Warning: Permanently added '[localhost]:23537' (ECDSA) to the list of known hosts.
2021/11/05 12:35:22 fuzzer started
2021/11/05 12:35:22 dialing manager at localhost:40891
2021/11/05 12:35:35 syscalls: 2135
2021/11/05 12:35:35 code coverage: enabled
2021/11/05 12:35:35 comparison tracing: enabled
2021/11/05 12:35:35 extra coverage: enabled
2021/11/05 12:35:35 setuid sandbox: enabled
2021/11/05 12:35:35 namespace sandbox: enabled
2021/11/05 12:35:35 Android sandbox: enabled
2021/11/05 12:35:35 fault injection: enabled
2021/11/05 12:35:35 leak checking: enabled
2021/11/05 12:35:35 net packet injection: enabled
2021/11/05 12:35:35 net device setup: enabled
2021/11/05 12:35:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2021/11/05 12:35:35 devlink PCI setup: PCI device 0000:00:10.0 is not available
2021/11/05 12:35:35 USB emulation: enabled
2021/11/05 12:35:35 hci packet injection: enabled
2021/11/05 12:35:35 wifi device emulation: enabled
2021/11/05 12:35:35 802.15.4 emulation: enabled
2021/11/05 12:35:35 fetching corpus: 0, signal 0/2000 (executing program)
2021/11/05 12:35:35 fetching corpus: 45, signal 23252/26843 (executing program)
2021/11/05 12:35:35 fetching corpus: 95, signal 40511/45461 (executing program)
2021/11/05 12:35:35 fetching corpus: 145, signal 52276/58510 (executing program)
2021/11/05 12:35:35 fetching corpus: 195, signal 57515/65050 (executing program)
2021/11/05 12:35:36 fetching corpus: 245, signal 62413/71237 (executing program)
2021/11/05 12:35:36 fetching corpus: 295, signal 66734/76793 (executing program)
2021/11/05 12:35:36 fetching corpus: 345, signal 70670/81874 (executing program)
2021/11/05 12:35:36 fetching corpus: 395, signal 72757/85216 (executing program)
2021/11/05 12:35:36 fetching corpus: 445, signal 75443/89044 (executing program)
2021/11/05 12:35:36 fetching corpus: 495, signal 79020/93636 (executing program)
2021/11/05 12:35:36 fetching corpus: 545, signal 82018/97658 (executing program)
2021/11/05 12:35:36 fetching corpus: 595, signal 85247/101795 (executing program)
2021/11/05 12:35:37 fetching corpus: 645, signal 87089/104659 (executing program)
2021/11/05 12:35:37 fetching corpus: 695, signal 89229/107820 (executing program)
2021/11/05 12:35:37 fetching corpus: 745, signal 91379/110867 (executing program)
2021/11/05 12:35:37 fetching corpus: 795, signal 93506/113829 (executing program)
2021/11/05 12:35:37 fetching corpus: 845, signal 94820/116141 (executing program)
2021/11/05 12:35:37 fetching corpus: 894, signal 96533/118779 (executing program)
2021/11/05 12:35:37 fetching corpus: 944, signal 98619/121694 (executing program)
2021/11/05 12:35:38 fetching corpus: 994, signal 100748/124576 (executing program)
2021/11/05 12:35:38 fetching corpus: 1044, signal 102310/126948 (executing program)
2021/11/05 12:35:38 fetching corpus: 1094, signal 104047/129489 (executing program)
2021/11/05 12:35:38 fetching corpus: 1144, signal 105975/132128 (executing program)
2021/11/05 12:35:38 fetching corpus: 1194, signal 107122/134105 (executing program)
2021/11/05 12:35:38 fetching corpus: 1244, signal 108396/136186 (executing program)
2021/11/05 12:35:38 fetching corpus: 1294, signal 110253/138685 (executing program)
2021/11/05 12:35:39 fetching corpus: 1344, signal 112102/141163 (executing program)
2021/11/05 12:35:39 fetching corpus: 1393, signal 113661/143344 (executing program)
2021/11/05 12:35:39 fetching corpus: 1443, signal 114676/145109 (executing program)
2021/11/05 12:35:39 fetching corpus: 1491, signal 115944/147025 (executing program)
2021/11/05 12:35:39 fetching corpus: 1541, signal 118354/149735 (executing program)
2021/11/05 12:35:39 fetching corpus: 1591, signal 119735/151688 (executing program)
2021/11/05 12:35:39 fetching corpus: 1641, signal 120469/153163 (executing program)
2021/11/05 12:35:40 fetching corpus: 1690, signal 121678/154918 (executing program)
2021/11/05 12:35:40 fetching corpus: 1740, signal 122379/156306 (executing program)
2021/11/05 12:35:40 fetching corpus: 1790, signal 123127/157739 (executing program)
2021/11/05 12:35:40 fetching corpus: 1839, signal 124401/159549 (executing program)
2021/11/05 12:35:40 fetching corpus: 1889, signal 125572/161312 (executing program)
2021/11/05 12:35:40 fetching corpus: 1939, signal 126462/162835 (executing program)
2021/11/05 12:35:40 fetching corpus: 1989, signal 127424/164429 (executing program)
2021/11/05 12:35:40 fetching corpus: 2039, signal 128183/165798 (executing program)
2021/11/05 12:35:41 fetching corpus: 2089, signal 129569/167562 (executing program)
2021/11/05 12:35:41 fetching corpus: 2139, signal 130195/168796 (executing program)
2021/11/05 12:35:41 fetching corpus: 2189, signal 131400/170397 (executing program)
2021/11/05 12:35:41 fetching corpus: 2239, signal 132828/172149 (executing program)
2021/11/05 12:35:41 fetching corpus: 2289, signal 133909/173661 (executing program)
2021/11/05 12:35:41 fetching corpus: 2339, signal 134636/174966 (executing program)
2021/11/05 12:35:41 fetching corpus: 2389, signal 135761/176412 (executing program)
2021/11/05 12:35:42 fetching corpus: 2439, signal 136802/177800 (executing program)
2021/11/05 12:35:42 fetching corpus: 2489, signal 137551/179032 (executing program)
2021/11/05 12:35:42 fetching corpus: 2538, signal 138125/180192 (executing program)
2021/11/05 12:35:42 fetching corpus: 2588, signal 139016/181526 (executing program)
2021/11/05 12:35:42 fetching corpus: 2638, signal 139828/182742 (executing program)
2021/11/05 12:35:42 fetching corpus: 2688, signal 140468/183875 (executing program)
2021/11/05 12:35:42 fetching corpus: 2738, signal 141125/185023 (executing program)
2021/11/05 12:35:42 fetching corpus: 2787, signal 141884/186206 (executing program)
2021/11/05 12:35:43 fetching corpus: 2837, signal 142581/187346 (executing program)
2021/11/05 12:35:43 fetching corpus: 2887, signal 143458/188565 (executing program)
2021/11/05 12:35:43 fetching corpus: 2937, signal 144177/189678 (executing program)
2021/11/05 12:35:43 fetching corpus: 2987, signal 144726/190684 (executing program)
2021/11/05 12:35:43 fetching corpus: 3037, signal 145271/191659 (executing program)
2021/11/05 12:35:43 fetching corpus: 3087, signal 146419/192916 (executing program)
2021/11/05 12:35:43 fetching corpus: 3137, signal 147022/193945 (executing program)
2021/11/05 12:35:43 fetching corpus: 3187, signal 147518/194915 (executing program)
2021/11/05 12:35:44 fetching corpus: 3237, signal 147998/195838 (executing program)
2021/11/05 12:35:44 fetching corpus: 3286, signal 148601/196767 (executing program)
2021/11/05 12:35:44 fetching corpus: 3336, signal 149515/197863 (executing program)
2021/11/05 12:35:44 fetching corpus: 3386, signal 149966/198751 (executing program)
2021/11/05 12:35:44 fetching corpus: 3436, signal 150558/199691 (executing program)
2021/11/05 12:35:44 fetching corpus: 3486, signal 151073/200593 (executing program)
2021/11/05 12:35:44 fetching corpus: 3536, signal 151579/201462 (executing program)
2021/11/05 12:35:44 fetching corpus: 3586, signal 152394/202446 (executing program)
2021/11/05 12:35:45 fetching corpus: 3635, signal 152857/203344 (executing program)
2021/11/05 12:35:45 fetching corpus: 3685, signal 153553/204301 (executing program)
2021/11/05 12:35:45 fetching corpus: 3735, signal 154206/205202 (executing program)
2021/11/05 12:35:45 fetching corpus: 3785, signal 154724/206060 (executing program)
2021/11/05 12:35:45 fetching corpus: 3835, signal 155272/206886 (executing program)
2021/11/05 12:35:45 fetching corpus: 3884, signal 155862/207728 (executing program)
2021/11/05 12:35:45 fetching corpus: 3933, signal 156511/208609 (executing program)
2021/11/05 12:35:45 fetching corpus: 3983, signal 157142/209444 (executing program)
2021/11/05 12:35:46 fetching corpus: 4032, signal 157821/210306 (executing program)
2021/11/05 12:35:46 fetching corpus: 4082, signal 158261/211073 (executing program)
2021/11/05 12:35:46 fetching corpus: 4132, signal 158868/211870 (executing program)
2021/11/05 12:35:46 fetching corpus: 4182, signal 159369/212633 (executing program)
2021/11/05 12:35:46 fetching corpus: 4232, signal 160016/213386 (executing program)
2021/11/05 12:35:46 fetching corpus: 4282, signal 160551/214138 (executing program)
2021/11/05 12:35:46 fetching corpus: 4331, signal 161086/214910 (executing program)
2021/11/05 12:35:46 fetching corpus: 4381, signal 161575/215650 (executing program)
2021/11/05 12:35:47 fetching corpus: 4431, signal 162170/216403 (executing program)
2021/11/05 12:35:47 fetching corpus: 4481, signal 162591/217052 (executing program)
2021/11/05 12:35:47 fetching corpus: 4531, signal 163052/217753 (executing program)
2021/11/05 12:35:47 fetching corpus: 4581, signal 163464/218435 (executing program)
2021/11/05 12:35:47 fetching corpus: 4630, signal 164002/219108 (executing program)
2021/11/05 12:35:47 fetching corpus: 4680, signal 164606/219815 (executing program)
2021/11/05 12:35:47 fetching corpus: 4730, signal 165185/220511 (executing program)
2021/11/05 12:35:47 fetching corpus: 4780, signal 166266/221278 (executing program)
2021/11/05 12:35:48 fetching corpus: 4830, signal 166799/221952 (executing program)
2021/11/05 12:35:48 fetching corpus: 4880, signal 167345/222609 (executing program)
2021/11/05 12:35:48 fetching corpus: 4929, signal 167932/223261 (executing program)
2021/11/05 12:35:48 fetching corpus: 4979, signal 168243/223844 (executing program)
2021/11/05 12:35:48 fetching corpus: 5029, signal 168834/224463 (executing program)
2021/11/05 12:35:48 fetching corpus: 5079, signal 169384/225064 (executing program)
2021/11/05 12:35:48 fetching corpus: 5129, signal 169811/225650 (executing program)
2021/11/05 12:35:49 fetching corpus: 5179, signal 170150/226233 (executing program)
2021/11/05 12:35:49 fetching corpus: 5229, signal 170605/226789 (executing program)
2021/11/05 12:35:49 fetching corpus: 5279, signal 171094/227332 (executing program)
2021/11/05 12:35:49 fetching corpus: 5329, signal 171451/227898 (executing program)
2021/11/05 12:35:49 fetching corpus: 5378, signal 171816/228488 (executing program)
2021/11/05 12:35:49 fetching corpus: 5428, signal 172718/229079 (executing program)
2021/11/05 12:35:49 fetching corpus: 5478, signal 173185/229634 (executing program)
2021/11/05 12:35:49 fetching corpus: 5528, signal 173560/230157 (executing program)
2021/11/05 12:35:50 fetching corpus: 5578, signal 173963/230672 (executing program)
2021/11/05 12:35:50 fetching corpus: 5628, signal 174551/231152 (executing program)
2021/11/05 12:35:50 fetching corpus: 5678, signal 174857/231633 (executing program)
2021/11/05 12:35:50 fetching corpus: 5728, signal 175376/232105 (executing program)
2021/11/05 12:35:50 fetching corpus: 5777, signal 175771/232126 (executing program)
2021/11/05 12:35:50 fetching corpus: 5826, signal 176248/232126 (executing program)
2021/11/05 12:35:50 fetching corpus: 5876, signal 176734/232135 (executing program)
2021/11/05 12:35:51 fetching corpus: 5926, signal 177306/232135 (executing program)
2021/11/05 12:35:51 fetching corpus: 5976, signal 177783/232137 (executing program)
2021/11/05 12:35:51 fetching corpus: 6026, signal 178160/232137 (executing program)
2021/11/05 12:35:51 fetching corpus: 6075, signal 178494/232137 (executing program)
2021/11/05 12:35:51 fetching corpus: 6124, signal 178799/232145 (executing program)
2021/11/05 12:35:51 fetching corpus: 6174, signal 179032/232145 (executing program)
2021/11/05 12:35:51 fetching corpus: 6224, signal 179439/232145 (executing program)
2021/11/05 12:35:51 fetching corpus: 6274, signal 179775/232145 (executing program)
2021/11/05 12:35:52 fetching corpus: 6324, signal 180063/232145 (executing program)
2021/11/05 12:35:52 fetching corpus: 6374, signal 180550/232149 (executing program)
2021/11/05 12:35:52 fetching corpus: 6424, signal 180940/232150 (executing program)
2021/11/05 12:35:52 fetching corpus: 6474, signal 181231/232150 (executing program)
2021/11/05 12:35:52 fetching corpus: 6524, signal 181552/232150 (executing program)
2021/11/05 12:35:52 fetching corpus: 6574, signal 181937/232150 (executing program)
2021/11/05 12:35:52 fetching corpus: 6624, signal 182485/232159 (executing program)
2021/11/05 12:35:52 fetching corpus: 6673, signal 182871/232159 (executing program)
2021/11/05 12:35:53 fetching corpus: 6723, signal 183248/232159 (executing program)
2021/11/05 12:35:53 fetching corpus: 6773, signal 183608/232159 (executing program)
2021/11/05 12:35:53 fetching corpus: 6823, signal 183944/232159 (executing program)
2021/11/05 12:35:53 fetching corpus: 6873, signal 184304/232159 (executing program)
2021/11/05 12:35:53 fetching corpus: 6923, signal 184582/232161 (executing program)
2021/11/05 12:35:53 fetching corpus: 6973, signal 184976/232164 (executing program)
2021/11/05 12:35:54 fetching corpus: 7022, signal 185695/232164 (executing program)
2021/11/05 12:35:54 fetching corpus: 7072, signal 186083/232164 (executing program)
2021/11/05 12:35:54 fetching corpus: 7122, signal 186585/232164 (executing program)
2021/11/05 12:35:54 fetching corpus: 7171, signal 186895/232167 (executing program)
2021/11/05 12:35:54 fetching corpus: 7221, signal 187265/232167 (executing program)
2021/11/05 12:35:54 fetching corpus: 7271, signal 187592/232167 (executing program)
2021/11/05 12:35:54 fetching corpus: 7321, signal 188188/232167 (executing program)
2021/11/05 12:35:55 fetching corpus: 7371, signal 188745/232167 (executing program)
2021/11/05 12:35:55 fetching corpus: 7421, signal 189007/232170 (executing program)
2021/11/05 12:35:55 fetching corpus: 7471, signal 189278/232170 (executing program)
2021/11/05 12:35:55 fetching corpus: 7521, signal 189518/232170 (executing program)
2021/11/05 12:35:55 fetching corpus: 7571, signal 189752/232171 (executing program)
2021/11/05 12:35:55 fetching corpus: 7621, signal 190220/232171 (executing program)
