3640 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 143.477492] audit: type=1400 audit(1667305065.446:9): avc: denied { write } for pid=3640 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 12:17:45 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) ioctl$HCIINQUIRY(r0, 0x400448e4, &(0x7f0000000000)={0x0, 0x0, "9ba486"}) 12:17:45 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) ioctl$HCIINQUIRY(r0, 0x400448e4, &(0x7f0000000000)={0x0, 0x0, "9ba486"}) [ 143.871694] audit: type=1400 audit(1667305065.840:10): avc: denied { tracepoint } for pid=3669 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 12:17:45 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) ioctl$HCIINQUIRY(r0, 0x400448e4, &(0x7f0000000000)={0x0, 0x0, "9ba486"}) [ 143.915260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.916057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:17:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') [ 143.955404] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 144.007987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.008720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.010472] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 12:17:45 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) ioctl$HCIINQUIRY(r0, 0x400448e4, &(0x7f0000000000)={0x0, 0x0, "9ba486"}) 12:17:46 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') [ 144.076461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.077102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.079034] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 144.163081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.163647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.164981] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:17:46 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') 12:17:46 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') [ 144.326465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.327200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.329099] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 144.384021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.384597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.386106] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 145.118767] hrtimer: interrupt took 18885 ns [ 145.352118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.352793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.354683] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 145.460255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.460923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.463320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 149.089226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.089827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.091276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 149.126290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.126909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.128559] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 150.214072] syz-executor.5 (3944) used greatest stack depth: 23896 bytes left [ 151.203976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.205091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.215105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 151.236380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.237490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.240068] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:17:53 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}) 12:17:53 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') 12:17:53 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') 12:17:53 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x6, 0xd, 0x0, 0xffffffffffffffff) 12:17:53 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fsync(r1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) 12:17:53 executing program 4: r0 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000001600)='./file0\x00', 0x0, 0x7) ioctl$int_in(r2, 0x5421, &(0x7f0000001640)=0xffffffff) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000500)={{}, r1, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000000)=0x59b) sendfile(r4, r5, 0x0, 0x5) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x862a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f0000000100)="791b7d2577ec32834a9a9aafee0def956e242de950d5fb727f8252a2dc6dddf0b7989216f868d4bb30764ab9b8b02c", 0x2f, 0x59, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x810, 0xffffffffffffffff, 0x0) mq_notify(r3, &(0x7f0000000240)={0x0, 0xb, 0x0, @thr={&(0x7f0000001500)="18ff8ab69fe079c8b5b5e95cd5b3ceb2c3ba4f1eb41775ae27bce5c809cad555d17f699f173eec22eb0b62af84bc3199a78276f553f13758a422a604f3a0b92c7c7437ec0ece54b2ab4396cd630de022276af6c9e7b908a27acc65e1541d1b8d6cb1cf", &(0x7f0000001580)="7ad4eb7093e7e9893ea5f96e11eba6d01c25f7c08897343b8a3e9d16eb5fd0cbe269af49543dd9478b1df798ad82823d9100af85f945fa1b18d5a0f23add35dbb30f67147441821d189ebcb4da0a48087db274bcebb3d612370bfccac341e3e916dc71"}}) accept$unix(r3, 0x0, &(0x7f0000000200)) fork() 12:17:53 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0x40505331, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6}) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./file1\x00', &(0x7f0000000300)='xfs\x00', 0x4000, &(0x7f0000000340)='/dev/snd/seq\x00') pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) 12:17:53 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat2(0xffffffffffffffff, &(0x7f00000009c0)='./file1\x00', &(0x7f0000000a00)={0x80900}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x0, 0x0) syncfs(0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000100)={0x6, &(0x7f0000000000)=[{0x3, 0x7fff}, {0x5, 0x8000}, {0x4, 0x7d}, {0x7}, {0x3, 0x200}, {0x81, 0x9}]}) syz_io_uring_setup(0x6c69, &(0x7f0000000340)={0x0, 0x92c5, 0x0, 0x3, 0x26, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000c, 0x810, r1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_bp={&(0x7f0000000300), 0xd}, 0x8fa6, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x400}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x101, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x3c, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00bb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000), 0x4) socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x4, 0x3, 0x5, 0x9f, 0x0, 0x8, 0x10020, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000400), 0x8}, 0x8214, 0xfff, 0x5, 0x7, 0x40, 0x3, 0x0, 0x0, 0x4, 0x0, 0x400}, 0xffffffffffffffff, 0x4, r1, 0x1) creat(&(0x7f0000000080)='./file0\x00', 0x0) accept4$unix(r0, &(0x7f00000001c0), &(0x7f0000000240)=0x6e, 0x80800) 12:17:54 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x6, 0xd, 0x0, 