2021/11/05 12:35:55 fetching corpus: 7671, signal 190522/232171 (executing program)
2021/11/05 12:35:55 fetching corpus: 7721, signal 190984/232171 (executing program)
2021/11/05 12:35:56 fetching corpus: 7771, signal 191281/232173 (executing program)
2021/11/05 12:35:56 fetching corpus: 7821, signal 191502/232173 (executing program)
2021/11/05 12:35:56 fetching corpus: 7871, signal 191850/232173 (executing program)
2021/11/05 12:35:56 fetching corpus: 7920, signal 192125/232173 (executing program)
2021/11/05 12:35:56 fetching corpus: 7970, signal 192422/232173 (executing program)
2021/11/05 12:35:56 fetching corpus: 8020, signal 192709/232181 (executing program)
2021/11/05 12:35:56 fetching corpus: 8070, signal 193017/232181 (executing program)
2021/11/05 12:35:56 fetching corpus: 8120, signal 193471/232181 (executing program)
2021/11/05 12:35:57 fetching corpus: 8170, signal 193802/232181 (executing program)
2021/11/05 12:35:57 fetching corpus: 8220, signal 194147/232181 (executing program)
2021/11/05 12:35:57 fetching corpus: 8270, signal 194556/232181 (executing program)
2021/11/05 12:35:57 fetching corpus: 8320, signal 194938/232181 (executing program)
2021/11/05 12:35:57 fetching corpus: 8370, signal 195222/232181 (executing program)
2021/11/05 12:35:57 fetching corpus: 8420, signal 195516/232181 (executing program)
2021/11/05 12:35:57 fetching corpus: 8470, signal 195889/232181 (executing program)
2021/11/05 12:35:57 fetching corpus: 8520, signal 196147/232181 (executing program)
2021/11/05 12:35:58 fetching corpus: 8569, signal 196400/232181 (executing program)
2021/11/05 12:35:58 fetching corpus: 8619, signal 196746/232197 (executing program)
2021/11/05 12:35:58 fetching corpus: 8669, signal 197047/232197 (executing program)
2021/11/05 12:35:58 fetching corpus: 8719, signal 197441/232197 (executing program)
2021/11/05 12:35:58 fetching corpus: 8768, signal 197702/232197 (executing program)
2021/11/05 12:35:58 fetching corpus: 8817, signal 197942/232197 (executing program)
2021/11/05 12:35:58 fetching corpus: 8867, signal 198219/232197 (executing program)
2021/11/05 12:35:59 fetching corpus: 8917, signal 198502/232197 (executing program)
2021/11/05 12:35:59 fetching corpus: 8967, signal 198716/232197 (executing program)
2021/11/05 12:35:59 fetching corpus: 9016, signal 199016/232197 (executing program)
2021/11/05 12:35:59 fetching corpus: 9064, signal 199311/232197 (executing program)
2021/11/05 12:35:59 fetching corpus: 9114, signal 199572/232197 (executing program)
2021/11/05 12:35:59 fetching corpus: 9164, signal 199846/232197 (executing program)
2021/11/05 12:35:59 fetching corpus: 9214, signal 200097/232197 (executing program)
2021/11/05 12:35:59 fetching corpus: 9264, signal 200342/232197 (executing program)
2021/11/05 12:35:59 fetching corpus: 9314, signal 200633/232197 (executing program)
2021/11/05 12:36:00 fetching corpus: 9364, signal 200980/232203 (executing program)
2021/11/05 12:36:00 fetching corpus: 9414, signal 201279/232203 (executing program)
2021/11/05 12:36:00 fetching corpus: 9464, signal 201512/232203 (executing program)
2021/11/05 12:36:00 fetching corpus: 9513, signal 201824/232203 (executing program)
2021/11/05 12:36:00 fetching corpus: 9563, signal 202059/232203 (executing program)
2021/11/05 12:36:00 fetching corpus: 9613, signal 202336/232203 (executing program)
2021/11/05 12:36:00 fetching corpus: 9663, signal 202667/232203 (executing program)
2021/11/05 12:36:01 fetching corpus: 9713, signal 202866/232204 (executing program)
2021/11/05 12:36:01 fetching corpus: 9762, signal 203163/232204 (executing program)
2021/11/05 12:36:01 fetching corpus: 9812, signal 203385/232204 (executing program)
2021/11/05 12:36:01 fetching corpus: 9861, signal 203675/232206 (executing program)
2021/11/05 12:36:01 fetching corpus: 9911, signal 203972/232206 (executing program)
2021/11/05 12:36:01 fetching corpus: 9961, signal 204308/232206 (executing program)
2021/11/05 12:36:01 fetching corpus: 10011, signal 204572/232206 (executing program)
2021/11/05 12:36:01 fetching corpus: 10061, signal 204963/232206 (executing program)
2021/11/05 12:36:02 fetching corpus: 10111, signal 205279/232206 (executing program)
2021/11/05 12:36:02 fetching corpus: 10161, signal 205602/232207 (executing program)
2021/11/05 12:36:02 fetching corpus: 10211, signal 206002/232207 (executing program)
2021/11/05 12:36:02 fetching corpus: 10260, signal 206362/232207 (executing program)
2021/11/05 12:36:02 fetching corpus: 10310, signal 206724/232207 (executing program)
2021/11/05 12:36:02 fetching corpus: 10360, signal 207008/232207 (executing program)
2021/11/05 12:36:02 fetching corpus: 10410, signal 207199/232207 (executing program)
2021/11/05 12:36:03 fetching corpus: 10460, signal 207554/232207 (executing program)
2021/11/05 12:36:03 fetching corpus: 10510, signal 207800/232207 (executing program)
2021/11/05 12:36:03 fetching corpus: 10560, signal 208082/232207 (executing program)
2021/11/05 12:36:03 fetching corpus: 10610, signal 208283/232207 (executing program)
2021/11/05 12:36:03 fetching corpus: 10659, signal 208471/232221 (executing program)
2021/11/05 12:36:03 fetching corpus: 10709, signal 208706/232221 (executing program)
2021/11/05 12:36:03 fetching corpus: 10758, signal 208962/232221 (executing program)
2021/11/05 12:36:03 fetching corpus: 10808, signal 209279/232221 (executing program)
2021/11/05 12:36:04 fetching corpus: 10857, signal 209570/232221 (executing program)
2021/11/05 12:36:04 fetching corpus: 10904, signal 209818/232221 (executing program)
2021/11/05 12:36:04 fetching corpus: 10953, signal 210040/232221 (executing program)
2021/11/05 12:36:04 fetching corpus: 11003, signal 210391/232221 (executing program)
2021/11/05 12:36:04 fetching corpus: 11053, signal 210649/232221 (executing program)
2021/11/05 12:36:04 fetching corpus: 11103, signal 210869/232224 (executing program)
2021/11/05 12:36:04 fetching corpus: 11153, signal 211050/232224 (executing program)
2021/11/05 12:36:04 fetching corpus: 11203, signal 211272/232224 (executing program)
2021/11/05 12:36:04 fetching corpus: 11252, signal 211460/232224 (executing program)
2021/11/05 12:36:05 fetching corpus: 11302, signal 211704/232226 (executing program)
2021/11/05 12:36:05 fetching corpus: 11350, signal 211946/232226 (executing program)
2021/11/05 12:36:05 fetching corpus: 11400, signal 212160/232226 (executing program)
2021/11/05 12:36:05 fetching corpus: 11450, signal 212422/232226 (executing program)
2021/11/05 12:36:05 fetching corpus: 11500, signal 212723/232226 (executing program)
2021/11/05 12:36:05 fetching corpus: 11549, signal 212898/232233 (executing program)
2021/11/05 12:36:06 fetching corpus: 11596, signal 213186/232233 (executing program)
2021/11/05 12:36:06 fetching corpus: 11646, signal 213438/232233 (executing program)
2021/11/05 12:36:06 fetching corpus: 11695, signal 213627/232234 (executing program)
2021/11/05 12:36:06 fetching corpus: 11745, signal 213930/232234 (executing program)
2021/11/05 12:36:06 fetching corpus: 11794, signal 214213/232234 (executing program)
2021/11/05 12:36:06 fetching corpus: 11844, signal 214436/232234 (executing program)
2021/11/05 12:36:06 fetching corpus: 11894, signal 214602/232234 (executing program)
2021/11/05 12:36:06 fetching corpus: 11944, signal 214792/232234 (executing program)
2021/11/05 12:36:07 fetching corpus: 11994, signal 214977/232234 (executing program)
2021/11/05 12:36:07 fetching corpus: 12044, signal 215178/232234 (executing program)
2021/11/05 12:36:07 fetching corpus: 12093, signal 215332/232244 (executing program)
2021/11/05 12:36:07 fetching corpus: 12143, signal 215579/232244 (executing program)
2021/11/05 12:36:07 fetching corpus: 12193, signal 215872/232245 (executing program)
2021/11/05 12:36:07 fetching corpus: 12242, signal 216136/232245 (executing program)
2021/11/05 12:36:07 fetching corpus: 12291, signal 216336/232245 (executing program)
2021/11/05 12:36:07 fetching corpus: 12341, signal 216593/232245 (executing program)
2021/11/05 12:36:08 fetching corpus: 12389, signal 216783/232245 (executing program)
2021/11/05 12:36:08 fetching corpus: 12439, signal 217005/232245 (executing program)
2021/11/05 12:36:08 fetching corpus: 12489, signal 217306/232245 (executing program)
2021/11/05 12:36:08 fetching corpus: 12539, signal 217505/232257 (executing program)
2021/11/05 12:36:08 fetching corpus: 12587, signal 217684/232257 (executing program)
2021/11/05 12:36:08 fetching corpus: 12637, signal 217977/232257 (executing program)
2021/11/05 12:36:08 fetching corpus: 12687, signal 218161/232257 (executing program)
2021/11/05 12:36:09 fetching corpus: 12737, signal 218405/232257 (executing program)
2021/11/05 12:36:09 fetching corpus: 12786, signal 218661/232257 (executing program)
2021/11/05 12:36:09 fetching corpus: 12835, signal 218878/232260 (executing program)
2021/11/05 12:36:09 fetching corpus: 12885, signal 219059/232260 (executing program)
2021/11/05 12:36:09 fetching corpus: 12934, signal 219319/232260 (executing program)
2021/11/05 12:36:09 fetching corpus: 12983, signal 219506/232260 (executing program)
2021/11/05 12:36:09 fetching corpus: 13033, signal 219747/232260 (executing program)
2021/11/05 12:36:09 fetching corpus: 13083, signal 220026/232260 (executing program)
2021/11/05 12:36:10 fetching corpus: 13133, signal 220232/232260 (executing program)
2021/11/05 12:36:10 fetching corpus: 13183, signal 220431/232260 (executing program)
2021/11/05 12:36:10 fetching corpus: 13233, signal 220701/232260 (executing program)
2021/11/05 12:36:10 fetching corpus: 13283, signal 220957/232260 (executing program)
2021/11/05 12:36:10 fetching corpus: 13332, signal 221114/232263 (executing program)
2021/11/05 12:36:10 fetching corpus: 13382, signal 221355/232263 (executing program)
2021/11/05 12:36:10 fetching corpus: 13432, signal 221560/232263 (executing program)
2021/11/05 12:36:11 fetching corpus: 13482, signal 221798/232263 (executing program)
2021/11/05 12:36:11 fetching corpus: 13532, signal 222055/232263 (executing program)
2021/11/05 12:36:11 fetching corpus: 13581, signal 222208/232263 (executing program)
2021/11/05 12:36:11 fetching corpus: 13630, signal 222468/232263 (executing program)
2021/11/05 12:36:11 fetching corpus: 13678, signal 222638/232268 (executing program)
2021/11/05 12:36:11 fetching corpus: 13726, signal 222928/232268 (executing program)
2021/11/05 12:36:11 fetching corpus: 13776, signal 223113/232268 (executing program)
2021/11/05 12:36:12 fetching corpus: 13825, signal 223379/232268 (executing program)
2021/11/05 12:36:12 fetching corpus: 13873, signal 223570/232269 (executing program)
2021/11/05 12:36:12 fetching corpus: 13923, signal 223789/232269 (executing program)
2021/11/05 12:36:12 fetching corpus: 13973, signal 223972/232270 (executing program)
2021/11/05 12:36:12 fetching corpus: 14022, signal 224193/232270 (executing program)
2021/11/05 12:36:12 fetching corpus: 14070, signal 224402/232273 (executing program)
2021/11/05 12:36:13 fetching corpus: 14119, signal 224578/232273 (executing program)
2021/11/05 12:36:13 fetching corpus: 14169, signal 224884/232273 (executing program)
2021/11/05 12:36:13 fetching corpus: 14218, signal 225081/232279 (executing program)
2021/11/05 12:36:13 fetching corpus: 14265, signal 225312/232279 (executing program)
2021/11/05 12:36:13 fetching corpus: 14315, signal 225547/232279 (executing program)
2021/11/05 12:36:13 fetching corpus: 14365, signal 225750/232279 (executing program)
2021/11/05 12:36:13 fetching corpus: 14414, signal 225954/232279 (executing program)
2021/11/05 12:36:14 fetching corpus: 14464, signal 226124/232279 (executing program)
2021/11/05 12:36:14 fetching corpus: 14514, signal 226408/232283 (executing program)
2021/11/05 12:36:14 fetching corpus: 14563, signal 226555/232283 (executing program)
2021/11/05 12:36:14 fetching corpus: 14613, signal 226772/232283 (executing program)
2021/11/05 12:36:14 fetching corpus: 14663, signal 226952/232283 (executing program)
2021/11/05 12:36:14 fetching corpus: 14713, signal 227148/232283 (executing program)
2021/11/05 12:36:14 fetching corpus: 14763, signal 227348/232283 (executing program)
2021/11/05 12:36:14 fetching corpus: 14812, signal 227625/232289 (executing program)
2021/11/05 12:36:15 fetching corpus: 14858, signal 227828/232289 (executing program)
2021/11/05 12:36:15 fetching corpus: 14906, signal 228121/232289 (executing program)
2021/11/05 12:36:15 fetching corpus: 14956, signal 228351/232289 (executing program)
2021/11/05 12:36:15 fetching corpus: 15004, signal 228523/232293 (executing program)
2021/11/05 12:36:15 fetching corpus: 15054, signal 228721/232293 (executing program)
2021/11/05 12:36:15 fetching corpus: 15103, signal 228961/232293 (executing program)
2021/11/05 12:36:15 fetching corpus: 15153, signal 229174/232294 (executing program)
2021/11/05 12:36:16 fetching corpus: 15203, signal 229314/232294 (executing program)
2021/11/05 12:36:16 fetching corpus: 15253, signal 229578/232294 (executing program)
2021/11/05 12:36:16 fetching corpus: 15303, signal 229705/232294 (executing program)
2021/11/05 12:36:16 fetching corpus: 15353, signal 229943/232294 (executing program)
2021/11/05 12:36:16 fetching corpus: 15401, signal 230142/232294 (executing program)
2021/11/05 12:36:16 fetching corpus: 15449, signal 230355/232296 (executing program)
2021/11/05 12:36:16 fetching corpus: 15497, signal 230548/232300 (executing program)
2021/11/05 12:36:16 fetching corpus: 15538, signal 230735/232300 (executing program)
2021/11/05 12:36:16 fetching corpus: 15538, signal 230735/232300 (executing program)
2021/11/05 12:36:19 starting 8 fuzzer processes
12:36:19 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002000210c000000000000000002000000180000020c0000000600000000000400080004"], 0x2c}}, 0x0)

12:36:19 executing program 6:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000))

12:36:19 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x6}, @typed={0x8, 0x4, 0x0, 0x0, @pid}]}]}, 0x2c}}, 0x0)

syzkaller login: [   84.009345] audit: type=1400 audit(1636115779.093:6): avc:  denied  { execmem } for  pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
12:36:19 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
llistxattr(0x0, 0x0, 0x0)

12:36:19 executing program 2:
keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0)

12:36:19 executing program 4:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0)

12:36:19 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbca6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000800)={{}, {}, 0xfffffffe})
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000000)={0x85, 0x0, 'client1\x00', 0x1, "718fa9c84c8ee781", "39aaf5d3f118e3a108b62c706580484f830e3fcd13ce69b6f99f76294c6490bf", 0x7fff, 0x2})

12:36:19 executing program 7:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x1}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001300)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000380)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, 0x0}}], 0x2, 0x0)

[   84.144053] cgroup: Unknown subsys name 'perf_event'
[   84.147444] cgroup: Unknown subsys name 'net_cls'
[   84.192771] cgroup: Unknown subsys name 'perf_event'
[   84.196561] cgroup: Unknown subsys name 'net_cls'
[   84.198995] cgroup: Unknown subsys name 'perf_event'
[   84.201267] cgroup: Unknown subsys name 'net_cls'
[   84.205619] cgroup: Unknown subsys name 'perf_event'
[   84.206610] cgroup: Unknown subsys name 'net_cls'
[   84.227087] cgroup: Unknown subsys name 'perf_event'
[   84.228670] cgroup: Unknown subsys name 'net_cls'
[   84.249903] cgroup: Unknown subsys name 'perf_event'
[   84.251349] cgroup: Unknown subsys name 'net_cls'
[   84.256298] cgroup: Unknown subsys name 'perf_event'
[   84.257518] cgroup: Unknown subsys name 'net_cls'
[   84.274080] cgroup: Unknown subsys name 'perf_event'
[   84.277075] cgroup: Unknown subsys name 'net_cls'
[   87.225463] Bluetooth: hci0: command 0x0409 tx timeout
[   87.352811] Bluetooth: hci1: command 0x0409 tx timeout
[   87.352827] Bluetooth: hci2: command 0x0409 tx timeout
[   87.355189] Bluetooth: hci3: command 0x0409 tx timeout
[   87.357368] Bluetooth: hci4: command 0x0409 tx timeout
[   87.416829] Bluetooth: hci5: command 0x0409 tx timeout
[   87.417516] Bluetooth: hci7: command 0x0409 tx timeout
[   87.418606] Bluetooth: hci6: command 0x0409 tx timeout
[   89.272841] Bluetooth: hci0: command 0x041b tx timeout
[   89.401058] Bluetooth: hci4: command 0x041b tx timeout
[   89.402650] Bluetooth: hci3: command 0x041b tx timeout
[   89.407181] Bluetooth: hci2: command 0x041b tx timeout
[   89.408714] Bluetooth: hci1: command 0x041b tx timeout
[   89.464960] Bluetooth: hci6: command 0x041b tx timeout
[   89.466440] Bluetooth: hci7: command 0x041b tx timeout
[   89.468887] Bluetooth: hci5: command 0x041b tx timeout
[   91.320821] Bluetooth: hci0: command 0x040f tx timeout
[   91.448878] Bluetooth: hci1: command 0x040f tx timeout
[   91.449512] Bluetooth: hci2: command 0x040f tx timeout
[   91.450116] Bluetooth: hci3: command 0x040f tx timeout
[   91.450668] Bluetooth: hci4: command 0x040f tx timeout
[   91.512804] Bluetooth: hci5: command 0x040f tx timeout
[   91.513416] Bluetooth: hci7: command 0x040f tx timeout
[   91.514120] Bluetooth: hci6: command 0x040f tx timeout
[   93.368847] Bluetooth: hci0: command 0x0419 tx timeout
[   93.496823] Bluetooth: hci4: command 0x0419 tx timeout
[   93.497444] Bluetooth: hci3: command 0x0419 tx timeout
[   93.498408] Bluetooth: hci2: command 0x0419 tx timeout
[   93.500102] Bluetooth: hci1: command 0x0419 tx timeout
[   93.560839] Bluetooth: hci6: command 0x0419 tx timeout
[   93.561558] Bluetooth: hci7: command 0x0419 tx timeout
[   93.562166] Bluetooth: hci5: command 0x0419 tx timeout
[  100.463078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.463994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.465622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  100.516230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.517161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.518222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  100.589405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.591057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.594214] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  100.652317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.653948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.660363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  100.681700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.683319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.690356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  100.696679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.697618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.698963] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  100.756992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.758308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.759748] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  100.770045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.771991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.775551] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  100.956238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.958508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.962500] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  100.980613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.982218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.983921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.984847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.988058] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  100.990970] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
12:36:36 executing program 6:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000))

[  101.075991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.077592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.083888] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  101.092135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.093929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.097471] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  101.100922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.102646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
12:36:36 executing program 7:
mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0)
io_setup(0x5, &(0x7f0000000000)=<r0=>0x0)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0x7fff, r1, 0x0, 0x0, 0x0, 0x0, 0x2}])

[  101.122369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
12:36:36 executing program 6:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000))

[  101.203108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.204039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.205689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
12:36:36 executing program 6:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000))

12:36:36 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='fd\x00')
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/key-users\x00', 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r3, 0x0, 0x0, 0x0, &(0x7f0000000040))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r4=>0x0}], 0x4, "9755154351ac9a"})
ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000001740)={r4, 0x10000000004e})
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000002c0)=0x1)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000005c0), 0x404201, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
pselect6(0x40, &(0x7f0000000180), &(0x7f00000000c0)={0x3ff}, 0x0, 0x0, 0x0)

12:36:36 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r0, 0x0)
dup2(r2, r1)

[  101.329433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.331150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
12:36:36 executing program 6:
syz_mount_image$nfs4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{0x0}], 0x0, &(0x7f0000000380)={[{'.'}, {'\x00'}, {'%}&)(\\@[\x94(]('}], [{@obj_user={'obj_user', 0x3d, '\\+#[*^\'}$]{(*U%[/'}}, {@dont_appraise}, {@measure}, {@context={'context', 0x3d, 'system_u'}}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@pcr}, {@dont_appraise}, {@obj_user={'obj_user', 0x3d, '\x00'}}]})
fork()
statx(0xffffffffffffffff, &(0x7f000000a5c0)='./file0\x00', 0x0, 0x200, 0x0)

[  101.336857] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  101.375980] audit: type=1400 audit(1636115796.459:7): avc:  denied  { open } for  pid=3915 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  101.380558] audit: type=1400 audit(1636115796.459:8): avc:  denied  { kernel } for  pid=3915 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
12:36:36 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000540)={0x0, 0x0, 0x2, 0x300, 0x0, &(0x7f0000000140)="16d0f91ef6efe0ee5891cdf6dd2c52d37283fae246c5d7339c37256c7b56004559ac665c3133508c6990c1f77c2e062ead7b3398bc74c958fc6129a11b3b606a69dc4fc555100e69d966dc6cd32b38bc2b7617e296d392e35848aa37d3e5a97b581005cea358ad89c61edb5975695ffff3b698679989e688a0a2a131304e580a5b38fb66e287500c67cfa0d15772bcd0227077a606fd7df898b22c4c6873a9d9e0084b838971433b4f7cafad39df60cdd901d20f4ba17d8f5c934af0151a485afa64a071e879eaf11b4f60b97e9f19979e89d5db88cddc611e9b0989e883d592def8d5bbacee98428412715baaee7ea5d988fa6c4a302e9e417cc00e682c7e84f7ccec457644593668aaf0c83a520104624d669fc730ce85c22fa382970c09417e7672eebd37bfb7516293f4be34e90a70e2cb41b2a52b3f81a0bea9951ab603c4e18776c233b016403cf2e3bbe83e8143675c898c079c714528b8adafb7f74cf100ab82e7fc60c769154f45b54b7b94d10bc5bd7f2273fd3695328ee1a289d4afeae289104efb98305edb66618d4d94bc7334e735fd8addf770e852a5402a1bc6b6621ec3058569ee55ebe9aed36b7898707622ea80c48706dc012af203c850ad048927292a5dd5092ca320204f78f88e2accaca4bc138a9d6566158f084bb8e2ad0b3113990ac9577cd18eb07f9ab595ced6af7c853ca04de961fea31fd68783485cdce4a5d0573b2a9c94b8ce17fe1e1ddf78a0290a27a99a309f6c252a1eb7d44bdc5a406b25d34ed272e2e210fd05b0c142b2d01ce6329797855e475487099e48d4a8804b1eb6a233cd1973503d69ce4bfd89c876439261b9a32c91b354513d8552796cf5f403131f95d9028b6acfebe2f148be30fcff8e81cb9cb690d4413767f6f1cfaedc8ef78daebde7d13650e2829efdd9a7f7fa5900f6a1c1f8b6700b3989f743666443d3ddbb7ddefd5692dd99f8f156e8deb1998cbece574ec4899d3e197b980a8ba6e23676945203bb06456b22b010b3fd77ab5dd46f785ad4308991ae33f4c87b5a3e37be874cd96e285954112f9092a37b83c9390259597abde0525f21bfc08b1dfc979ade03ecb0895657a87d62342dea851bb1ae01291162be8fc7f28a1a25770953ae3e86bcc8a78dafd4aa37a28ac0ddd8bbf5b775eff6da6c6e314a12a0f9a4f34273dcec2d0f040b9304d71f8d9b76b09cf997f8480a5514c141e3ffdeee8329f3f62d9616a1b8dc4d8247f2b824a695b7a2e34309e042d9a0290876815f938340ff86c001b70c78199c1c0f307d4da122c974eb9617d75845d1adefe734ec3cbbdfe0433b1ecc94c69194b5ac8dfb808c72742aee563d6080f5521e52f301df42094aec20cf4e5bbe3bee954020d87018191d26b2a6e8ce7b71aba9e35c5311bf61bc0c16486570c6acbed2c0eb4290dcfeb2679f"})

[  101.485187] audit: type=1400 audit(1636115796.569:9): avc:  denied  { write } for  pid=3935 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
12:36:36 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2044034, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x800}}]})

12:36:36 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='fd\x00')
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/key-users\x00', 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r3, 0x0, 0x0, 0x0, &(0x7f0000000040))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r4=>0x0}], 0x4, "9755154351ac9a"})
ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000001740)={r4, 0x10000000004e})
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000002c0)=0x1)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000005c0), 0x404201, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
pselect6(0x40, &(0x7f0000000180), &(0x7f00000000c0)={0x3ff}, 0x0, 0x0, 0x0)

12:36:36 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f00000000c0))

12:36:36 executing program 2:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40011, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000012c00)=ANY=[])
chdir(&(0x7f0000000180)='./file0\x00')
mkdir(&(0x7f0000000000)='./file1\x00', 0x3)
rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)='./file0\x00')

12:36:36 executing program 1:
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
syz_io_uring_setup(0x6894, &(0x7f0000000e40), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000ec0), &(0x7f0000000f00))
sched_getaffinity(0x0, 0x8, &(0x7f0000001040))

12:36:36 executing program 4:
r0 = creat(&(0x7f00000021c0)='./file0\x00', 0x0)
sendmsg$NL80211_CMD_SET_WOWLAN(r0, 0x0, 0x20000000)

12:36:36 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x191140, 0x0)
perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

12:36:36 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='fd\x00')
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/key-users\x00', 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r3, 0x0, 0x0, 0x0, &(0x7f0000000040))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r4=>0x0}], 0x4, "9755154351ac9a"})
ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000001740)={r4, 0x10000000004e})
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000002c0)=0x1)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000005c0), 0x404201, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
pselect6(0x40, &(0x7f0000000180), &(0x7f00000000c0)={0x3ff}, 0x0, 0x0, 0x0)

[  101.670407] EXT4-fs (sda): re-mounted. Opts: commit=0x0000000000000800,,errors=continue
[  101.687803] EXT4-fs (sda): re-mounted. Opts: commit=0x0000000000000800,,errors=continue
[  101.826085] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
12:36:37 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2044034, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x800}}]})

12:36:37 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='fd\x00')
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/key-users\x00', 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r3, 0x0, 0x0, 0x0, &(0x7f0000000040))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r4=>0x0}], 0x4, "9755154351ac9a"})
ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000001740)={r4, 0x10000000004e})
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000002c0)=0x1)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000005c0), 0x404201, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
pselect6(0x40, &(0x7f0000000180), &(0x7f00000000c0)={0x3ff}, 0x0, 0x0, 0x0)

12:36:37 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'sit0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@private0, @loopback, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400022, r2})

12:36:37 executing program 4:
syz_io_uring_setup(0x2aef, &(0x7f00000025c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000002640), &(0x7f0000002680))

12:36:37 executing program 2:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40011, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000012c00)=ANY=[])
chdir(&(0x7f0000000180)='./file0\x00')
mkdir(&(0x7f0000000000)='./file1\x00', 0x3)
rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)='./file0\x00')

12:36:37 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f00000000c0))

12:36:37 executing program 3:
mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3)

12:36:37 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='fd\x00')
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/key-users\x00', 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r3, 0x0, 0x0, 0x0, &(0x7f0000000040))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r4=>0x0}], 0x4, "9755154351ac9a"})
ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000001740)={r4, 0x10000000004e})
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000002c0)=0x1)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000005c0), 0x404201, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
pselect6(0x40, &(0x7f0000000180), &(0x7f00000000c0)={0x3ff}, 0x0, 0x0, 0x0)

[  102.024902] EXT4-fs (sda): re-mounted. Opts: commit=0x0000000000000800,,errors=continue
12:36:37 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='fd\x00')
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/key-users\x00', 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r3, 0x0, 0x0, 0x0, &(0x7f0000000040))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r4=>0x0}], 0x4, "9755154351ac9a"})
ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000001740)={r4, 0x10000000004e})
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000002c0)=0x1)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000005c0), 0x404201, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
pselect6(0x40, &(0x7f0000000180), &(0x7f00000000c0)={0x3ff}, 0x0, 0x0, 0x0)

12:36:37 executing program 4:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40011, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000012c00)=ANY=[])
chdir(&(0x7f0000000180)='./file0\x00')
mkdir(&(0x7f0000000000)='./file1\x00', 0x3)
rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)='./file0\x00')

12:36:37 executing program 3:
mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3)

12:36:37 executing program 1:
r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

12:36:37 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2044034, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x800}}]})

12:36:37 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='fd\x00')
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/key-users\x00', 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0)
mq_timedsend(r3, 0x0, 0x0, 0x0, &(0x7f0000000040))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r4=>0x0}], 0x4, "9755154351ac9a"})
ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000001740)={r4, 0x10000000004e})
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000002c0)=0x1)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000005c0), 0x404201, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
pselect6(0x40, &(0x7f0000000180), &(0x7f00000000c0)={0x3ff}, 0x0, 0x0, 0x0)

12:36:37 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f00000000c0))

[  102.382477] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
12:36:37 executing program 3:
mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3)

[  102.437822] EXT4-fs (sda): re-mounted. Opts: commit=0x0000000000000800,,errors=continue
12:36:37 executing program 2:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40011, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000012c00)=ANY=[])
chdir(&(0x7f0000000180)='./file0\x00')
mkdir(&(0x7f0000000000)='./file1\x00', 0x3)
rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)='./file0\x00')

12:36:37 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000001cc0)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000001200)=[@dstopts_2292={{0x11}}, @dstopts_2292={{0x18}}], 0x30}}], 0x2, 0x0)

12:36:37 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2044034, &(0x7f0000000080)={[{@commit={'commit', 0x3d, 0x800}}]})

[  102.489223] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[  102.635578] EXT4-fs (sda): re-mounted. Opts: commit=0x0000000000000800,,errors=continue
[  102.656328] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
12:36:37 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f00000002c0))

12:36:37 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f00000000c0))

12:36:37 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={0x14, 0x52, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x4)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10002, &(0x7f0000005000)={0x0, 0x989680})
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)

12:36:37 executing program 4:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40011, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000012c00)=ANY=[])
chdir(&(0x7f0000000180)='./file0\x00')
mkdir(&(0x7f0000000000)='./file1\x00', 0x3)
rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)='./file0\x00')

12:36:37 executing program 3:
mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3)

12:36:37 executing program 2:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40011, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000012c00)=ANY=[])
chdir(&(0x7f0000000180)='./file0\x00')
mkdir(&(0x7f0000000000)='./file1\x00', 0x3)
rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)='./file0\x00')