0xffffffffffffffff) 12:17:54 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') 12:17:56 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}) 12:17:56 executing program 2: r0 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000001600)='./file0\x00', 0x0, 0x7) ioctl$int_in(r2, 0x5421, &(0x7f0000001640)=0xffffffff) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000500)={{}, r1, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000000)=0x59b) sendfile(r4, r5, 0x0, 0x5) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x862a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f0000000100)="791b7d2577ec32834a9a9aafee0def956e242de950d5fb727f8252a2dc6dddf0b7989216f868d4bb30764ab9b8b02c", 0x2f, 0x59, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x810, 0xffffffffffffffff, 0x0) mq_notify(r3, &(0x7f0000000240)={0x0, 0xb, 0x0, @thr={&(0x7f0000001500)="18ff8ab69fe079c8b5b5e95cd5b3ceb2c3ba4f1eb41775ae27bce5c809cad555d17f699f173eec22eb0b62af84bc3199a78276f553f13758a422a604f3a0b92c7c7437ec0ece54b2ab4396cd630de022276af6c9e7b908a27acc65e1541d1b8d6cb1cf", &(0x7f0000001580)="7ad4eb7093e7e9893ea5f96e11eba6d01c25f7c08897343b8a3e9d16eb5fd0cbe269af49543dd9478b1df798ad82823d9100af85f945fa1b18d5a0f23add35dbb30f67147441821d189ebcb4da0a48087db274bcebb3d612370bfccac341e3e916dc71"}}) accept$unix(r3, 0x0, &(0x7f0000000200)) fork() 12:17:56 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x6, 0xd, 0x0, 0xffffffffffffffff) 12:17:56 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat2(0xffffffffffffffff, &(0x7f00000009c0)='./file1\x00', &(0x7f0000000a00)={0x80900}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x0, 0x0) syncfs(0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000100)={0x6, &(0x7f0000000000)=[{0x3, 0x7fff}, {0x5, 0x8000}, {0x4, 0x7d}, {0x7}, {0x3, 0x200}, {0x81, 0x9}]}) syz_io_uring_setup(0x6c69, &(0x7f0000000340)={0x0, 0x92c5, 0x0, 0x3, 0x26, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000c, 0x810, r1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_bp={&(0x7f0000000300), 0xd}, 0x8fa6, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x400}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x101, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x3c, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00bb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000), 0x4) socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x4, 0x3, 0x5, 0x9f, 0x0, 0x8, 0x10020, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000400), 0x8}, 0x8214, 0xfff, 0x5, 0x7, 0x40, 0x3, 0x0, 0x0, 0x4, 0x0, 0x400}, 0xffffffffffffffff, 0x4, r1, 0x1) creat(&(0x7f0000000080)='./file0\x00', 0x0) accept4$unix(r0, &(0x7f00000001c0), &(0x7f0000000240)=0x6e, 0x80800) 12:17:56 executing program 1: r0 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000001600)='./file0\x00', 0x0, 0x7) ioctl$int_in(r2, 0x5421, &(0x7f0000001640)=0xffffffff) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000500)={{}, r1, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000000)=0x59b) sendfile(r4, r5, 0x0, 0x5) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x862a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f0000000100)="791b7d2577ec32834a9a9aafee0def956e242de950d5fb727f8252a2dc6dddf0b7989216f868d4bb30764ab9b8b02c", 0x2f, 0x59, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x810, 0xffffffffffffffff, 0x0) mq_notify(r3, &(0x7f0000000240)={0x0, 0xb, 0x0, @thr={&(0x7f0000001500)="18ff8ab69fe079c8b5b5e95cd5b3ceb2c3ba4f1eb41775ae27bce5c809cad555d17f699f173eec22eb0b62af84bc3199a78276f553f13758a422a604f3a0b92c7c7437ec0ece54b2ab4396cd630de022276af6c9e7b908a27acc65e1541d1b8d6cb1cf", &(0x7f0000001580)="7ad4eb7093e7e9893ea5f96e11eba6d01c25f7c08897343b8a3e9d16eb5fd0cbe269af49543dd9478b1df798ad82823d9100af85f945fa1b18d5a0f23add35dbb30f67147441821d189ebcb4da0a48087db274bcebb3d612370bfccac341e3e916dc71"}}) accept$unix(r3, 0x0, &(0x7f0000000200)) fork() 12:17:56 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fsync(r1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) 12:17:56 executing program 4: r0 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000001600)='./file0\x00', 0x0, 0x7) ioctl$int_in(r2, 0x5421, &(0x7f0000001640)=0xffffffff) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000500)={{}, r1, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000000)=0x59b) sendfile(r4, r5, 0x0, 0x5) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x862a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f0000000100)="791b7d2577ec32834a9a9aafee0def956e242de950d5fb727f8252a2dc6dddf0b7989216f868d4bb30764ab9b8b02c", 0x2f, 0x59, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x810, 0xffffffffffffffff, 0x0) mq_notify(r3, &(0x7f0000000240)={0x0, 0xb, 0x0, @thr={&(0x7f0000001500)="18ff8ab69fe079c8b5b5e95cd5b3ceb2c3ba4f1eb41775ae27bce5c809cad555d17f699f173eec22eb0b62af84bc3199a78276f553f13758a422a604f3a0b92c7c7437ec0ece54b2ab4396cd630de022276af6c9e7b908a27acc65e1541d1b8d6cb1cf", &(0x7f0000001580)="7ad4eb7093e7e9893ea5f96e11eba6d01c25f7c08897343b8a3e9d16eb5fd0cbe269af49543dd9478b1df798ad82823d9100af85f945fa1b18d5a0f23add35dbb30f67147441821d189ebcb4da0a48087db274bcebb3d612370bfccac341e3e916dc71"}}) accept$unix(r3, 0x0, &(0x7f0000000200)) fork() 12:17:56 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0x40505331, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6}) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./file1\x00', &(0x7f0000000300)='xfs\x00', 0x4000, &(0x7f0000000340)='/dev/snd/seq\x00') pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) 12:17:57 executing program 7: r0 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000001600)='./file0\x00', 0x0, 0x7) ioctl$int_in(r2, 0x5421, &(0x7f0000001640)=0xffffffff) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000500)={{}, r1, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000000)=0x59b) sendfile(r4, r5, 0x0, 0x5) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x862a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f0000000100)="791b7d2577ec32834a9a9aafee0def956e242de950d5fb727f8252a2dc6dddf0b7989216f868d4bb30764ab9b8b02c", 0x2f, 0x59, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x810, 0xffffffffffffffff, 0x0) mq_notify(r3, &(0x7f0000000240)={0x0, 0xb, 0x0, @thr={&(0x7f0000001500)="18ff8ab69fe079c8b5b5e95cd5b3ceb2c3ba4f1eb41775ae27bce5c809cad555d17f699f173eec22eb0b62af84bc3199a78276f553f13758a422a604f3a0b92c7c7437ec0ece54b2ab4396cd630de022276af6c9e7b908a27acc65e1541d1b8d6cb1cf", &(0x7f0000001580)="7ad4eb7093e7e9893ea5f96e11eba6d01c25f7c08897343b8a3e9d16eb5fd0cbe269af49543dd9478b1df798ad82823d9100af85f945fa1b18d5a0f23add35dbb30f67147441821d189ebcb4da0a48087db274bcebb3d612370bfccac341e3e916dc71"}}) accept$unix(r3, 0x0, &(0x7f0000000200)) fork() 12:17:57 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}) 