12:36:37 executing program 0:
openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x181800, 0x0)

12:36:37 executing program 7:
syz_io_uring_setup(0x2aa7, &(0x7f0000000780), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000000800), &(0x7f0000000840))

[  102.786719] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
12:36:37 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL={0xe, 0x6}, 0x0)
io_uring_enter(r0, 0x2fd1, 0x0, 0x0, 0x0, 0x0)

12:36:37 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x1a, 0x101, 0x0, 0x0, {}, [@generic="7b828f25ec5b"]}, 0x1c}}, 0x0)

12:36:37 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x11, &(0x7f00000010c0)={@empty}, 0x14)

12:36:37 executing program 7:
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e22}, 0x6e)

12:36:37 executing program 3:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={0x0}}, 0x0)

12:36:37 executing program 0:
syz_mount_image$nfs4(0x0, &(0x7f0000001600)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x81000000)

12:36:37 executing program 4:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40011, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000012c00)=ANY=[])
chdir(&(0x7f0000000180)='./file0\x00')
mkdir(&(0x7f0000000000)='./file1\x00', 0x3)
rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)='./file0\x00')

[  102.886947] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[  103.131905] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
12:36:38 executing program 6:
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0xb992a3e70a3bf215)

12:36:38 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL={0xe, 0x6}, 0x0)
io_uring_enter(r0, 0x2fd1, 0x0, 0x0, 0x0, 0x0)

12:36:38 executing program 0:
prctl$PR_GET_NAME(0x2a, &(0x7f0000000700)=""/125)

12:36:38 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

12:36:38 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff)

12:36:38 executing program 7:
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0)
io_setup(0x1, &(0x7f0000000080))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)

[  103.274434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
12:36:38 executing program 2:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0)

12:36:38 executing program 4:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$RNDGETENTCNT(r0, 0x40085203, &(0x7f0000007840))

12:36:38 executing program 5:
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = dup2(r0, r0)
ioctl$TCXONC(r1, 0x4b45, 0x1000000)

12:36:38 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
stat(&(0x7f0000001880)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(0xffffffffffffffff, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000a40), 0x4)

[  103.602670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
12:36:38 executing program 2:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000380)=ANY=[@ANYBLOB='l'], 0xec, 0x0)
msgsnd(r0, &(0x7f00000006c0)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000700)={0x0, ""/4096}, 0x1008, 0xde9a3e1aad67db98, 0x0)

12:36:38 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$clear(0xf, r0)

12:36:38 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL={0xe, 0x6}, 0x0)
io_uring_enter(r0, 0x2fd1, 0x0, 0x0, 0x0, 0x0)

12:36:38 executing program 0:
syz_io_uring_setup(0x3770, &(0x7f0000000780), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000800), &(0x7f0000000840))

12:36:38 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000400), &(0x7f0000000440)=0x4)

12:36:38 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
stat(&(0x7f0000001880)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(0xffffffffffffffff, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000a40), 0x4)

12:36:38 executing program 7:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_script(r0, 0x0, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x4094)
syz_open_dev$sg(&(0x7f0000002f80), 0x3f, 0x0)
execveat(0xffffffffffffffff, &(0x7f00000030c0)='./file1\x00', &(0x7f0000003280)=[&(0x7f0000003140)='/dev/sg#\x00', 0x0], 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSARP(r1, 0x8955, 0x0)
acct(&(0x7f0000003980)='./file2\x00')

12:36:38 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)

12:36:38 executing program 1:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL={0xe, 0x6}, 0x0)
io_uring_enter(r0, 0x2fd1, 0x0, 0x0, 0x0, 0x0)

12:36:38 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
stat(&(0x7f0000001880)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(0xffffffffffffffff, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000a40), 0x4)

12:36:38 executing program 5:
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000001c0)=@device_b, 0x0, 0x0)
add_key$fscrypt_v1(&(0x7f0000003ac0), 0x0, &(0x7f0000003b40)={0x0, "08c580cf3755e4a9f558ca7333f23f1c63d472f0f70b936a681062b68ec21bc0b2444b58909735913e8a1b54b92d70f9d2cf66977c724ea5c395132caaf279dd"}, 0x48, 0xfffffffffffffffe)

12:36:38 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000400), &(0x7f0000000440)=0x4)

12:36:38 executing program 0:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x88041, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, 0x0, 0x0)

12:36:38 executing program 6:
getgroups(0xfffffffffffffe0f, 0x0)

12:36:38 executing program 2:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000380)=ANY=[@ANYBLOB='l'], 0xec, 0x0)
msgsnd(r0, &(0x7f00000006c0)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000700)={0x0, ""/4096}, 0x1008, 0xde9a3e1aad67db98, 0x0)

12:36:38 executing program 7:
r0 = socket$packet(0x11, 0x2, 0x300)
accept(r0, 0x0, 0x0)

12:36:39 executing program 1:
r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$invalidate(0x15, r0)

[  103.988320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
12:36:39 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
stat(&(0x7f0000001880)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(0xffffffffffffffff, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000a40), 0x4)

12:36:39 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000400), &(0x7f0000000440)=0x4)

12:36:39 executing program 2:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000380)=ANY=[@ANYBLOB='l'], 0xec, 0x0)
msgsnd(r0, &(0x7f00000006c0)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000700)={0x0, ""/4096}, 0x1008, 0xde9a3e1aad67db98, 0x0)

12:36:39 executing program 6:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0)
fcntl$setlease(r0, 0x400, 0x1)
fcntl$getownex(r0, 0x10, &(0x7f0000000180))
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)

12:36:39 executing program 7:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

12:36:40 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000470000004f8010020004000030000000000000080002916eb61f153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8fffffff0ffffffffffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8fffffff0ffffffffffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="f8fffffff0ffffffffffffff00"/32, 0x20, 0x600}, {&(0x7f0000010400)="f8fffffff0ffffffffffffff00"/32, 0x20, 0x800}, {&(0x7f0000010500)="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", 0x120, 0xa00}, {&(0x7f0000010700)="2e2020202020202020202010002ce970325132510000e97032510300000000002e2e20202020202020202010002ce970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202020002ce970325132510000e970325104001a040000", 0x80, 0x11800}, {&(0x7f0000010800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x21800}, {&(0x7f0000010d00)='syzkallers\x00'/32, 0x20, 0x31800}, {&(0x7f0000010e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x51800}], 0x0, &(0x7f0000010f00))

12:36:40 executing program 2:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000380)=ANY=[@ANYBLOB='l'], 0xec, 0x0)
msgsnd(r0, &(0x7f00000006c0)={0x1}, 0x8, 0x0)
msgrcv(r0, &(0x7f0000000700)={0x0, ""/4096}, 0x1008, 0xde9a3e1aad67db98, 0x0)

12:36:40 executing program 1:
move_pages(0x0, 0x1, &(0x7f0000001880)=[&(0x7f0000ffa000/0x4000)=nil], &(0x7f00000018c0), &(0x7f0000001900), 0x0)

12:36:40 executing program 6:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0)
fcntl$setlease(r0, 0x400, 0x1)
fcntl$getownex(r0, 0x10, &(0x7f0000000180))
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)

12:36:40 executing program 3:
socket$inet6_icmp_raw(0xa, 0x3, 0x87)

12:36:40 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000400), &(0x7f0000000440)=0x4)

12:36:40 executing program 7:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000), 0x8)

12:36:40 executing program 5:
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000000)={{}, 'port1\x00', 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x80})
openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$tcp_mem(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x20, 0x4}, 0x48)
socket(0xf, 0x3, 0x200)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x29, 0x5, 0x3a9)

12:36:40 executing program 6:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0)
fcntl$setlease(r0, 0x400, 0x1)
fcntl$getownex(r0, 0x10, &(0x7f0000000180))
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)

12:36:40 executing program 3:
pselect6(0x0, 0x0, &(0x7f0000001e40), &(0x7f0000001e80), 0x0, 0x0)

12:36:40 executing program 7:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x300000a, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@local, 0x0, 0x33}, @in=@private, {}, {}, {}, 0x2, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}]}, 0x13c}}, 0x0)

12:36:40 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="0a0018"], 0x4c}}, 0x0)

12:36:40 executing program 1:
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
semop(0x0, &(0x7f00000000c0)=[{0x2, 0x7fff}, {0x2, 0xc575, 0x1800}, {0x2, 0x3ff}], 0x3)
unshare(0x40000)

12:36:40 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x0)
io_setup(0x81, &(0x7f0000000480)=<r1=>0x0)
r2 = eventfd(0x0)
io_submit(r1, 0x3, &(0x7f0000002b40)=[&(0x7f0000001700)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f0000001600), 0x0, 0x0, 0x0, 0x1, r2}, 0x0, 0x0])

12:36:40 executing program 5:
mlock2(&(0x7f0000ba0000/0x3000)=nil, 0x3000, 0x0)
mlock(&(0x7f0000cfe000/0x2000)=nil, 0x2000)
mremap(&(0x7f0000ba0000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000c77000/0x2000)=nil)

12:36:40 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}})
r3 = fork()
tkill(r3, 0x1)
openat(r0, &(0x7f0000000300)='./file1\x00', 0x4000, 0x90)
wait4(r3, &(0x7f0000000040), 0x20000000, 0x0)
io_setup(0x5, &(0x7f0000000080)=<r4=>0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44400)
io_submit(r4, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x4000}])

[  105.639826] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'.
[  105.696048] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'.
12:36:40 executing program 6:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0)
fcntl$setlease(r0, 0x400, 0x1)
fcntl$getownex(r0, 0x10, &(0x7f0000000180))
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)

12:36:40 executing program 2:
clone3(&(0x7f0000000c00)={0x1806c0000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[0xffffffffffffffff], 0x1}, 0x58)

12:36:40 executing program 5:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00')
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)

12:36:40 executing program 1:
shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)

12:36:40 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha3-256\x00'}, 0xfcf3}}]}, 0x138}}, 0x0)

12:36:40 executing program 7:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x300000a, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@local, 0x0, 0x33}, @in=@private, {}, {}, {}, 0x2, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}]}, 0x13c}}, 0x0)

12:36:41 executing program 6:
mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$LOOP_SET_STATUS(r0, 0x127f, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "200b45308126f4d56bd2ba158d4c64e1f35cac77c8e818b6a5589e4a69395a5223db6b4323e0b29fbabe9086f118426282567feda8dba320d292f4ebefe64e99", "0a646610847852624bde09525bf1c35930ac1d9247664c1420b156a2ac400377"})

12:36:41 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}})
r3 = fork()
tkill(r3, 0x1)
openat(r0, &(0x7f0000000300)='./file1\x00', 0x4000, 0x90)
wait4(r3, &(0x7f0000000040), 0x20000000, 0x0)
io_setup(0x5, &(0x7f0000000080)=<r4=>0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44400)
io_submit(r4, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x4000}])

12:36:41 executing program 4:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue1\x00'})

12:36:41 executing program 6:
prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0)

12:36:41 executing program 7:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x300000a, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@local, 0x0, 0x33}, @in=@private, {}, {}, {}, 0x2, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}]}, 0x13c}}, 0x0)

12:36:41 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00')
preadv(r1, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1, 0x0, 0x0)

12:36:41 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x1480}, {&(0x7f0000011000)="ed41000000040000def4655fdef4655fdef4655f00000000000002002000000000000800030000000af301000400000000000000000000000100000050", 0x3d, 0x1980}, {&(0x7f0000011300)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x4000}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[])
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x200)

12:36:41 executing program 2:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000380)={0x121840300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0xffffffffffffffff], 0x1}, 0x58)

12:36:41 executing program 5:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00')
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)

12:36:41 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x24, 0x24, 0xc21, 0x0, 0x0, {}, [@generic="4dbabd5796ae3bb7ac14782ba2"]}, 0x24}}, 0x0)

12:36:41 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}})
r3 = fork()
tkill(r3, 0x1)
openat(r0, &(0x7f0000000300)='./file1\x00', 0x4000, 0x90)
wait4(r3, &(0x7f0000000040), 0x20000000, 0x0)
io_setup(0x5, &(0x7f0000000080)=<r4=>0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44400)
io_submit(r4, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x4000}])

12:36:41 executing program 7:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x300000a, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@local, 0x0, 0x33}, @in=@private, {}, {}, {}, 0x2, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}]}, 0x13c}}, 0x0)

12:36:41 executing program 5:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00')
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)

12:36:41 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000000)={[{@shortname_winnt}]})
chdir(&(0x7f0000000040)='./file0\x00')
creat(&(0x7f0000000940)='./file0\x00', 0x0)

12:36:41 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}})
r3 = fork()
tkill(r3, 0x1)
openat(r0, &(0x7f0000000300)='./file1\x00', 0x4000, 0x90)
wait4(r3, &(0x7f0000000040), 0x20000000, 0x0)
io_setup(0x5, &(0x7f0000000080)=<r4=>0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44400)
io_submit(r4, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x4000}])

12:36:41 executing program 1:
clone3(&(0x7f0000000240)={0x1c0002100, 0x0, 0x0, &(0x7f0000000080), {0x31}, &(0x7f00000000c0)=""/16, 0x10, &(0x7f0000000100)=""/150, &(0x7f00000001c0)=[0x0], 0x1}, 0x58)

[  106.642153] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[  106.643239] ext4 filesystem being mounted at /syzkaller-testdir450683283/syzkaller.oqnJN6/14/file0 supports timestamps until 2038 (0x7fffffff)
12:36:41 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x0)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000140)=0x5)
read$char_usb(r0, 0x0, 0x0)

12:36:41 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x1480}, {&(0x7f0000011000)="ed41000000040000def4655fdef4655fdef4655f00000000000002002000000000000800030000000af301000400000000000000000000000100000050", 0x3d, 0x1980}, {&(0x7f0000011300)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x4000}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[])
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x200)

12:36:41 executing program 3:
setpriority(0x2, 0x0, 0x8)

12:36:41 executing program 7:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@allocspi={0xf8, 0x16, 0xf01, 0x0, 0x0, {{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private0, 0x0, 0x33}, @in6=@local}, 0x0, 0xffffffff}}, 0xf8}}, 0x0)

12:36:41 executing program 2:
syz_emit_ethernet(0x4e, &(0x7f0000000100)={@link_local, @random="4aff7639422a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96fc43", 0x18, 0x3a, 0x0, @empty, @mcast2, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @mcast1}}}}}}, 0x0)

12:36:41 executing program 5:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00')
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)

[  106.860515] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[  106.861695] ext4 filesystem being mounted at /syzkaller-testdir450683283/syzkaller.oqnJN6/15/file0 supports timestamps until 2038 (0x7fffffff)
[  106.922882] EXT4-fs error (device loop4): ext4_empty_dir:2881: inode #12: block 80: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0, size=1024
[  106.941326] EXT4-fs warning (device loop4): ext4_empty_dir:2884: inode #12: comm syz-executor.4: directory missing '.'
[  106.943772] EXT4-fs error (device loop4): ext4_validate_block_bitmap:398: comm syz-executor.4: bg 0: block 3: invalid block bitmap
[  106.946613] EXT4-fs error (device loop4) in ext4_free_blocks:5528: Corrupt filesystem
[  106.951538] EXT4-fs error (device loop4): ext4_free_inode:353: comm syz-executor.4: bit already cleared for inode 12
12:36:42 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, "0000f0000000000300"})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000000c0))

12:36:42 executing program 7:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe20, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)

12:36:42 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x1480}, {&(0x7f0000011000)="ed41000000040000def4655fdef4655fdef4655f00000000000002002000000000000800030000000af301000400000000000000000000000100000050", 0x3d, 0x1980}, {&(0x7f0000011300)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x4000}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[])
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x200)

12:36:42 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0x0)

12:36:42 executing program 1:
clone3(&(0x7f0000000240)={0x1c0002100, 0x0, 0x0, &(0x7f0000000080), {0x31}, &(0x7f00000000c0)=""/16, 0x10, &(0x7f0000000100)=""/150, &(0x7f00000001c0)=[0x0], 0x1}, 0x58)

12:36:42 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000140)={0x0, 0x533f}, 0x8)

12:36:42 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@nested={0x4}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x8, 0x13, 0x0, 0x0, @fd}]}, 0x28}}, 0x0)

12:36:42 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
close(r0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

12:36:42 executing program 7:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, 0x0)

12:36:42 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed41000000080000dff4655fe0f4655fe0f4655f0000000000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)

[  107.260899] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[  107.264332] ext4 filesystem being mounted at /syzkaller-testdir450683283/syzkaller.oqnJN6/16/file0 supports timestamps until 2038 (0x7fffffff)
[  107.276522] EXT4-fs error (device loop4): ext4_empty_dir:2881: inode #12: block 80: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0, size=1024
12:36:42 executing program 1:
clone3(&(0x7f0000000240)={0x1c0002100, 0x0, 0x0, &(0x7f0000000080), {0x31}, &(0x7f00000000c0)=""/16, 0x10, &(0x7f0000000100)=""/150, &(0x7f00000001c0)=[0x0], 0x1}, 0x58)

12:36:42 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, "0000f0000000000300"})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000000c0))

[  107.285262] EXT4-fs warning (device loop4): ext4_empty_dir:2884: inode #12: comm syz-executor.4: directory missing '.'
[  107.293379] EXT4-fs error (device loop4): ext4_validate_block_bitmap:398: comm syz-executor.4: bg 0: block 3: invalid block bitmap
[  107.298730] EXT4-fs error (device loop4) in ext4_free_blocks:5528: Corrupt filesystem
[  107.300963] audit: type=1326 audit(1636115802.383:10): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4332 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466609 code=0x0
[  107.310130] EXT4-fs error (device loop4): ext4_free_inode:353: comm syz-executor.4: bit already cleared for inode 12
12:36:42 executing program 4:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x1480}, {&(0x7f0000011000)="ed41000000040000def4655fdef4655fdef4655f00000000000002002000000000000800030000000af301000400000000000000000000000100000050", 0x3d, 0x1980}, {&(0x7f0000011300)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x4000}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000012b00)=ANY=[])
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x200)

12:36:42 executing program 7:
add_key$user(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff)
setgid(0xee01)

12:36:42 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00')
pread64(r0, &(0x7f0000000000)=""/55, 0x37, 0x10001)

[  107.439367] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
12:36:42 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, "0000f0000000000300"})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000000c0))

[  107.526267] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[  107.564883] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[  107.566360] ext4 filesystem being mounted at /syzkaller-testdir450683283/syzkaller.oqnJN6/17/file0 supports timestamps until 2038 (0x7fffffff)
[  107.574046] EXT4-fs error (device loop4): ext4_empty_dir:2881: inode #12: block 80: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0, size=1024
[  107.590801] EXT4-fs warning (device loop4): ext4_empty_dir:2884: inode #12: comm syz-executor.4: directory missing '.'
[  107.597136] EXT4-fs error (device loop4): ext4_validate_block_bitmap:398: comm syz-executor.4: bg 0: block 3: invalid block bitmap
[  107.603822] EXT4-fs error (device loop4) in ext4_free_blocks:5528: Corrupt filesystem
[  107.609833] EXT4-fs error (device loop4): ext4_free_inode:353: comm syz-executor.4: bit already cleared for inode 12
[  108.082186] audit: type=1326 audit(1636115803.166:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4332 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466609 code=0x0
12:36:43 executing program 1:
clone3(&(0x7f0000000240)={0x1c0002100, 0x0, 0x0, &(0x7f0000000080), {0x31}, &(0x7f00000000c0)=""/16, 0x10, &(0x7f0000000100)=""/150, &(0x7f00000001c0)=[0x0], 0x1}, 0x58)

12:36:43 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed41000000080000dff4655fe0f4655fe0f4655f0000000000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)

12:36:43 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed41000000080000dff4655fe0f4655fe0f4655f0000000000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)

12:36:43 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0x0)

12:36:43 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f95010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="01", 0x1, 0x800}], 0x0, &(0x7f0000012f00))

12:36:43 executing program 6:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7, "0000f0000000000300"})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000000c0))

12:36:43 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
close(r0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

12:36:43 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000100))

[  108.309364] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  108.310498] EXT4-fs (loop2): group descriptors corrupted!
12:36:43 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
close(r0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

[  108.345946] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[  108.350774] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
12:36:43 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed41000000080000dff4655fe0f4655fe0f4655f0000000000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)

[  108.395444] audit: type=1326 audit(1636115803.478:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4392 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466609 code=0x0
12:36:43 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000100))

[  108.526516] audit: type=1326 audit(1636115803.610:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4396 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466609 code=0x0
12:36:43 executing program 1:
syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)

12:36:43 executing program 6:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000340)=0x1000, 0x4)
open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x1000)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x2, 0x0, 0x0)
fallocate(r1, 0x0, 0x0, 0x8800000)
pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0)
lseek(r1, 0x0, 0x4)

12:36:43 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed41000000080000dff4655fe0f4655fe0f4655f0000000000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)

12:36:43 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0x0)

[  108.615685] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[  108.708382] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
[  109.325399] syz-executor.6 (4409) used greatest stack depth: 24400 bytes left
12:36:44 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000100))

12:36:44 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0)
umount2(&(0x7f0000000080)='./file0\x00', 0x0)

12:36:44 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
close(r0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

12:36:44 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed41000000080000dff4655fe0f4655fe0f4655f0000000000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)

12:36:44 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
close(r0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

12:36:44 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="2000000000000082"], 0x108)
setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0)

12:36:44 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed41000000080000dff4655fe0f4655fe0f4655f0000000000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[])
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)

12:36:44 executing program 6:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000340)=0x1000, 0x4)
open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x1000)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x2, 0x0, 0x0)
fallocate(r1, 0x0, 0x0, 0x8800000)
pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0)
lseek(r1, 0x0, 0x4)

[  109.388615] audit: type=1326 audit(1636115804.472:14): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4420 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466609 code=0x0
12:36:44 executing program 1:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000340)=0x1000, 0x4)
open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x1000)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x2, 0x0, 0x0)
fallocate(r1, 0x0, 0x0, 0x8800000)
pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0)
lseek(r1, 0x0, 0x4)

[  109.444580] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
[  109.462597] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[  109.467560] audit: type=1326 audit(1636115804.551:15): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4435 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466609 code=0x0
12:36:44 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000100))

12:36:44 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)

12:36:44 executing program 7:
execveat(0xffffffffffffffff, &(0x7f0000001f40)='./file1\x00', 0x0, &(0x7f0000002300), 0x0)

12:36:44 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x1000003)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0)

[  110.205482] syz-executor.0 (4454) used greatest stack depth: 23808 bytes left
12:36:45 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x1000003)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0)

12:36:45 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000140)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYRESOCT])

12:36:45 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f80100200040000000000000000000800029e3286cf153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8fffffff0ffffffff078000ffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8fffffff0ffffffff078000ffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="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", 0x120, 0x600}, {&(0x7f0000010500)="2e20202020202020202020100094e970325132510000e97032510300000000002e2e202020202020202020100094e970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200094e970325132510000e970325104001a040000", 0x80, 0x2400}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x3400}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x4400}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x8400}], 0x0, &(0x7f0000010d00))

12:36:45 executing program 6:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000340)=0x1000, 0x4)
open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x1000)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x2, 0x0, 0x0)
fallocate(r1, 0x0, 0x0, 0x8800000)
pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0)
lseek(r1, 0x0, 0x4)

12:36:45 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
close(r0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

12:36:45 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x1000003)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0)

12:36:45 executing program 1:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000340)=0x1000, 0x4)
open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x1000)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x2, 0x0, 0x0)
fallocate(r1, 0x0, 0x0, 0x8800000)
pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0)
lseek(r1, 0x0, 0x4)

12:36:45 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
close(r0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

[  110.546622] audit: type=1326 audit(1636115805.630:16): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4457 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466609 code=0x0
[  110.564093] audit: type=1326 audit(1636115805.648:17): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4459 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466609 code=0x0
12:36:45 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f80100200040000000000000000000800029e3286cf153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8fffffff0ffffffff078000ffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8fffffff0ffffffff078000ffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="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", 0x120, 0x600}, {&(0x7f0000010500)="2e20202020202020202020100094e970325132510000e97032510300000000002e2e202020202020202020100094e970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200094e970325132510000e970325104001a040000", 0x80, 0x2400}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x3400}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x4400}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x8400}], 0x0, &(0x7f0000010d00))

[  110.677459] tmpfs: Bad value for 'gid'
[  110.700416] tmpfs: Bad value for 'gid'
12:36:45 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f80100200040000000000000000000800029e3286cf153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8fffffff0ffffffff078000ffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8fffffff0ffffffff078000ffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="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", 0x120, 0x600}, {&(0x7f0000010500)="2e20202020202020202020100094e970325132510000e97032510300000000002e2e202020202020202020100094e970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200094e970325132510000e970325104001a040000", 0x80, 0x2400}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x3400}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x4400}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x8400}], 0x0, &(0x7f0000010d00))

12:36:45 executing program 3:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x1000003)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0)

12:36:45 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f80100200040000000000000000000800029e3286cf153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8fffffff0ffffffff078000ffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8fffffff0ffffffff078000ffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="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", 0x120, 0x600}, {&(0x7f0000010500)="2e20202020202020202020100094e970325132510000e97032510300000000002e2e202020202020202020100094e970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200094e970325132510000e970325104001a040000", 0x80, 0x2400}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x3400}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x4400}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x8400}], 0x0, &(0x7f0000010d00))

[  110.961614] syz-executor.0 (4470) used greatest stack depth: 23576 bytes left
12:36:46 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x1000003)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0)

12:36:46 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x1000003)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0)

12:36:46 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x1000003)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0)

12:36:46 executing program 2:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0)

12:36:46 executing program 5:
clock_adjtime(0x0, &(0x7f0000000100)={0x136f28b7, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6})

12:36:46 executing program 2:
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
socket$packet(0x11, 0x2, 0x300)
unshare(0x62040080)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x0)
copy_file_range(r0, 0x0, r3, &(0x7f00000001c0), 0x0, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x2a, 0x0, "4c774fc207b2764cc639d766f1a8bf75fa858b606ad21530ecaf8b152bc099032178945d2ed02d555131e75488a37329ea68553a3c06f898b0415d06e9edb87c74d7bb428a4657b3929ce7c15f973a5f"}, 0xd8)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendfile(r2, r1, 0x0, 0x9bbb)
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000004200))

12:36:46 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x1000003)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0)

12:36:46 executing program 6:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000340)=0x1000, 0x4)
open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x1000)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x2, 0x0, 0x0)
fallocate(r1, 0x0, 0x0, 0x8800000)
pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0)
lseek(r1, 0x0, 0x4)

12:36:46 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x1000003)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0)

12:36:46 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0))

12:36:46 executing program 1:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000340)=0x1000, 0x4)
open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x1000)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x2, 0x0, 0x0)
fallocate(r1, 0x0, 0x0, 0x8800000)
pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0)
lseek(r1, 0x0, 0x4)

12:36:47 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x1000003)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0)

12:36:47 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0))

12:36:47 executing program 2:
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
socket$packet(0x11, 0x2, 0x300)
unshare(0x62040080)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x0)
copy_file_range(r0, 0x0, r3, &(0x7f00000001c0), 0x0, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x2a, 0x0, "4c774fc207b2764cc639d766f1a8bf75fa858b606ad21530ecaf8b152bc099032178945d2ed02d555131e75488a37329ea68553a3c06f898b0415d06e9edb87c74d7bb428a4657b3929ce7c15f973a5f"}, 0xd8)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendfile(r2, r1, 0x0, 0x9bbb)
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000004200))

12:36:47 executing program 7:
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
socket$packet(0x11, 0x2, 0x300)
unshare(0x62040080)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x0)
copy_file_range(r0, 0x0, r3, &(0x7f00000001c0), 0x0, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x2a, 0x0, "4c774fc207b2764cc639d766f1a8bf75fa858b606ad21530ecaf8b152bc099032178945d2ed02d555131e75488a37329ea68553a3c06f898b0415d06e9edb87c74d7bb428a4657b3929ce7c15f973a5f"}, 0xd8)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendfile(r2, r1, 0x0, 0x9bbb)
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000004200))

12:36:47 executing program 0:
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
socket$packet(0x11, 0x2, 0x300)
unshare(0x62040080)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x0)
copy_file_range(r0, 0x0, r3, &(0x7f00000001c0), 0x0, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x2a, 0x0, "4c774fc207b2764cc639d766f1a8bf75fa858b606ad21530ecaf8b152bc099032178945d2ed02d555131e75488a37329ea68553a3c06f898b0415d06e9edb87c74d7bb428a4657b3929ce7c15f973a5f"}, 0xd8)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendfile(r2, r1, 0x0, 0x9bbb)
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000004200))

12:36:47 executing program 3:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x1000003)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0)

12:36:47 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x1000003)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000100))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0)

12:36:47 executing program 1:
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:root_t:s0\x00', 0x1c)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000080)=0xfffffffb, 0x4)
accept(0xffffffffffffffff, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80)
geteuid()
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)='./file1\x00', 0x49, 0x200000, 0x23456}, 0x7)
fspick(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0)
mknod(&(0x7f0000000480)='./file1\x00', 0x800, 0x2)
syz_io_uring_setup(0x2a53, &(0x7f00000004c0)={0x0, 0x0, 0x11, 0x3, 0x21}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000540), &(0x7f0000000580))
syz_io_uring_setup(0x7c8a, &(0x7f00000005c0)={0x0, 0xa2e1, 0x10, 0x1, 0x284}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680))

12:36:47 executing program 2:
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
socket$packet(0x11, 0x2, 0x300)
unshare(0x62040080)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x0)
copy_file_range(r0, 0x0, r3, &(0x7f00000001c0), 0x0, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x2a, 0x0, "4c774fc207b2764cc639d766f1a8bf75fa858b606ad21530ecaf8b152bc099032178945d2ed02d555131e75488a37329ea68553a3c06f898b0415d06e9edb87c74d7bb428a4657b3929ce7c15f973a5f"}, 0xd8)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendfile(r2, r1, 0x0, 0x9bbb)
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000004200))

12:36:47 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0))

12:36:47 executing program 7:
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
socket$packet(0x11, 0x2, 0x300)
unshare(0x62040080)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x0)
copy_file_range(r0, 0x0, r3, &(0x7f00000001c0), 0x0, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x2a, 0x0, "4c774fc207b2764cc639d766f1a8bf75fa858b606ad21530ecaf8b152bc099032178945d2ed02d555131e75488a37329ea68553a3c06f898b0415d06e9edb87c74d7bb428a4657b3929ce7c15f973a5f"}, 0xd8)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendfile(r2, r1, 0x0, 0x9bbb)
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000004200))

12:36:48 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0))

12:36:48 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x1000003)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0)

12:36:48 executing program 2:
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
socket$packet(0x11, 0x2, 0x300)
unshare(0x62040080)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x0)
copy_file_range(r0, 0x0, r3, &(0x7f00000001c0), 0x0, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x2a, 0x0, "4c774fc207b2764cc639d766f1a8bf75fa858b606ad21530ecaf8b152bc099032178945d2ed02d555131e75488a37329ea68553a3c06f898b0415d06e9edb87c74d7bb428a4657b3929ce7c15f973a5f"}, 0xd8)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendfile(r2, r1, 0x0, 0x9bbb)
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000004200))

12:36:48 executing program 0:
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
socket$packet(0x11, 0x2, 0x300)
unshare(0x62040080)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x0)
copy_file_range(r0, 0x0, r3, &(0x7f00000001c0), 0x0, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x2a, 0x0, "4c774fc207b2764cc639d766f1a8bf75fa858b606ad21530ecaf8b152bc099032178945d2ed02d555131e75488a37329ea68553a3c06f898b0415d06e9edb87c74d7bb428a4657b3929ce7c15f973a5f"}, 0xd8)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendfile(r2, r1, 0x0, 0x9bbb)
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000004200))