12:17:57 executing program 0: r0 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000001600)='./file0\x00', 0x0, 0x7) ioctl$int_in(r2, 0x5421, &(0x7f0000001640)=0xffffffff) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000500)={{}, r1, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000000)=0x59b) sendfile(r4, r5, 0x0, 0x5) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x862a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f0000000100)="791b7d2577ec32834a9a9aafee0def956e242de950d5fb727f8252a2dc6dddf0b7989216f868d4bb30764ab9b8b02c", 0x2f, 0x59, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x810, 0xffffffffffffffff, 0x0) mq_notify(r3, &(0x7f0000000240)={0x0, 0xb, 0x0, @thr={&(0x7f0000001500)="18ff8ab69fe079c8b5b5e95cd5b3ceb2c3ba4f1eb41775ae27bce5c809cad555d17f699f173eec22eb0b62af84bc3199a78276f553f13758a422a604f3a0b92c7c7437ec0ece54b2ab4396cd630de022276af6c9e7b908a27acc65e1541d1b8d6cb1cf", &(0x7f0000001580)="7ad4eb7093e7e9893ea5f96e11eba6d01c25f7c08897343b8a3e9d16eb5fd0cbe269af49543dd9478b1df798ad82823d9100af85f945fa1b18d5a0f23add35dbb30f67147441821d189ebcb4da0a48087db274bcebb3d612370bfccac341e3e916dc71"}}) accept$unix(r3, 0x0, &(0x7f0000000200)) fork() 12:17:57 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat2(0xffffffffffffffff, &(0x7f00000009c0)='./file1\x00', &(0x7f0000000a00)={0x80900}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x0, 0x0) syncfs(0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000100)={0x6, &(0x7f0000000000)=[{0x3, 0x7fff}, {0x5, 0x8000}, {0x4, 0x7d}, {0x7}, {0x3, 0x200}, {0x81, 0x9}]}) syz_io_uring_setup(0x6c69, &(0x7f0000000340)={0x0, 0x92c5, 0x0, 0x3, 0x26, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000003c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000c, 0x810, r1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_bp={&(0x7f0000000300), 0xd}, 0x8fa6, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x400}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x101, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x3c, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00bb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000), 0x4) socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x4, 0x3, 0x5, 0x9f, 0x0, 0x8, 0x10020, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x400, 0x1, @perf_bp={&(0x7f0000000400), 0x8}, 0x8214, 0xfff, 0x5, 0x7, 0x40, 0x3, 0x0, 0x0, 0x4, 0x0, 0x400}, 0xffffffffffffffff, 0x4, r1, 0x1) creat(&(0x7f0000000080)='./file0\x00', 0x0) accept4$unix(r0, &(0x7f00000001c0), &(0x7f0000000240)=0x6e, 0x80800) 12:17:57 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fsync(r1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) 12:17:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0x40505331, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6}) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./file1\x00', &(0x7f0000000300)='xfs\x00', 0x4000, &(0x7f0000000340)='/dev/snd/seq\x00') pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) 12:17:58 executing program 7: r0 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000001600)='./file0\x00', 0x0, 0x7) ioctl$int_in(r2, 0x5421, &(0x7f0000001640)=0xffffffff) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000500)={{}, r1, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000000)=0x59b) sendfile(r4, r5, 0x0, 0x5) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x862a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f0000000100)="791b7d2577ec32834a9a9aafee0def956e242de950d5fb727f8252a2dc6dddf0b7989216f868d4bb30764ab9b8b02c", 0x2f, 0x59, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x810, 0xffffffffffffffff, 0x0) mq_notify(r3, &(0x7f0000000240)={0x0, 0xb, 0x0, @thr={&(0x7f0000001500)="18ff8ab69fe079c8b5b5e95cd5b3ceb2c3ba4f1eb41775ae27bce5c809cad555d17f699f173eec22eb0b62af84bc3199a78276f553f13758a422a604f3a0b92c7c7437ec0ece54b2ab4396cd630de022276af6c9e7b908a27acc65e1541d1b8d6cb1cf", &(0x7f0000001580)="7ad4eb7093e7e9893ea5f96e11eba6d01c25f7c08897343b8a3e9d16eb5fd0cbe269af49543dd9478b1df798ad82823d9100af85f945fa1b18d5a0f23add35dbb30f67147441821d189ebcb4da0a48087db274bcebb3d612370bfccac341e3e916dc71"}}) accept$unix(r3, 0x0, &(0x7f0000000200)) fork() 12:17:58 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000002180)={0xa, 0x0, 0x0, @ipv4}, 0x1c) 12:17:58 executing program 6: syz_emit_ethernet(0x3a, &(0x7f0000000380)={@broadcast, @empty, @val={@void}, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x21, 0x0, @private=0xa010102, @rand_addr=0x64010101, {[@ssrr={0x89, 0x3, 0xa3}]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "68a7c7", 0x0, ',\vI'}}}}}}, 0x0) 12:17:59 executing program 2: r0 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000001600)='./file0\x00', 0x0, 0x7) ioctl$int_in(r2, 0x5421, &(0x7f0000001640)=0xffffffff) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000500)={{}, r1, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000000)=0x59b) sendfile(r4, r5, 0x0, 0x5) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x862a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f0000000100)="791b7d2577ec32834a9a9aafee0def956e242de950d5fb727f8252a2dc6dddf0b7989216f868d4bb30764ab9b8b02c", 0x2f, 0x59, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x810, 0xffffffffffffffff, 0x0) mq_notify(r3, &(0x7f0000000240)={0x0, 0xb, 0x0, @thr={&(0x7f0000001500)="18ff8ab69fe079c8b5b5e95cd5b3ceb2c3ba4f1eb41775ae27bce5c809cad555d17f699f173eec22eb0b62af84bc3199a78276f553f13758a422a604f3a0b92c7c7437ec0ece54b2ab4396cd630de022276af6c9e7b908a27acc65e1541d1b8d6cb1cf", &(0x7f0000001580)="7ad4eb7093e7e9893ea5f96e11eba6d01c25f7c08897343b8a3e9d16eb5fd0cbe269af49543dd9478b1df798ad82823d9100af85f945fa1b18d5a0f23add35dbb30f67147441821d189ebcb4da0a48087db274bcebb3d612370bfccac341e3e916dc71"}}) accept$unix(r3, 0x0, &(0x7f0000000200)) fork() 12:17:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) creat(&(0x7f0000000180)='./file1\x00', 0x0) 12:17:59 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000000), 0x4) [ 157.846159] loop3: detected capacity change from 0 to 40 12:18:00 executing program 1: r0 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000001600)='./file0\x00', 0x0, 0x7) ioctl$int_in(r2, 0x5421, &(0x7f0000001640)=0xffffffff) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000500)={{}, r1, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000000)=0x59b) sendfile(r4, r5, 0x0, 0x5) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x862a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f0000000100)="791b7d2577ec32834a9a9aafee0def956e242de950d5fb727f8252a2dc6dddf0b7989216f868d4bb30764ab9b8b02c", 0x2f, 0x59, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x810, 0xffffffffffffffff, 0x0) mq_notify(r3, &(0x7f0000000240)={0x0, 