[  113.153419] audit: type=1401 audit(1636115808.237:18): op=security_bounded_transition seresult=denied oldcontext=system_u:system_r:kernel_t:s0 newcontext=system_u:object_r:root_t:s0
12:36:48 executing program 7:
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
socket$packet(0x11, 0x2, 0x300)
unshare(0x62040080)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x0)
copy_file_range(r0, 0x0, r3, &(0x7f00000001c0), 0x0, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x2a, 0x0, "4c774fc207b2764cc639d766f1a8bf75fa858b606ad21530ecaf8b152bc099032178945d2ed02d555131e75488a37329ea68553a3c06f898b0415d06e9edb87c74d7bb428a4657b3929ce7c15f973a5f"}, 0xd8)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendfile(r2, r1, 0x0, 0x9bbb)
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000004200))

[  113.189116] audit: type=1401 audit(1636115808.271:19): op=security_bounded_transition seresult=denied oldcontext=system_u:system_r:kernel_t:s0 newcontext=system_u:object_r:root_t:s0
12:36:48 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'})
clone3(&(0x7f0000000340)={0x40000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

12:36:49 executing program 1:
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:root_t:s0\x00', 0x1c)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000080)=0xfffffffb, 0x4)
accept(0xffffffffffffffff, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80)
geteuid()
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)='./file1\x00', 0x49, 0x200000, 0x23456}, 0x7)
fspick(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0)
mknod(&(0x7f0000000480)='./file1\x00', 0x800, 0x2)
syz_io_uring_setup(0x2a53, &(0x7f00000004c0)={0x0, 0x0, 0x11, 0x3, 0x21}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000540), &(0x7f0000000580))
syz_io_uring_setup(0x7c8a, &(0x7f00000005c0)={0x0, 0xa2e1, 0x10, 0x1, 0x284}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680))

12:36:49 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x1000003)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000100))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0)

12:36:49 executing program 3:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x1000003)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0)

12:36:49 executing program 4:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000380)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@utf8}]})

12:36:49 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x1000003)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000100))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0)

12:36:49 executing program 0:
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
socket$packet(0x11, 0x2, 0x300)
unshare(0x62040080)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x0)
copy_file_range(r0, 0x0, r3, &(0x7f00000001c0), 0x0, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x2a, 0x0, "4c774fc207b2764cc639d766f1a8bf75fa858b606ad21530ecaf8b152bc099032178945d2ed02d555131e75488a37329ea68553a3c06f898b0415d06e9edb87c74d7bb428a4657b3929ce7c15f973a5f"}, 0xd8)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendfile(r2, r1, 0x0, 0x9bbb)
stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000004200))

12:36:49 executing program 5:
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)

[  114.108587] audit: type=1401 audit(1636115809.192:20): op=security_bounded_transition seresult=denied oldcontext=system_u:system_r:kernel_t:s0 newcontext=system_u:object_r:root_t:s0
12:36:49 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x1000000, 0x4)
sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc_llcp={0x27, 0x2, 0x0, 0x0, 0x0, 0x0, "473d7fcc115d845089a8e3fefc4327c35d5f4c097347fb24dc1b3b1ba18171798bdc0062ea0b5e364eee2b3dc94c1742ea96765c683f90df0000000100"}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)="48040000001389000000", 0xa}, {&(0x7f0000000180)="fa1ac810598383171418b8994a82534dfa080fd43a144fb4c7f5efffe2356640ed6f5dfc6046a51faea8633fc5d9a452bbff2f6f255218ebecfa91f6", 0x3c}], 0x2}, 0x0)

12:36:49 executing program 1:
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:root_t:s0\x00', 0x1c)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000080)=0xfffffffb, 0x4)
accept(0xffffffffffffffff, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80)
geteuid()
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)='./file1\x00', 0x49, 0x200000, 0x23456}, 0x7)
fspick(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0)
mknod(&(0x7f0000000480)='./file1\x00', 0x800, 0x2)
syz_io_uring_setup(0x2a53, &(0x7f00000004c0)={0x0, 0x0, 0x11, 0x3, 0x21}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000540), &(0x7f0000000580))
syz_io_uring_setup(0x7c8a, &(0x7f00000005c0)={0x0, 0xa2e1, 0x10, 0x1, 0x284}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680))

12:36:49 executing program 4:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000380)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@utf8}]})

12:36:49 executing program 2:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto(r0, &(0x7f0000000080)="26e0c11b", 0x4, 0x0, &(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000001c80))

12:36:49 executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, 0x0, 0x0)

[  114.384308] audit: type=1401 audit(1636115809.468:21): op=security_bounded_transition seresult=denied oldcontext=system_u:system_r:kernel_t:s0 newcontext=system_u:object_r:root_t:s0
12:36:49 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
setxattr$incfs_id(0x0, 0x0, &(0x7f0000000240), 0x20, 0x0)
io_setup(0x5, &(0x7f0000000080)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}])
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x40)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006})
sendfile(r3, r2, 0x0, 0x7ffffff9)
fork()
fcntl$setownex(0xffffffffffffffff, 0xf, 0x0)

12:36:49 executing program 1:
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:root_t:s0\x00', 0x1c)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000080)=0xfffffffb, 0x4)
accept(0xffffffffffffffff, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80)
geteuid()
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)='./file1\x00', 0x49, 0x200000, 0x23456}, 0x7)
fspick(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0)
mknod(&(0x7f0000000480)='./file1\x00', 0x800, 0x2)
syz_io_uring_setup(0x2a53, &(0x7f00000004c0)={0x0, 0x0, 0x11, 0x3, 0x21}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000540), &(0x7f0000000580))
syz_io_uring_setup(0x7c8a, &(0x7f00000005c0)={0x0, 0xa2e1, 0x10, 0x1, 0x284}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680))

12:36:49 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/key-users\x00', 0x0, 0x0)

12:36:49 executing program 4:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000380)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@utf8}]})

12:36:49 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x28, r1, 0xb0b, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}]}, 0x28}}, 0x0)

12:36:49 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x1000003)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000100))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0)

12:36:49 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x1000003)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000100))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0)

12:36:50 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000000180)="f8ffff1000000a0ff8ffff0f7429ae6fabf8743b89", 0x15, 0x4000}, {&(0x7f0000000280)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100089eb70325132510000eb70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200089eb70325132510000eb70325105000a5bc0", 0x9f, 0x4800}], 0x0, &(0x7f0000011300)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
write$char_raw(r0, &(0x7f0000000800)=ANY=[], 0xee00)

[  114.933110] audit: type=1401 audit(1636115810.017:22): op=security_bounded_transition seresult=denied oldcontext=system_u:system_r:kernel_t:s0 newcontext=system_u:object_r:root_t:s0
12:36:50 executing program 2:
syz_io_uring_setup(0x5a21, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
io_uring_setup(0x4ff8, &(0x7f0000000400))

12:36:50 executing program 0:
io_uring_setup(0x4552, &(0x7f0000000200)={0x0, 0x0, 0xd})

12:36:50 executing program 4:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000380)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000040)={[{@utf8}]})

12:36:50 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0))

[  115.173014] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  115.217702] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000089)
[  115.220887] FAT-fs (loop3): Filesystem has been set read-only
[  115.266958] attempt to access beyond end of device
[  115.266958] loop3: rw=34817, want=1124, limit=72
12:36:50 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[])
io_setup(0x5, &(0x7f0000000700)=<r0=>0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x1e, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00')
io_submit(r0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x2}])
rmdir(&(0x7f0000000080)='./file0\x00')

[  115.289222] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fae2974)
12:36:50 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

12:36:50 executing program 1:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
semctl$IPC_SET(0x0, 0x0, 0x3, &(0x7f0000000000)={{0x2, 0xffffffffffffffff, 0x0, 0xee01, 0xee01}})

[  115.535018] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
12:36:50 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000000180)="f8ffff1000000a0ff8ffff0f7429ae6fabf8743b89", 0x15, 0x4000}, {&(0x7f0000000280)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100089eb70325132510000eb70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200089eb70325132510000eb70325105000a5bc0", 0x9f, 0x4800}], 0x0, &(0x7f0000011300)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
write$char_raw(r0, &(0x7f0000000800)=ANY=[], 0xee00)

12:36:50 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x4}, 0x14}}, 0x0)

12:36:50 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[])
io_setup(0x5, &(0x7f0000000700)=<r0=>0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x1e, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00')
io_submit(r0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x2}])
rmdir(&(0x7f0000000080)='./file0\x00')

12:36:50 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[])
io_setup(0x5, &(0x7f0000000700)=<r0=>0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x1e, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00')
io_submit(r0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x2}])
rmdir(&(0x7f0000000080)='./file0\x00')

12:36:50 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x1000003)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000100))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0)

12:36:50 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x1000003)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000100))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x105142, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0)

12:36:50 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
setxattr$incfs_id(0x0, 0x0, &(0x7f0000000240), 0x20, 0x0)
io_setup(0x5, &(0x7f0000000080)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}])
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x40)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006})
sendfile(r3, r2, 0x0, 0x7ffffff9)
fork()
fcntl$setownex(0xffffffffffffffff, 0xf, 0x0)

12:36:51 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
setxattr$incfs_id(0x0, 0x0, &(0x7f0000000240), 0x20, 0x0)
io_setup(0x5, &(0x7f0000000080)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}])
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x40)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006})
sendfile(r3, r2, 0x0, 0x7ffffff9)
fork()
fcntl$setownex(0xffffffffffffffff, 0xf, 0x0)

[  115.999373] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
12:36:51 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
setxattr$incfs_id(0x0, 0x0, &(0x7f0000000240), 0x20, 0x0)
io_setup(0x5, &(0x7f0000000080)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}])
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x40)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006})
sendfile(r3, r2, 0x0, 0x7ffffff9)
fork()
fcntl$setownex(0xffffffffffffffff, 0xf, 0x0)

[  116.028013] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
12:36:51 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[])
io_setup(0x5, &(0x7f0000000700)=<r0=>0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x1e, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00')
io_submit(r0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x2}])
rmdir(&(0x7f0000000080)='./file0\x00')

[  116.131279] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
12:36:51 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[])
io_setup(0x5, &(0x7f0000000700)=<r0=>0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x1e, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00')
io_submit(r0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x2}])
rmdir(&(0x7f0000000080)='./file0\x00')

[  116.470824] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[  116.482057] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
12:36:51 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[])
io_setup(0x5, &(0x7f0000000700)=<r0=>0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x1e, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00')
io_submit(r0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x2}])
rmdir(&(0x7f0000000080)='./file0\x00')

12:36:51 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[])
io_setup(0x5, &(0x7f0000000700)=<r0=>0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x1e, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00')
io_submit(r0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x2}])
rmdir(&(0x7f0000000080)='./file0\x00')

12:36:51 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000000180)="f8ffff1000000a0ff8ffff0f7429ae6fabf8743b89", 0x15, 0x4000}, {&(0x7f0000000280)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100089eb70325132510000eb70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200089eb70325132510000eb70325105000a5bc0", 0x9f, 0x4800}], 0x0, &(0x7f0000011300)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
write$char_raw(r0, &(0x7f0000000800)=ANY=[], 0xee00)

12:36:52 executing program 7:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000000180)="f8ffff1000000a0ff8ffff0f7429ae6fabf8743b89", 0x15, 0x4000}, {&(0x7f0000000280)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100089eb70325132510000eb70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200089eb70325132510000eb70325105000a5bc0", 0x9f, 0x4800}], 0x0, &(0x7f0000011300)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
write$char_raw(r0, &(0x7f0000000800)=ANY=[], 0xee00)

[  116.974714] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
12:36:52 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
setxattr$incfs_id(0x0, 0x0, &(0x7f0000000240), 0x20, 0x0)
io_setup(0x5, &(0x7f0000000080)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}])
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x40)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006})
sendfile(r3, r2, 0x0, 0x7ffffff9)
fork()
fcntl$setownex(0xffffffffffffffff, 0xf, 0x0)

[  117.077637] syz-executor.6 (4689) used greatest stack depth: 23120 bytes left
12:36:52 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
setxattr$incfs_id(0x0, 0x0, &(0x7f0000000240), 0x20, 0x0)
io_setup(0x5, &(0x7f0000000080)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}])
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x40)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006})
sendfile(r3, r2, 0x0, 0x7ffffff9)
fork()
fcntl$setownex(0xffffffffffffffff, 0xf, 0x0)

[  117.152215] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  117.179271] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000089)
[  117.180848] FAT-fs (loop7): Filesystem has been set read-only
12:36:52 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
setxattr$incfs_id(0x0, 0x0, &(0x7f0000000240), 0x20, 0x0)
io_setup(0x5, &(0x7f0000000080)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}])
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x40)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006})
sendfile(r3, r2, 0x0, 0x7ffffff9)
fork()
fcntl$setownex(0xffffffffffffffff, 0xf, 0x0)

[  117.218548] attempt to access beyond end of device
[  117.218548] loop7: rw=34817, want=1124, limit=72
12:36:52 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(&(0x7f00000000c0)='./file1\x00', 0x100)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r2, r0, &(0x7f0000000040)=0x3ed1, 0xd315)

12:36:52 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0xdc06cd7593ab091a})

[  117.290223] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
12:36:53 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
setxattr$incfs_id(0x0, 0x0, &(0x7f0000000240), 0x20, 0x0)
io_setup(0x5, &(0x7f0000000080)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}])
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x40)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006})
sendfile(r3, r2, 0x0, 0x7ffffff9)
fork()
fcntl$setownex(0xffffffffffffffff, 0xf, 0x0)

12:36:53 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000000180)="f8ffff1000000a0ff8ffff0f7429ae6fabf8743b89", 0x15, 0x4000}, {&(0x7f0000000280)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100089eb70325132510000eb70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200089eb70325132510000eb70325105000a5bc0", 0x9f, 0x4800}], 0x0, &(0x7f0000011300)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
write$char_raw(r0, &(0x7f0000000800)=ANY=[], 0xee00)

12:36:53 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(&(0x7f00000000c0)='./file1\x00', 0x100)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r2, r0, &(0x7f0000000040)=0x3ed1, 0xd315)

12:36:53 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
setxattr$incfs_id(0x0, 0x0, &(0x7f0000000240), 0x20, 0x0)
io_setup(0x5, &(0x7f0000000080)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}])
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x40)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006})
sendfile(r3, r2, 0x0, 0x7ffffff9)
fork()
fcntl$setownex(0xffffffffffffffff, 0xf, 0x0)

12:36:53 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
setxattr$incfs_id(0x0, 0x0, &(0x7f0000000240), 0x20, 0x0)
io_setup(0x5, &(0x7f0000000080)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}])
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x40)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006})
sendfile(r3, r2, 0x0, 0x7ffffff9)
fork()
fcntl$setownex(0xffffffffffffffff, 0xf, 0x0)

12:36:53 executing program 7:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000000180)="f8ffff1000000a0ff8ffff0f7429ae6fabf8743b89", 0x15, 0x4000}, {&(0x7f0000000280)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100089eb70325132510000eb70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200089eb70325132510000eb70325105000a5bc0", 0x9f, 0x4800}], 0x0, &(0x7f0000011300)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
write$char_raw(r0, &(0x7f0000000800)=ANY=[], 0xee00)

12:36:53 executing program 0:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$RTC_WKALM_SET(r0, 0x5452, &(0x7f0000000000)={0x1})

[  118.440720] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  118.462642] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000089)
[  118.463729] FAT-fs (loop7): Filesystem has been set read-only
[  118.477012] attempt to access beyond end of device
[  118.477012] loop7: rw=34817, want=1124, limit=72
12:36:53 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(&(0x7f00000000c0)='./file1\x00', 0x100)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r2, r0, &(0x7f0000000040)=0x3ed1, 0xd315)

12:36:53 executing program 7:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000000180)="f8ffff1000000a0ff8ffff0f7429ae6fabf8743b89", 0x15, 0x4000}, {&(0x7f0000000280)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100089eb70325132510000eb70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200089eb70325132510000eb70325105000a5bc0", 0x9f, 0x4800}], 0x0, &(0x7f0000011300)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
write$char_raw(r0, &(0x7f0000000800)=ANY=[], 0xee00)

12:36:53 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
close(r0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000380), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  118.637730] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
12:36:53 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
close(r0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000380), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  118.843425] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  118.880654] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000089)
12:36:53 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
close(r0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000380), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  118.880684] FAT-fs (loop7): Filesystem has been set read-only
[  118.880706] attempt to access beyond end of device
[  118.880706] loop7: rw=34817, want=1124, limit=72
12:36:54 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
close(r0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000380), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:36:54 executing program 7:
r0 = inotify_init1(0x0)
syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
read(r0, &(0x7f0000001380)=""/240, 0xf0)
r1 = fcntl$dupfd(r0, 0x0, r0)
inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x128)
syz_mount_image$nfs4(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

12:36:54 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
close(r0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000380), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:36:54 executing program 5:
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
fchmod(r0, 0x0)

[  119.601283] 9pnet: Insufficient options for proto=fd
12:36:54 executing program 2:
r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}]})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknodat$loop(r0, &(0x7f0000000240)='./mnt\x00', 0x0, 0x0)

12:36:54 executing program 7:
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RXATTRWALK(r0, 0x0, 0x0)

12:36:54 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(&(0x7f00000000c0)='./file1\x00', 0x100)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r2, r0, &(0x7f0000000040)=0x3ed1, 0xd315)

12:36:55 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x1}})
dup3(r0, r1, 0x0)

12:36:55 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006})
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0)

12:36:55 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
rt_sigpending(0x0, 0x0)

12:36:55 executing program 7:
lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000540)='./file0\x00', 0x0)

12:36:55 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000000)=@ax25={{}, [@default, @rose, @null, @remote, @remote, @remote, @null, @default]}, 0x80, &(0x7f0000000380)=[{0x0}, {0x0}], 0x2}, 0x0)

12:36:55 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(&(0x7f00000000c0)='./file1\x00', 0x100)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r2, r0, &(0x7f0000000040)=0x3ed1, 0xd315)

12:36:55 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
close(r0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000380), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:36:55 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(&(0x7f00000000c0)='./file1\x00', 0x100)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r2, r0, &(0x7f0000000040)=0x3ed1, 0xd315)

12:36:56 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0x13, 0x4)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r1, &(0x7f0000001cc0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

12:36:56 executing program 7:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r1)
keyctl$KEYCTL_MOVE(0x1e, r0, r0, r2, 0x0)

12:36:56 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x1}})
dup3(r0, r1, 0x0)

12:36:56 executing program 7:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
pread64(r0, &(0x7f00000002c0)=""/4096, 0x1000, 0x7f0)

12:36:56 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x1}})
dup3(r0, r1, 0x0)

12:36:56 executing program 7:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
pread64(r0, &(0x7f00000002c0)=""/4096, 0x1000, 0x7f0)

12:36:56 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, "0000f0000000000300"})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x161})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x300)
r1 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}})

12:36:56 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006})
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0)

12:36:56 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x1}})
dup3(r0, r1, 0x0)

[  121.598677] syz-executor.5 uses obsolete (PF_INET,SOCK_PACKET)
[  121.600263] device veth0_vlan entered promiscuous mode
[  121.631997] device veth0_vlan entered promiscuous mode
12:36:56 executing program 7:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
pread64(r0, &(0x7f00000002c0)=""/4096, 0x1000, 0x7f0)

12:36:56 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, "0000f0000000000300"})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x161})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x300)
r1 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}})

12:36:56 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006})
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0)

[  121.988555] device veth0_vlan entered promiscuous mode
12:36:57 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006})
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0)

12:36:57 executing program 2:
syz_io_uring_setup(0x4f9d, &(0x7f0000000340), &(0x7f0000003000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0, 0x0)

12:36:57 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
close(r0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000380), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

12:36:57 executing program 7:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
pread64(r0, &(0x7f00000002c0)=""/4096, 0x1000, 0x7f0)

12:36:57 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006})
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0)

12:36:57 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0)
syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(&(0x7f00000000c0)='./file1\x00', 0x100)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r2, r0, &(0x7f0000000040)=0x3ed1, 0xd315)

12:36:57 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, "0000f0000000000300"})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x161})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x300)
r1 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}})

12:36:57 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006})
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0)

[  122.416818] device veth0_vlan entered promiscuous mode
12:36:57 executing program 7:
clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000140)=""/224, 0xe0, 0x0, &(0x7f0000000340)=[0xffffffffffffffff], 0x1}, 0x58)

12:36:57 executing program 5:
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, "0000f0000000000300"})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'})
io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x161})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x300)
r1 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}})

12:36:57 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x21, 0x0, 0x0)

12:36:57 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x1000)
fallocate(r1, 0x0, 0x0, 0x8800000)
pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0)
lseek(r1, 0x0, 0x4)

[  122.817734] device veth0_vlan entered promiscuous mode
12:36:57 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x21, 0x0, 0x0)

12:36:58 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006})
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0)

12:36:58 executing program 7:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000300)=@updsa={0x14c, 0x1a, 0x1, 0x0, 0x0, {{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@local, 0x0, 0x33}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}, @replay_val={0x10}]}, 0x14c}}, 0x0)

12:36:59 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006})
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0)

12:36:59 executing program 5:
openat2(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x340042}, 0x18)

12:36:59 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x21, 0x0, 0x0)

12:36:59 executing program 7:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff})

12:36:59 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006})
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0)

12:36:59 executing program 0:
getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, 0x0, &(0x7f0000000080))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))

12:36:59 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x1000)
fallocate(r1, 0x0, 0x0, 0x8800000)
pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0)
lseek(r1, 0x0, 0x4)

12:36:59 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x8000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006})
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r5, 0x0, r4, 0x0, 0x200f5ef, 0x0)

12:36:59 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x21, 0x0, 0x0)

12:37:00 executing program 5:
pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0, 0x0)

12:37:00 executing program 7:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x1000)
fallocate(r1, 0x0, 0x0, 0x8800000)
pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0)
lseek(r1, 0x0, 0x4)

12:37:00 executing program 0:
timer_create(0x0, 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000380), &(0x7f00000003c0))

12:37:00 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x1000)
fallocate(r1, 0x0, 0x0, 0x8800000)
pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0)
lseek(r1, 0x0, 0x4)

12:37:00 executing program 4:
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x8)

12:37:00 executing program 6:
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

12:37:00 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000000))
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)='./file0\x00')
unlink(&(0x7f00000001c0)='./file0\x00')
copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0)

12:37:00 executing program 1:
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4000)
write$P9_RAUTH(r0, &(0x7f0000000040)={0x14}, 0x14)

12:37:00 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{0x5}, {0x1976}]})

12:37:00 executing program 6:
pipe2(0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone3(&(0x7f0000002400)={0x0, &(0x7f0000002180), 0x0, 0x0, {0x14}, &(0x7f0000002240)=""/148, 0x94, 0x0, 0x0}, 0x58)
syz_genetlink_get_family_id$team(&(0x7f0000004080), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0)

12:37:00 executing program 4:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000340)='silent\x00', 0x0, 0x0)
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/77, 0x4d}], 0x1)

12:37:00 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
setgid(0x0)

12:37:00 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000000))
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)='./file0\x00')
unlink(&(0x7f00000001c0)='./file0\x00')
copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0)

12:37:00 executing program 4:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000340)='silent\x00', 0x0, 0x0)
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/77, 0x4d}], 0x1)

12:37:00 executing program 6:
pipe2(0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone3(&(0x7f0000002400)={0x0, &(0x7f0000002180), 0x0, 0x0, {0x14}, &(0x7f0000002240)=""/148, 0x94, 0x0, 0x0}, 0x58)
syz_genetlink_get_family_id$team(&(0x7f0000004080), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0)

12:37:01 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x134}}, 0x0)

12:37:01 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
setgid(0x0)

12:37:01 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x1000)
fallocate(r1, 0x0, 0x0, 0x8800000)
pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0)
lseek(r1, 0x0, 0x4)

12:37:01 executing program 4:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000340)='silent\x00', 0x0, 0x0)
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/77, 0x4d}], 0x1)

12:37:01 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0xffffffffffffffff, r1, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x4b41, 0x0)

12:37:01 executing program 7:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x1000)
fallocate(r1, 0x0, 0x0, 0x8800000)
pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0)
lseek(r1, 0x0, 0x4)

12:37:01 executing program 6:
pipe2(0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone3(&(0x7f0000002400)={0x0, &(0x7f0000002180), 0x0, 0x0, {0x14}, &(0x7f0000002240)=""/148, 0x94, 0x0, 0x0}, 0x58)
syz_genetlink_get_family_id$team(&(0x7f0000004080), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0)

12:37:01 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000000))
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)='./file0\x00')
unlink(&(0x7f00000001c0)='./file0\x00')
copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0)

12:37:01 executing program 4:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000340)='silent\x00', 0x0, 0x0)
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/77, 0x4d}], 0x1)

12:37:01 executing program 1:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0xa, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0)

12:37:01 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000140)=""/153)

12:37:01 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
setgid(0x0)

12:37:01 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000000))
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)='./file0\x00')
unlink(&(0x7f00000001c0)='./file0\x00')
copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0)

[  126.840733] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
12:37:01 executing program 6:
pipe2(0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800)
clone3(&(0x7f0000002400)={0x0, &(0x7f0000002180), 0x0, 0x0, {0x14}, &(0x7f0000002240)=""/148, 0x94, 0x0, 0x0}, 0x58)
syz_genetlink_get_family_id$team(&(0x7f0000004080), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0)

[  126.882978] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
12:37:02 executing program 4:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/time\x00')

12:37:02 executing program 5:
getgroups(0x1, &(0x7f0000000000)=[0x0])

12:37:02 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
setgid(0x0)

12:37:03 executing program 1:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0xa, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0)

12:37:03 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/vmstat\x00', 0x0, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, 0x0)

12:37:03 executing program 6:
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[])
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(0xffffffffffffffff, r0, 0x0)
setxattr$incfs_id(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0)

12:37:03 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
msgsnd(0x0, 0x0, 0x0, 0x0)

12:37:03 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

12:37:03 executing program 0:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000000c0)=0x3f, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x255f, 0x4)
sendmsg$inet6(r0, &(0x7f0000001e40)={&(0x7f0000001d00)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc7bce561360a3f0a, 0x0)

12:37:03 executing program 7:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
open_tree(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x1000)
fallocate(r1, 0x0, 0x0, 0x8800000)
pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0)
lseek(r1, 0x0, 0x4)

12:37:03 executing program 3:
r0 = semget$private(0x0, 0x1, 0x0)
semctl$GETZCNT(r0, 0x0, 0x14, 0x0)

[  128.298016] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  128.311936] audit: type=1326 audit(1636115823.395:23): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5023 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466609 code=0x7ffc0000
[  128.317068] audit: type=1326 audit(1636115823.399:24): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5023 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466609 code=0x7ffc0000
[  128.337995] audit: type=1326 audit(1636115823.402:25): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5023 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=69 compat=0 ip=0x466609 code=0x7ffc0000
12:37:03 executing program 5:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa43, 0x0)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='/dev/sr0'], &(0x7f00000000c0)='./file1\x00', 0x0, 0x209000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x84e00, 0x0)
ioctl$SG_SET_TIMEOUT(r0, 0x2203, 0x0)

12:37:03 executing program 6:
syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000002e00)=[{&(0x7f0000000a00)='7', 0x1, 0xffffffffffff0000}], 0x0, 0x0)

[  128.374748] audit: type=1326 audit(1636115823.402:26): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5023 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466609 code=0x7ffc0000
12:37:03 executing program 1:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0xa, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0)

[  128.386082] audit: type=1326 audit(1636115823.402:27): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5023 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466609 code=0x7ffc0000
12:37:03 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

[  128.394984] audit: type=1326 audit(1636115823.406:28): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5023 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=317 compat=0 ip=0x466609 code=0x7ffc0000
12:37:03 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
msgsnd(0x0, 0x0, 0x0, 0x0)

[  128.402672] audit: type=1326 audit(1636115823.407:29): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5023 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466609 code=0x7ffc0000
[  128.419866] audit: type=1326 audit(1636115823.407:30): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5023 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466609 code=0x7ffc0000
12:37:03 executing program 0:
futex(&(0x7f0000000040), 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0)

[  128.573549] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  128.630559] audit: type=1326 audit(1636115823.714:31): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5038 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x466609 code=0x7ffc0000
[  128.646381] audit: type=1326 audit(1636115823.729:32): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5038 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=69 compat=0 ip=0x466609 code=0x7ffc0000
12:37:03 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

12:37:03 executing program 1:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0xa, 0x0, 0x0, @ipv6=@private1}]}]}, 0x2c}}, 0x0)

12:37:03 executing program 6:
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f00000000c0))

12:37:03 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
msgsnd(0x0, 0x0, 0x0, 0x0)

12:37:03 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0)
mknod$loop(&(0x7f0000000000)='./file0/file1\x00', 0x1000, 0x0)

[  128.807933] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
12:37:04 executing program 5:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa43, 0x0)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='/dev/sr0'], &(0x7f00000000c0)='./file1\x00', 0x0, 0x209000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x84e00, 0x0)
ioctl$SG_SET_TIMEOUT(r0, 0x2203, 0x0)

12:37:04 executing program 4:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

12:37:04 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
msgsnd(0x0, 0x0, 0x0, 0x0)

12:37:04 executing program 1:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x3, &(0x7f0000000500)=[{&(0x7f0000000280)="b0", 0x1, 0x1}, {&(0x7f00000002c0)="ac7d12c0cd17b871", 0x8}, {&(0x7f00000003c0)="8c", 0x1}], 0x0, 0x0)

12:37:04 executing program 6:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed}, 0x8)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0)

12:37:04 executing program 7:
prctl$PR_GET_TSC(0x3a, &(0x7f0000000240))

12:37:04 executing program 0:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x24000001)
memfd_create(0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
io_setup(0x10000, &(0x7f0000003880))

12:37:04 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x7}, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, 0x1c)
syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0x0, 0x0, r1, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340))
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0)={0x0, 0xfff})
recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/244, 0xf4, 0x0, &(0x7f0000000200)=@llc={0x1a, 0x323, 0x6c, 0x96, 0x2, 0x0, @random="4b8f1742bb5c"}, 0x80)
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000040)={0x0, {{0x2, 0x0, @broadcast}}}, 0x88)

12:37:04 executing program 5:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa43, 0x0)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='/dev/sr0'], &(0x7f00000000c0)='./file1\x00', 0x0, 0x209000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x84e00, 0x0)
ioctl$SG_SET_TIMEOUT(r0, 0x2203, 0x0)

12:37:04 executing program 4:
r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0xfe, {0x2}}, 0x0)

12:37:04 executing program 2:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
preadv(r0, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/38, 0x26}, {&(0x7f0000000580)=""/253, 0xfd}, {&(0x7f0000000680)=""/188, 0xbc}], 0x3, 0x0, 0x0)

[  129.528770] EXT4-fs warning (device sda): verify_group_input:131: Cannot add at group 0 (only 16 groups)
[  129.662374] EXT4-fs warning (device sda): verify_group_input:131: Cannot add at group 0 (only 16 groups)
12:37:05 executing program 7:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed}, 0x8)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0)

12:37:05 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$sock_linger(r0, 0x1, 0x42, &(0x7f00000001c0), 0x8)

12:37:05 executing program 5:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa43, 0x0)
mount(&(0x7f0000000140)=ANY=[@ANYBLOB='/dev/sr0'], &(0x7f00000000c0)='./file1\x00', 0x0, 0x209000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x84e00, 0x0)
ioctl$SG_SET_TIMEOUT(r0, 0x2203, 0x0)