0xb, 0x0, @thr={&(0x7f0000001500)="18ff8ab69fe079c8b5b5e95cd5b3ceb2c3ba4f1eb41775ae27bce5c809cad555d17f699f173eec22eb0b62af84bc3199a78276f553f13758a422a604f3a0b92c7c7437ec0ece54b2ab4396cd630de022276af6c9e7b908a27acc65e1541d1b8d6cb1cf", &(0x7f0000001580)="7ad4eb7093e7e9893ea5f96e11eba6d01c25f7c08897343b8a3e9d16eb5fd0cbe269af49543dd9478b1df798ad82823d9100af85f945fa1b18d5a0f23add35dbb30f67147441821d189ebcb4da0a48087db274bcebb3d612370bfccac341e3e916dc71"}}) accept$unix(r3, 0x0, &(0x7f0000000200)) fork() 12:18:00 executing program 0: r0 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000001600)='./file0\x00', 0x0, 0x7) ioctl$int_in(r2, 0x5421, &(0x7f0000001640)=0xffffffff) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000500)={{}, r1, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000000)=0x59b) sendfile(r4, r5, 0x0, 0x5) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x862a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f0000000100)="791b7d2577ec32834a9a9aafee0def956e242de950d5fb727f8252a2dc6dddf0b7989216f868d4bb30764ab9b8b02c", 0x2f, 0x59, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x810, 0xffffffffffffffff, 0x0) mq_notify(r3, &(0x7f0000000240)={0x0, 0xb, 0x0, @thr={&(0x7f0000001500)="18ff8ab69fe079c8b5b5e95cd5b3ceb2c3ba4f1eb41775ae27bce5c809cad555d17f699f173eec22eb0b62af84bc3199a78276f553f13758a422a604f3a0b92c7c7437ec0ece54b2ab4396cd630de022276af6c9e7b908a27acc65e1541d1b8d6cb1cf", &(0x7f0000001580)="7ad4eb7093e7e9893ea5f96e11eba6d01c25f7c08897343b8a3e9d16eb5fd0cbe269af49543dd9478b1df798ad82823d9100af85f945fa1b18d5a0f23add35dbb30f67147441821d189ebcb4da0a48087db274bcebb3d612370bfccac341e3e916dc71"}}) accept$unix(r3, 0x0, &(0x7f0000000200)) fork() 12:18:01 executing program 4: r0 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000001600)='./file0\x00', 0x0, 0x7) ioctl$int_in(r2, 0x5421, &(0x7f0000001640)=0xffffffff) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000500)={{}, r1, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000000)=0x59b) sendfile(r4, r5, 0x0, 0x5) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x862a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f0000000100)="791b7d2577ec32834a9a9aafee0def956e242de950d5fb727f8252a2dc6dddf0b7989216f868d4bb30764ab9b8b02c", 0x2f, 0x59, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x810, 0xffffffffffffffff, 0x0) mq_notify(r3, &(0x7f0000000240)={0x0, 0xb, 0x0, @thr={&(0x7f0000001500)="18ff8ab69fe079c8b5b5e95cd5b3ceb2c3ba4f1eb41775ae27bce5c809cad555d17f699f173eec22eb0b62af84bc3199a78276f553f13758a422a604f3a0b92c7c7437ec0ece54b2ab4396cd630de022276af6c9e7b908a27acc65e1541d1b8d6cb1cf", &(0x7f0000001580)="7ad4eb7093e7e9893ea5f96e11eba6d01c25f7c08897343b8a3e9d16eb5fd0cbe269af49543dd9478b1df798ad82823d9100af85f945fa1b18d5a0f23add35dbb30f67147441821d189ebcb4da0a48087db274bcebb3d612370bfccac341e3e916dc71"}}) accept$unix(r3, 0x0, &(0x7f0000000200)) fork() 12:18:01 executing program 1: r0 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000001600)='./file0\x00', 0x0, 0x7) ioctl$int_in(r2, 0x5421, &(0x7f0000001640)=0xffffffff) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000500)={{}, r1, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000000)=0x59b) sendfile(r4, r5, 0x0, 0x5) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x862a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f0000000100)="791b7d2577ec32834a9a9aafee0def956e242de950d5fb727f8252a2dc6dddf0b7989216f868d4bb30764ab9b8b02c", 0x2f, 0x59, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x810, 0xffffffffffffffff, 0x0) mq_notify(r3, &(0x7f0000000240)={0x0, 0xb, 0x0, @thr={&(0x7f0000001500)="18ff8ab69fe079c8b5b5e95cd5b3ceb2c3ba4f1eb41775ae27bce5c809cad555d17f699f173eec22eb0b62af84bc3199a78276f553f13758a422a604f3a0b92c7c7437ec0ece54b2ab4396cd630de022276af6c9e7b908a27acc65e1541d1b8d6cb1cf", &(0x7f0000001580)="7ad4eb7093e7e9893ea5f96e11eba6d01c25f7c08897343b8a3e9d16eb5fd0cbe269af49543dd9478b1df798ad82823d9100af85f945fa1b18d5a0f23add35dbb30f67147441821d189ebcb4da0a48087db274bcebb3d612370bfccac341e3e916dc71"}}) accept$unix(r3, 0x0, &(0x7f0000000200)) fork() 12:18:01 executing program 2: r0 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000001600)='./file0\x00', 0x0, 0x7) ioctl$int_in(r2, 0x5421, &(0x7f0000001640)=0xffffffff) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000500)={{}, r1, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000000)=0x59b) sendfile(r4, r5, 0x0, 0x5) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x862a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f0000000100)="791b7d2577ec32834a9a9aafee0def956e242de950d5fb727f8252a2dc6dddf0b7989216f868d4bb30764ab9b8b02c", 0x2f, 0x59, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x810, 0xffffffffffffffff, 0x0) mq_notify(r3, &(0x7f0000000240)={0x0, 0xb, 0x0, @thr={&(0x7f0000001500)="18ff8ab69fe079c8b5b5e95cd5b3ceb2c3ba4f1eb41775ae27bce5c809cad555d17f699f173eec22eb0b62af84bc3199a78276f553f13758a422a604f3a0b92c7c7437ec0ece54b2ab4396cd630de022276af6c9e7b908a27acc65e1541d1b8d6cb1cf", &(0x7f0000001580)="7ad4eb7093e7e9893ea5f96e11eba6d01c25f7c08897343b8a3e9d16eb5fd0cbe269af49543dd9478b1df798ad82823d9100af85f945fa1b18d5a0f23add35dbb30f67147441821d189ebcb4da0a48087db274bcebb3d612370bfccac341e3e916dc71"}}) accept$unix(r3, 0x0, &(0x7f0000000200)) fork() 12:18:01 executing program 7: r0 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000001600)='./file0\x00', 0x0, 0x7) ioctl$int_in(r2, 0x5421, &(0x7f0000001640)=0xffffffff) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000500)={{}, r1, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000000)=0x59b) sendfile(r4, r5, 0x0, 0x5) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x862a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f0000000100)="791b7d2577ec32834a9a9aafee0def956e242de950d5fb727f8252a2dc6dddf0b7989216f868d4bb30764ab9b8b02c", 0x2f, 0x59, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x810, 0xffffffffffffffff, 0x0) mq_notify(r3, &(0x7f0000000240)={0x0, 0xb, 0x0, @thr={&(0x7f0000001500)="18ff8ab69fe079c8b5b5e95cd5b3ceb2c3ba4f1eb41775ae27bce5c809cad555d17f699f173eec22eb0b62af84bc3199a78276f553f13758a422a604f3a0b92c7c7437ec0ece54b2ab4396cd630de022276af6c9e7b908a27acc65e1541d1b8d6cb1cf", &(0x7f0000001580)="7ad4eb7093e7e9893ea5f96e11eba6d01c25f7c08897343b8a3e9d16eb5fd0cbe269af49543dd9478b1df798ad82823d9100af85f945fa1b18d5a0f23add35dbb30f67147441821d189ebcb4da0a48087db274bcebb3d612370bfccac341e3e916dc71"}}) accept$unix(r3, 0x0, &(0x7f0000000200)) fork() 12:18:01 executing program 0: r0 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000001600)='./file0\x00', 0x0, 0x7) ioctl$int_in(r2, 0x5421, &(0x7f0000001640)=0xffffffff) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000500)={{}, r1, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000000)=0x59b) sendfile(r4, r5, 0x0, 0x5) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x862a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f0000000100)="791b7d2577ec32834a9a9aafee0def956e242de950d5fb727f8252a2dc6dddf0b7989216f868d4bb30764ab9b8b02c", 0x2f, 0x59, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x810, 0xffffffffffffffff, 0x0) mq_notify(r3, &(0x7f0000000240)={0x0, 0xb, 0x0, @thr={&(0x7f0000001500)="18ff8ab69fe079c8b5b5e95cd5b3ceb2c3ba4f1eb41775ae27bce5c809cad555d17f699f173eec22eb0b62af84bc3199a78276f553f13758a422a604f3a0b92c7c7437ec0ece54b2ab4396cd630de022276af6c9e7b908a27acc65e1541d1b8d6cb1cf", &(0x7f0000001580)="7ad4eb7093e7e9893ea5f96e11eba6d01c25f7c08897343b8a3e9d16eb5fd0cbe269af49543dd9478b1df798ad82823d9100af85f945fa1b18d5a0f23add35dbb30f67147441821d189ebcb4da0a48087db274bcebb3d612370bfccac341e3e916dc71"}}) accept$unix(r3, 0x0, &(0x7f0000000200)) fork() 12:18:01 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chmod(&(0x7f0000000000)='./file1\x00', 0x0) 12:18:01 executing program 6: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = timerfd_create(0x0, 0x0) dup2(r0, r1) 12:18:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) creat(&(0x7f0000000180)='./file1\x00', 0x0) [ 159.893450] loop3: detected capacity change from 0 to 40 12:18:01 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x27) 12:18:02 executing program 5: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0xffffffffffffffff) 12:18:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) creat(&(0x7f0000000180)='./file1\x00', 0x0) [ 160.265688] loop3: detected capacity change from 0 to 40 12:18:02 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 12:18:02 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x27) 12:18:02 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) creat(&(0x7f0000000180)='./file1\x00', 0x0) [ 160.496547] loop3: detected capacity change from 0 to 40 12:18:02 executing program 5: r0 = dup(0xffffffffffffffff) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r3 = openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x78, 0x81, 0x7f, 0x9, 0x0, 0x20, 0xc91f449b0dc1cbe8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x44000, 0x2, 0x9, 0x7, 0xf8, 0x7, 0xfff, 0x0, 0x7, 0x0, 0x1000}, 0x0, 0xe, 0xffffffffffffffff, 0x3) 12:18:02 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x27) [ 160.847472] random: crng reseeded on system resumption [ 161.191103] random: crng reseeded on system resumption 12:18:03 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) flock(r0, 0x1) 12:18:03 executing program 5: r0 = dup(0xffffffffffffffff) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r3 = openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x78, 0x81, 0x7f, 0x9, 0x0, 0x20, 0xc91f449b0dc1cbe8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x44000, 0x2, 0x9, 0x7, 0xf8, 0x7, 0xfff, 0x0, 0x7, 0x0, 0x1000}, 0x0, 0xe, 0xffffffffffffffff, 0x3) 12:18:03 executing program 0: r0 = dup(0xffffffffffffffff) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r3 = openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x78, 0x81, 0x7f, 0x9, 0x0, 0x20, 0xc91f449b0dc1cbe8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x44000, 0x2, 0x9, 0x7, 0xf8, 0x7, 0xfff, 0x0, 0x7, 0x0, 0x1000}, 0x0, 0xe, 0xffffffffffffffff, 0x3) 12:18:03 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000100)) 12:18:03 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000100)={0x0, 0x307, 0xff7f, 0x4}) 12:18:03 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/meminfo\x00', 0x0, 0x0) lseek(r0, 0x8, 0x0) 12:18:03 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000001700)=0x1) 12:18:03 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x27) 12:18:03 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000001700)=0x1) 12:18:04 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000100)={0x0, 0x307, 0xff7f, 0x4}) [ 162.085195] random: crng reseeded on system resumption 12:18:04 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x5, 0x0, 0x0) 12:18:04 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000001700)=0x1) 12:18:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:18:04 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x7) fdatasync(r0) 12:18:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000c80)=@abs={0x1}, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000c80)=@abs={0x1}, 0x6e) 12:18:04 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000001700)=0x1) 12:18:04 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x97b7}) openat(r0, &(0x7f0000000080)='./file1\x00', 0x153840, 0x0) 12:18:04 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000100)={0x0, 0x307, 0xff7f, 0x4}) 12:18:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:18:04 executing program 5: r0 = dup(0xffffffffffffffff) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r3 = openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x78, 0x81, 0x7f, 0x9, 0x0, 0x20, 0xc91f449b0dc1cbe8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x44000, 0x2, 0x9, 0x7, 0xf8, 0x7, 0xfff, 0x0, 0x7, 0x0, 0x1000}, 0x0, 0xe, 0xffffffffffffffff, 0x3) 12:18:04 executing program 0: r0 = dup(0xffffffffffffffff) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r3 = openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x78, 0x81, 0x7f, 0x9, 0x0, 0x20, 0xc91f449b0dc1cbe8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x44000, 0x2, 0x9, 0x7, 0xf8, 0x7, 0xfff, 0x0, 0x7, 0x0, 0x1000}, 0x0, 0xe, 0xffffffffffffffff, 0x3) [ 162.421667] random: crng reseeded on system resumption 12:18:04 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000100)={0x0, 0x307, 0xff7f, 0x4}) 12:18:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:18:04 executing program 2: socketpair(0x10, 0x0, 0xa5e9, &(0x7f00000007c0)) 12:18:04 executing program 4: syz_mount_image$nfs(0x0, &(0x7f0000004880)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chmod(&(0x7f0000007440)='./file0\x00', 0xcec7b1de593e8904) 12:18:04 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1003}, 0x4) 12:18:04 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) dup2(r1, r0) 12:18:04 executing program 0: r0 = dup(0xffffffffffffffff) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r3 = openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x78, 0x81, 0x7f, 0x9, 0x0, 0x20, 0xc91f449b0dc1cbe8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x44000, 0x2, 0x9, 0x7, 0xf8, 0x7, 0xfff, 0x0, 0x7, 0x0, 0x1000}, 0x0, 0xe, 0xffffffffffffffff, 0x3) 12:18:04 executing program 5: r0 = dup(0xffffffffffffffff) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r3 = openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x78, 0x81, 0x7f, 0x9, 0x0, 0x20, 0xc91f449b0dc1cbe8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x44000, 0x2, 0x9, 0x7, 0xf8, 0x7, 0xfff, 0x0, 0x7, 0x0, 0x1000}, 0x0, 0xe, 0xffffffffffffffff, 0x3) 12:18:04 executing program 3: syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '=static'}}}]}) [ 162.717795] tmpfs: Bad value for 'mpol' [ 162.729972] tmpfs: Bad value for 'mpol' 12:18:04 executing program 7: request_key(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000005c0)='load ', 0xfffffffffffffffb) 12:18:04 executing program 4: r0 = fsmount(0xffffffffffffffff, 0x0, 0x7f) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x20}}, './file0\x00'}) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000040)={0x4, 0xa3, "b4bacc72dec5313b9ff3d641ea7d6c7442c6c5b5b7dd7420ee73edde74b630de9bb295f8027b0d933c154e56ad02ece717e28a8318ba073c6ff7ae7e3c80a871524c7ec7eeb4ffc055c74758b673c6e83441505e7ec7ae6027c413784305c84e53f712e2a0932e7f9c618f185c5433332745cb8e91370dd7adcda43f367237771eea422c8bed176969ca5edd6066d84a9d1153578d7004d038b008155836df8d31ce85"}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000100)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000140)={0x0, @adiantum, 0x0, @desc1}) syz_open_pts(r1, 0x101003) r2 = syz_open_pts(r1, 0x402480) fsetxattr$security_ima(r2, &(0x7f0000000180), 0x0, 0x0, 0x1) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, 0x0) r3 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000001700)=[{0x0}], 0x2000000, &(0x7f0000001780)={[{@hide}, {@dmode={'dmode', 0x3d, 0x9}}, {@utf8}, {@gid}, {@check_relaxed}, {@session={'session', 0x3d, 0x42}}, {@map_acorn}], [{@dont_appraise}, {@uid_gt}, {@obj_user={'obj_user', 0x3d, 'security.ima\x00'}}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001840)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000300)="83bc9d4a602087ed3d19eddf87294a88fc205a49fe3ddd98a4014f353ae8915245066cf0f60f484c15b8bb74005885d7fd940a", 0x33, r4}, 0x68) [ 162.783255] random: crng reseeded on system resumption 12:18:04 executing program 3: mlock2(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x4d5ae1ac022af730) 12:18:04 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0x28}}, 0x0) 12:18:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 12:18:04 executing program 7: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001500)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) dup3(r0, r1, 0x0) [ 212.317849] Bluetooth: hci0: command 0x0406 tx timeout [ 212.318364] Bluetooth: hci3: command 0x0406 tx timeout [ 212.318875] Bluetooth: hci4: command 0x0406 tx timeout [ 212.319339] Bluetooth: hci2: command 0x0406 tx timeout [ 212.319832] Bluetooth: hci5: command 0x0406 tx timeout [ 212.320291] Bluetooth: hci7: command 0x0406 tx timeout 12:18:54 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:18:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000380), 0x1000, &(0x7f0000000400)) 12:18:54 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 12:18:54 executing program 1: syslog(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x40010, r0, 0x101) sendfile(r1, r2, 0x0, 0x10000027f) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4024, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a04, 0x2, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="ce01", @ANYRES16, @ANYBLOB="ff05002179043f5918d8d6000000000000ffff"], 0x1c}}, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x100, 0x22) 12:18:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffe, 0xc79}, 0x0, 0x8, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @local}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xc, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) 12:18:54 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x12, 0x0, 0x0) 12:18:54 executing program 0: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x87}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x80, 0x80, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4079, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3f, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x6, 0x800, 0x7, 0x2, 0x3, 0x0, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x0) shmat(0x0, &(0x7f0000ff6000/0x1000)=nil, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0xe000)=nil, 0x5000) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x5}, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x20, 0x5, 0xdd, 0xda, 0x0, 0x1, 0x24, 0xd, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x480c0, 0x2, 0x9, 0x4, 0x40, 0x2, 0x0, 0x0, 0x8, 0x0, 0xd273}, 0x0, 0x0, r1, 0x4) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x8, 0x4010, r4, 0x40043000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, 0xffffffffffffffff, 0xf871a000) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r5 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) r6 = syz_open_dev$vcsa(&(0x7f0000000240), 0x3, 0x20001) pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000080)="a8ac04758916b12191bb047aaadf1313ca2e14ef9dace40dcfbdf1e87c7e82295c47a632e8fe20fd7bc1333a22ac973802001b2f489f5dad356125d5942eee9547c8b15b1424d46bf5914ee198f0f950df2412fbfc6961bc8832694d5df59835dde8eb374b4f619512178e101f6cfc2446fa5bc1a900a96a0cad61a54eb67863f6abd85613d8ad447ab195808a5e9b99ecc063be42d1eb61d5a5", 0x9a}, {&(0x7f0000000140)="c4", 0x1}], 0x2, 0x9, 0x0) pidfd_getfd(0xffffffffffffffff, r6, 0x0) 12:18:54 executing program 5: get_mempolicy(&(0x7f0000000200), &(0x7f0000000240), 0x5989, &(0x7f0000ffe000/0x1000)=nil, 0x2) 12:18:54 executing program 7: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x20010, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x35c3, &(0x7f0000000180)={0x0, 0x39dd, 0x8, 0x3, 0x1f4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000200)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) copy_file_range(r7, &(0x7f0000000040)=0xffffffffffffffc0, r7, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) copy_file_range(r8, &(0x7f0000000040)=0xffffffffffffffc0, r8, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x80000000, &(0x7f0000000140)=[r0, r7, r1, r8, 0xffffffffffffffff, r1, r6], 0x7}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r6, 0x5, 0x0, 0x0) gettid() r9 = socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000240)=[r5, r4, 0xffffffffffffffff, r9], 0x4) 12:18:54 executing program 5: r0 = epoll_create1(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x50000000}) 12:18:55 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000380), 0x0, 0x0) 12:18:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000380), 0x1000, &(0x7f0000000400)) [ 213.200200] BUG: unable to handle page fault for address: ffffed100fffc000 [ 213.201062] #PF: supervisor write access in kernel mode [ 213.201670] #PF: error_code(0x0002) - not-present page [ 213.202278] PGD 7ffd3067 P4D 7ffd3067 PUD 7ffd2067 PMD 7ffd1067 PTE 0 [ 213.203575] Oops: 0002 [#1] PREEMPT SMP KASAN NOPTI [ 213.204927] CPU: 0 PID: 4239 Comm: syz-executor.0 Not tainted 6.1.0-rc3-next-20221101 #1 [ 213.207315] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 213.208935] RIP: 0010:__memset+0x24/0x50 [ 213.209427] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 48 ab 89 d1 f3 aa 4c 89 c8 e9 0d d4 12 00 66 66 2e 0f 1f 84 00 [ 213.211702] RSP: 0018:ffff888041387cc0 EFLAGS: 00010216 [ 213.212463] RAX: 0000000000000000 RBX: ffff88800bff5240 RCX: 1ffffe21fe5fff71 [ 213.213473] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000 [ 213.214492] RBP: ffff88800bfe8a00 R08: 0000000000000005 R09: ffffed10017fea48 [ 213.215495] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800bfe8a00 [ 213.216495] R13: ffff88800bff5240 R14: ffffffff815f2620 R15: 1ffff110011ac81f [ 213.217499] FS: 00007f7de603c700(0000) GS:ffff88806d000000(0000) knlGS:0000000000000000 [ 213.218651] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.219475] CR2: ffffed100fffc000 CR3: 000000003ffe6000 CR4: 0000000000350ef0 [ 213.220485] Call Trace: [ 213.220865] [ 213.221200] kasan_unpoison+0x23/0x60 [ 213.221764] mempool_exit+0x1c2/0x330 [ 213.222343] bioset_exit+0x2c9/0x630 [ 213.222903] ? _raw_spin_unlock_irq+0x1f/0x60 [ 213.223578] disk_release+0x143/0x490 [ 213.224138] ? disk_release+0x0/0x490 [ 213.224701] ? device_release+0x0/0x250 [ 213.225286] device_release+0xa2/0x250 [ 213.225861] ? device_release+0x0/0x250 [ 213.226447] kobject_put+0x173/0x280 [ 213.226992] put_device+0x1b/0x40 12:18:55 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000480)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x25, &(0x7f0000000300)=""/37}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 213.227454] put_disk+0x41/0x60 [ 213.228030] loop_control_ioctl+0x4d1/0x630 [ 213.228613] ? loop_control_ioctl+0x0/0x630 [ 213.229201] ? selinux_file_ioctl+0xb1/0x270 [ 213.229822] ? loop_control_ioctl+0x0/0x630 [ 213.230418] __x64_sys_ioctl+0x19a/0x220 [ 213.230984] do_syscall_64+0x3b/0xa0 [ 213.231504] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 213.232208] RIP: 0033:0x7f7de8ae7b19 [ 213.232717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 213.234991] RSP: 002b:00007f7de603c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 213.235912] RAX: ffffffffffffffda RBX: 00007f7de8bfb020 RCX: 00007f7de8ae7b19 [ 213.236730] RDX: 0000000000000001 RSI: 0000000000004c81 RDI: 0000000000000005 [ 213.237532] RBP: 00007f7de8b41f6d R08: 0000000000000000 R09: 0000000000000000 [ 213.238350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.239150] R13: 00007ffc3254d32f R14: 00007f7de603c300 R15: 0000000000022000 [ 213.239965] [ 213.240241] Modules linked in: [ 213.240620] CR2: ffffed100fffc000 [ 213.241020] ---[ end trace 0000000000000000 ]--- [ 213.241558] RIP: 0010:__memset+0x24/0x50 [ 213.242050] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 48 ab 89 d1 f3 aa 4c 89 c8 e9 0d d4 12 00 66 66 2e 0f 1f 84 00 [ 213.244125] RSP: 0018:ffff888041387cc0 EFLAGS: 00010216 [ 213.244776] RAX: 0000000000000000 RBX: ffff88800bff5240 RCX: 1ffffe21fe5fff71 [ 213.245638] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000 [ 213.246518] RBP: ffff88800bfe8a00 R08: 0000000000000005 R09: ffffed10017fea48 [ 213.247419] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800bfe8a00 [ 213.248289] R13: ffff88800bff5240 R14: ffffffff815f2620 R15: 1ffff110011ac81f [ 213.249157] FS: 00007f7de603c700(0000) GS:ffff88806d000000(0000) knlGS:0000000000000000 [ 213.250137] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.250844] CR2: ffffed100fffc000 CR3: 000000003ffe6000 CR4: 0000000000350ef0 12:18:55 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 12:18:55 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffe, 0xc79}, 0x0, 0x8, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @local}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xc, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) 12:18:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f0000000380), 0x1000, &(0x7f0000000400)) 12:18:55 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) [ 213.794571] BUG: unable to handle page fault for address: ffffed100fffc000 [ 213.795301] #PF: supervisor write access in kernel mode [ 213.795829] #PF: error_code(0x0002) - not-present page [ 213.796346] PGD 7ffd3067 P4D 7ffd3067 PUD 7ffd2067 PMD 7ffd1067 PTE 0 [ 213.797014] Oops: 0002 [#2] PREEMPT SMP KASAN NOPTI [ 213.797506] CPU: 1 PID: 4232 Comm: syz-executor.0 Tainted: G D 6.1.0-rc3-next-20221101 #1 [ 213.798436] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 213.799229] RIP: 0010:__memset+0x24/0x50 [ 213.799671] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 48 ab 89 d1 f3 aa 4c 89 c8 e9 0d d4 12 00 66 66 2e 0f 1f 84 00 [ 213.801450] RSP: 0018:ffff8880418afcc0 EFLAGS: 00010216 [ 213.801983] RAX: 0000000000000000 RBX: ffff88800bff50c0 RCX: 1ffffe21fe5fff6b [ 213.802683] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000 [ 213.803364] RBP: ffff88800bfe8a00 R08: 0000000000000005 R09: ffffed10017fea18 [ 213.804048] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800bfe8a00 [ 213.804747] R13: ffff88800bff50c0 R14: ffffffff815f2620 R15: 1ffff1100119941f [ 213.805437] FS: 00007f7de605d700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000 [ 213.806236] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.806803] CR2: ffffed100fffc000 CR3: 000000003ffe6000 CR4: 0000000000350ee0 [ 213.807496] Call Trace: [ 213.807758] [ 213.807991] kasan_unpoison+0x23/0x60 [ 213.808382] mempool_exit+0x1c2/0x330 [ 213.808784] bioset_exit+0x2c9/0x630 [ 213.809173] ? _raw_spin_unlock_irq+0x1f/0x60 [ 213.809645] disk_release+0x143/0x490 [ 213.810042] ? disk_release+0x0/0x490 [ 213.810443] ? device_release+0x0/0x250 [ 213.810858] device_release+0xa2/0x250 [ 213.811263] ? device_release+0x0/0x250 [ 213.811668] kobject_put+0x173/0x280 [ 213.812058] put_device+0x1b/0x40 [ 213.812417] put_disk+0x41/0x60 [ 213.812769] loop_control_ioctl+0x4d1/0x630 [ 213.813214] ? loop_control_ioctl+0x0/0x630 [ 213.813661] ? selinux_file_ioctl+0xb1/0x270 [ 213.814122] ? loop_control_ioctl+0x0/0x630 [ 213.814588] __x64_sys_ioctl+0x19a/0x220 [ 213.815014] do_syscall_64+0x3b/0xa0 [ 213.815404] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 213.815922] RIP: 0033:0x7f7de8ae7b19 [ 213.816298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 213.818039] RSP: 002b:00007f7de605d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 213.818787] RAX: ffffffffffffffda RBX: 00007f7de8bfaf60 RCX: 00007f7de8ae7b19 [ 213.819480] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000005 [ 213.820171] RBP: 00007f7de8b41f6d R08: 0000000000000000 R09: 0000000000000000 [ 213.820867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.821557] R13: 00007ffc3254d32f R14: 00007f7de605d300 R15: 0000000000022000 [ 213.822266] [ 213.822506] Modules linked in: [ 213.822832] CR2: ffffed100fffc000 [ 213.823179] ---[ end trace 0000000000000000 ]--- [ 213.823638] RIP: 0010:__memset+0x24/0x50 [ 213.824065] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 48 ab 89 d1 f3 aa 4c 89 c8 e9 0d d4 12 00 66 66 2e 0f 1f 84 00 [ 213.825803] RSP: 0018:ffff888041387cc0 EFLAGS: 00010216 [ 213.826342] RAX: 0000000000000000 RBX: ffff88800bff5240 RCX: 1ffffe21fe5fff71 [ 213.827039] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000 [ 213.827736] RBP: ffff88800bfe8a00 R08: 0000000000000005 R09: ffffed10017fea48 [ 213.828429] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800bfe8a00 [ 213.829118] R13: ffff88800bff5240 R14: ffffffff815f2620 R15: 1ffff110011ac81f [ 213.829805] FS: 00007f7de605d700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000 [ 213.830578] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.831144] CR2: ffffed100fffc000 CR3: 000000003ffe6000 CR4: 0000000000350ee0 [ 213.889668] BUG: unable to handle page fault for address: ffffed100fffc000 [ 213.890396] #PF: supervisor write access in kernel mode [ 213.890902] #PF: error_code(0x0002) - not-present page [ 213.891398] PGD 7ffd3067 P4D 7ffd3067 PUD 7ffd2067 PMD 7ffd1067 PTE 0 [ 213.892048] Oops: 0002 [#3] PREEMPT SMP KASAN NOPTI [ 213.892534] CPU: 1 PID: 4269 Comm: syz-executor.0 Tainted: G D 6.1.0-rc3-next-20221101 #1 [ 213.893433] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 213.894222] RIP: 0010:__memset+0x24/0x50 [ 213.894645] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 48 ab 89 d1 f3 aa 4c 89 c8 e9 0d d4 12 00 66 66 2e 0f 1f 84 00 [ 213.896356] RSP: 0018:ffff888042837cc0 EFLAGS: 00010216 [ 213.896869] RAX: 0000000000000000 RBX: ffff88800bff53c0 RCX: 1ffffe21fe5fff77 [ 213.897549] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000 [ 213.898241] RBP: ffff88800bfe8a00 R08: 0000000000000005 R09: ffffed10017fea78 [ 213.898912] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800bfe8a00 [ 213.899572] R13: ffff88800bff53c0 R14: ffffffff815f2620 R15: 1ffff110011ae81f [ 213.900239] FS: 00007f7de5fd9700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000 [ 213.900986] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.901535] CR2: ffffed100fffc000 CR3: 000000003ffe6000 CR4: 0000000000350ee0 [ 213.902212] Call Trace: [ 213.902467] [ 213.902691] kasan_unpoison+0x23/0x60 [ 213.903071] mempool_exit+0x1c2/0x330 [ 213.903454] bioset_exit+0x2c9/0x630 [ 213.903826] ? _raw_spin_unlock+0x24/0x50 [ 213.904238] ? blkg_destroy_all.isra.0+0x157/0x230 [ 213.904736] disk_release+0x143/0x490 [ 213.905116] ? disk_release+0x0/0x490 [ 213.905492] ? device_release+0x0/0x250 [ 213.905877] device_release+0xa2/0x250 [ 213.906261] ? device_release+0x0/0x250 [ 213.906646] kobject_put+0x173/0x280 [ 213.907013] put_device+0x1b/0x40 [ 213.907358] put_disk+0x41/0x60 [ 213.907687] loop_control_ioctl+0x4d1/0x630 [ 213.908104] ? loop_control_ioctl+0x0/0x630 [ 213.908527] ? selinux_file_ioctl+0xb1/0x270 [ 213.908970] ? loop_control_ioctl+0x0/0x630 [ 213.909393] __x64_sys_ioctl+0x19a/0x220 [ 213.909796] do_syscall_64+0x3b/0xa0 [ 213.910184] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 213.910686] RIP: 0033:0x7f7de8ae7b19 [ 213.911048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 213.912739] RSP: 002b:00007f7de5fd9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 213.913443] RAX: ffffffffffffffda RBX: 00007f7de8bfb260 RCX: 00007f7de8ae7b19 [ 213.914106] RDX: 0000000000000002 RSI: 0000000000004c81 RDI: 0000000000000005 [ 213.914771] RBP: 00007f7de8b41f6d R08: 0000000000000000 R09: 0000000000000000 [ 213.915445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.916113] R13: 00007ffc3254d32f R14: 00007f7de5fd9300 R15: 0000000000022000 [ 213.916797] [ 213.917024] Modules linked in: [ 213.917335] CR2: ffffed100fffc000 [ 213.917667] ---[ end trace 0000000000000000 ]--- [ 213.918112] RIP: 0010:__memset+0x24/0x50 [ 213.918541] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 48 ab 89 d1 f3 aa 4c 89 c8 e9 0d d4 12 00 66 66 2e 0f 1f 84 00 [ 213.920236] RSP: 0018:ffff888041387cc0 EFLAGS: 00010216 [ 213.920744] RAX: 0000000000000000 RBX: ffff88800bff5240 RCX: 1ffffe21fe5fff71 [ 213.921414] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000 [ 213.922084] RBP: ffff88800bfe8a00 R08: 0000000000000005 R09: ffffed10017fea48 [ 213.922762] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800bfe8a00 [ 213.923428] R13: ffff88800bff5240 R14: ffffffff815f2620 R15: 1ffff110011ac81f [ 213.924093] FS: 00007f7de5fd9700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000 [ 213.924854] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 213.925403] CR2: ffffed100fffc000 CR3: 000000003ffe6000 CR4: 0000000000350ee0 [ 218.205843] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 222.493833] Bluetooth: hci3: Opcode 0x c03 failed: -110 VM DIAGNOSIS: 12:18:55 Registers: info registers vcpu 0 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82451491 RDI=ffffffff879a19e0 RBP=ffffffff879a19a0 RSP=ffff888041387508 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000033 R11=0000000000000001 R12=0000000000000033 R13=ffffffff879a19a0 R14=0000000000000010 R15=ffffffff82451480 RIP=ffffffff824514e9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f7de603c700 00000000 00000000 GS =0000 ffff88806d000000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe10552ee000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe10552ec000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=ffffed100fffc000 CR3=000000003ffe6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffff00ffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000008be47808c4 RBX=0000000000000000 RCX=00000000000006e0 RDX=000000000000008b RSI=ffff88806d127100 RDI=00000000000006e3 RBP=ffff88806d127100 RSP=ffff88806d109ed8 R8 =0000000000000007 R9 =0000000000000000 R10=00000000000013b7 R11=0000000000000001 R12=00000000000006e3 R13=0000000000000000 R14=0000000000000001 R15=ffff88806d12a600 RIP=ffffffff810fd5a1 RFL=00000017 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f7de605d700 00000000 00000000 GS =0000 ffff88806d100000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe766f14b000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe766f149000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555f2cbf1bf8 CR3=000000003ffe6000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000ff0000000000000000000000 XMM01=00000000010000000000000000000000 XMM02=7463656a6e695f31313230385f7a7973 XMM03=999b5e8a8095b17a44add81356d8abf6 XMM04=1313dfaa7a04bb9121b116897504aca8 XMM05=a5d561ebd142be63c0ec999b5e8a8095 XMM06=b17a44add81356d8abf66378b64ea561 XMM07=ad0c6aa900a9c15bfa4624fc6c1f108e XMM08=171295614f4b37ebe8dd3598f55d4d69 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000