12:37:05 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x7}, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, 0x1c)
syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0x0, 0x0, r1, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340))
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0)={0x0, 0xfff})
recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/244, 0xf4, 0x0, &(0x7f0000000200)=@llc={0x1a, 0x323, 0x6c, 0x96, 0x2, 0x0, @random="4b8f1742bb5c"}, 0x80)
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000040)={0x0, {{0x2, 0x0, @broadcast}}}, 0x88)

12:37:05 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)

12:37:05 executing program 6:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed}, 0x8)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0)

12:37:05 executing program 2:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0)
lseek(r0, 0x3, 0x0)
unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0)

12:37:05 executing program 4:
r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0xfe, {0x2}}, 0x0)

12:37:05 executing program 2:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0)
lseek(r0, 0x3, 0x0)
unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0)

12:37:05 executing program 1:
r0 = syz_io_uring_complete(0x0)
getsockname$unix(r0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff)
syz_io_uring_setup(0x3c5e, &(0x7f0000001ac0)={0x0, 0xdfe5, 0x2, 0x1, 0x317}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001b40), &(0x7f0000001b80)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, 0x0, 0x5)

12:37:05 executing program 5:
syz_mount_image$nfs4(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600))

[  130.337000] EXT4-fs warning (device sda): verify_group_input:131: Cannot add at group 0 (only 16 groups)
12:37:05 executing program 4:
r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0xfe, {0x2}}, 0x0)

12:37:05 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x19, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e36383530363930383600"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f95010040000c00000000000000dbf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500400000000000000000000000000000004700000000000000", 0x20, 0x560}, {&(0x7f0000010300)="02000000030000000400000015000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="ff070000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000dbf4655fdbf4655fdbf4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011500)="ed41000000080000dbf4655fdbf4655fdbf4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x2080}, {&(0x7f0000011600)="8081000000601020dbf4655fdbf4655fdbf4655f00000000000001004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000", 0x60, 0x2300}, {&(0x7f0000011700)="c041000000400000dbf4655fdbf4655fdbf4655f00000000000002004000000000000800000000000af301000400000000000000000000000800000020000000", 0x40, 0x2500}, {&(0x7f0000011800)="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"/768, 0x300, 0x2580}, {&(0x7f0000011b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000011c00)="0b0000000c0001022e00000002000000f40702022e2e00"/32, 0x20, 0x10000}, {&(0x7f0000011d00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x10800}, {&(0x7f0000011e00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11000}, {&(0x7f0000011f00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11800}, {&(0x7f0000012000)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12000}, {&(0x7f0000012100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12800}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13000}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13800}, {&(0x7f0000012400)="504d4d00504d4dffdbf4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033340075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x20000}, {&(0x7f0000012500)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d807050766696c653100"/64, 0x40, 0x28000}, {&(0x7f0000012600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x30000}, {&(0x7f0000012b00)='syzkallers\x00'/32, 0x20, 0x38000}, {&(0x7f0000012c00)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8070000000006000000779b539778617474723100000601f00700000000060000007498539778617474723200"/96, 0x60, 0x40000}, {&(0x7f0000012d00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x407e0}, {&(0x7f0000012e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x50000}], 0x0, &(0x7f0000012f00))

12:37:05 executing program 6:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed}, 0x8)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0)

12:37:05 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x7}, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, 0x1c)
syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0x0, 0x0, r1, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340))
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0)={0x0, 0xfff})
recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/244, 0xf4, 0x0, &(0x7f0000000200)=@llc={0x1a, 0x323, 0x6c, 0x96, 0x2, 0x0, @random="4b8f1742bb5c"}, 0x80)
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000040)={0x0, {{0x2, 0x0, @broadcast}}}, 0x88)

12:37:05 executing program 2:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0)
lseek(r0, 0x3, 0x0)
unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0)

[  130.593227] EXT4-fs warning (device sda): verify_group_input:131: Cannot add at group 0 (only 16 groups)
[  130.604310] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[  130.608496] ext4 filesystem being mounted at /syzkaller-testdir070853638/syzkaller.35uD3O/50/file0 supports timestamps until 2038 (0x7fffffff)
12:37:06 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0)

12:37:06 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCXONC(r0, 0x540a, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xd1)

12:37:06 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x7}, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, 0x1c)
syz_open_dev$tty20(0xc, 0x4, 0x0)
perf_event_open(0x0, 0x0, 0x0, r1, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340))
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0)={0x0, 0xfff})
recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/244, 0xf4, 0x0, &(0x7f0000000200)=@llc={0x1a, 0x323, 0x6c, 0x96, 0x2, 0x0, @random="4b8f1742bb5c"}, 0x80)
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000040)={0x0, {{0x2, 0x0, @broadcast}}}, 0x88)

12:37:06 executing program 7:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed}, 0x8)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0)

12:37:06 executing program 2:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=ANY=[])
mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0)
lseek(r0, 0x3, 0x0)
unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0)

12:37:06 executing program 6:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed}, 0x8)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0)

12:37:06 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$chown(0x8, r0, 0xffffffffffffffff, 0xee01)

12:37:06 executing program 4:
r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0)
open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0xfe, {0x2}}, 0x0)

12:37:06 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0)
ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000000))

12:37:06 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0)

[  131.319217] EXT4-fs warning (device sda): verify_group_input:131: Cannot add at group 0 (only 16 groups)
12:37:06 executing program 4:
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0)

12:37:06 executing program 7:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed}, 0x8)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0)

12:37:06 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$chown(0x8, r0, 0xffffffffffffffff, 0xee01)

12:37:06 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000001600), 0x14)

[  131.385152] Bluetooth: hci7: command 0x0405 tx timeout
12:37:06 executing program 0:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000340), 0x0, 0x0, 0x0)

12:37:07 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00')
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/56, 0x38}, {&(0x7f0000000140)=""/254, 0x7fffefc8}], 0x2)
ioctl$CHAR_RAW_GETSIZE(0xffffffffffffffff, 0x1260, 0x0)
gettid()

12:37:07 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0)

12:37:07 executing program 7:
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000500)='net/ip6_flowlabel\x00')
pread64(r0, &(0x7f00000002c0)=""/138, 0x8a, 0x0)

12:37:07 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000900)={0x0, 0x8000}, 0x4)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r1, &(0x7f0000000180)=[{{&(0x7f0000005340)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000c00)=[{&(0x7f00000000c0)="863c", 0x2}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x32}, @local}}}], 0x20}}], 0x1, 0x0)

12:37:07 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$chown(0x8, r0, 0xffffffffffffffff, 0xee01)

12:37:07 executing program 0:
syz_mount_image$tmpfs(0x0, &(0x7f00000016c0)='./file0\x00', 0x0, 0x4, &(0x7f0000001900)=[{&(0x7f0000001700)="d13b7d8741a2cc2d34b6b50a61421976022b6eaf5772d3a978c1c3e3edf9ce8abf3043870851df71f54edc8c64b02549b9693c3ad418b819a9f1ee8a2dfb49a4f689abeea9c08c71d184dfb5acfd849bf43edba213eceb7c4400b70bc86dfda77669cd2885ba2e846f1089a0d073fd1a2039c44acaa292d86619c958fa8fd3", 0x7f, 0x1}, {&(0x7f0000001780)="4b6d935fc44846d551c21ab409c5d2b357666f0167f61f0a1a9e1d3773645098bdd97687dbdff919c2a3043c365edcfcff34c5c3f8ba312db0526eb1697d72abcf1c3d293f3dd782f13b3e3b9afd945c3e82213a74139ca59d249de89c0ec29c659f02b178e337cfdf5046c24b6e4d62a8b5f0", 0x73, 0x9}, {&(0x7f0000001800)="32e6b0136de12956fc310735c5b98936364a7a0a952014f996d902ad6dc705471ccdac44d3840d8f7fe5c5a73be453fe03da463f6e6819a6460e9cb56f91e877ab4a66416940b0211c5da14b889da264cfb6d56e8af3274ddfe3773e95beac6526c0ad5e65de7f0a0a7a81d31f31adaa98", 0x71}, {&(0x7f0000001880)="f7df655d39306734ea7044ff46b49f42c8e6cfc2bfd7860a12e915374a04378d5d93b6d60aaa214627d2f41b902bf170578be5e8d1762e", 0x37, 0x3f}], 0x800800, &(0x7f0000001980)={[{@gid={'gid', 0x3d, 0xee00}}, {@huge_always}, {@huge_advise}, {@nr_inodes={'nr_inodes', 0x3d, [0x0, 0x0, 0x37]}}, {@mode={'mode', 0x3d, 0x5c4}}, {@size}], [{@uid_gt}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@uid_lt}, {@obj_type={'obj_type', 0x3d, ':'}}, {@obj_type={'obj_type', 0x3d, '/dev/sg#\x00'}}]})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000027c0)={{}, 0x0, 0x0, @inherit={0x50, &(0x7f0000002740)={0x0, 0x1, 0x1000, 0xfffffffffffffc00, {0x0, 0x1, 0x0, 0x4, 0x1}, [0x0]}}, @subvolid=0x3ff})

12:37:07 executing program 3:
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000002800), 0xffffffffffffffff)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000029c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0}, 0x0)

12:37:07 executing program 6:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

12:37:07 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x20, 0x2, 0x2, 0x5, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_ZONE={0x6}]}, 0x20}}, 0x0)

12:37:07 executing program 5:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0)

12:37:07 executing program 2:
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000100)={@random="41f4b71197dc", @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "cd8964", 0x8, 0x0, 0x0, @remote, @private0, {[@routing={0x0, 0x0, 0x0, 0x89}]}}}}}, 0x0)

12:37:07 executing program 1:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$chown(0x8, r0, 0xffffffffffffffff, 0xee01)

12:37:07 executing program 6:
syz_io_uring_setup(0x1c6c, &(0x7f0000000240), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000)

12:37:07 executing program 7:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

12:37:07 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14}}, 0x28}}, 0x0)

12:37:07 executing program 2:
syz_genetlink_get_family_id$smc(&(0x7f0000001c40), 0xffffffffffffffff)

12:37:07 executing program 2:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/183, 0xb7}, {0x0}], 0x2)

12:37:07 executing program 5:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
fchdir(r0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

12:37:07 executing program 7:
r0 = socket$unix(0x1, 0x1, 0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$getownex(r0, 0x10, &(0x7f00000009c0)={0x0, <r1=>0x0})
setpgid(0x0, r1)

12:37:07 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1)

12:37:07 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
recvfrom$inet6(r0, &(0x7f0000000700)=""/4096, 0xe34e, 0x0, 0x0, 0x6b4)

12:37:07 executing program 0:
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)

12:37:07 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00')
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/56, 0x38}, {&(0x7f0000000140)=""/254, 0x7fffefc8}], 0x2)
ioctl$CHAR_RAW_GETSIZE(0xffffffffffffffff, 0x1260, 0x0)
gettid()

12:37:07 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0)
ioctl$SG_GET_LOW_DMA(r0, 0x2284, &(0x7f0000001100))

12:37:08 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0)

12:37:08 executing program 0:
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10)
recvfrom(r0, &(0x7f0000000200)=""/135, 0x87, 0x0, 0x0, 0x0)
shutdown(r0, 0x1)

12:37:08 executing program 6:
syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00')
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0xc8001, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)

12:37:08 executing program 5:
r0 = fsopen(&(0x7f0000001300)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0xffffffffffffffff, r1, 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000100)='ro\x00', 0x0, 0x0)

12:37:08 executing program 7:
syz_io_uring_setup(0x73fa, &(0x7f00000004c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000540), &(0x7f0000000580))

12:37:08 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1c)

12:37:08 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1c)

12:37:08 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="0f00000072472fc575a6c3d1b3805748", 0x10}], 0x1)

12:37:08 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r0)

12:37:08 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x30, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x30}}, 0x0)

12:37:08 executing program 7:
syz_io_uring_setup(0x73fa, &(0x7f00000004c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000540), &(0x7f0000000580))

12:37:08 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1c)

12:37:08 executing program 2:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00')
socket$nl_generic(0x10, 0x3, 0x10)

12:37:08 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
recvfrom$inet6(r0, &(0x7f0000000700)=""/4096, 0xe34e, 0x0, 0x0, 0x6b4)

12:37:08 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000001300)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e20, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x2, 0x0)

12:37:08 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00')
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/56, 0x38}, {&(0x7f0000000140)=""/254, 0x7fffefc8}], 0x2)
ioctl$CHAR_RAW_GETSIZE(0xffffffffffffffff, 0x1260, 0x0)
gettid()

12:37:08 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
recvfrom$inet6(r0, &(0x7f0000000700)=""/4096, 0xe34e, 0x0, 0x0, 0x6b4)

12:37:08 executing program 6:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0)

12:37:08 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)

12:37:08 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1c)

12:37:08 executing program 5:
io_setup(0x3, &(0x7f00000001c0)=<r0=>0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_submit(r0, 0x3, &(0x7f0000000600)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x5}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0])

12:37:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}]}, 0x1c}}, 0x0)

12:37:09 executing program 7:
syz_io_uring_setup(0x73fa, &(0x7f00000004c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000540), &(0x7f0000000580))

[  147.148163] kmemleak: 1769 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
12:37:29 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00')
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/56, 0x38}, {&(0x7f0000000140)=""/254, 0x7fffefc8}], 0x2)
ioctl$CHAR_RAW_GETSIZE(0xffffffffffffffff, 0x1260, 0x0)
gettid()

12:37:29 executing program 5:
io_setup(0x3, &(0x7f00000001c0)=<r0=>0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_submit(r0, 0x3, &(0x7f0000000600)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x5}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0])

12:37:29 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001)
recvfrom$inet6(r0, &(0x7f0000000700)=""/4096, 0xe34e, 0x0, 0x0, 0x6b4)

12:37:29 executing program 6:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x12, 0x101}, 0x14}}, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0)

12:37:29 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
read(r0, &(0x7f0000000000), 0x2000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8401, 0x0)
ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f00000000c0)={'ipvlan1\x00'})
write$binfmt_elf64(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40)

12:37:29 executing program 7:
syz_io_uring_setup(0x73fa, &(0x7f00000004c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000540), &(0x7f0000000580))

12:37:29 executing program 2:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0)
setxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000), &(0x7f0000000140)='system_u:object_r:mount_tmp_t:s0\x00', 0xfff0, 0x0)

12:37:29 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}}, 0x0)

12:37:30 executing program 6:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x12, 0x101}, 0x14}}, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0)

[  154.961407] kauditd_printk_skb: 8 callbacks suppressed
[  154.961423] audit: type=1400 audit(1636115850.044:41): avc:  denied  { associate } for  pid=5312 comm="syz-executor.2" name="/" dev="devtmpfs" ino=1 scontext=system_u:object_r:mount_tmp_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1
12:37:30 executing program 5:
io_setup(0x3, &(0x7f00000001c0)=<r0=>0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_submit(r0, 0x3, &(0x7f0000000600)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x5}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0])

12:37:30 executing program 7:
openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0xfffffcab)

12:37:30 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
read(r0, &(0x7f0000000000), 0x2000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8401, 0x0)
ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f00000000c0)={'ipvlan1\x00'})
write$binfmt_elf64(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40)

12:37:30 executing program 1:
r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0)

12:37:30 executing program 2:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0)
setxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000), &(0x7f0000000140)='system_u:object_r:mount_tmp_t:s0\x00', 0xfff0, 0x0)

12:37:30 executing program 5:
io_setup(0x3, &(0x7f00000001c0)=<r0=>0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_submit(r0, 0x3, &(0x7f0000000600)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x5}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0])

12:37:30 executing program 6:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x12, 0x101}, 0x14}}, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0)

12:37:30 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
read(r0, &(0x7f0000000000), 0x2000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8401, 0x0)
ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f00000000c0)={'ipvlan1\x00'})
write$binfmt_elf64(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40)

12:37:30 executing program 2:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0)
setxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000), &(0x7f0000000140)='system_u:object_r:mount_tmp_t:s0\x00', 0xfff0, 0x0)

12:37:30 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'syz_tun\x00', <r3=>0x0})
sendmmsg$inet(r1, &(0x7f0000000180)=[{{&(0x7f0000005340)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000c00)=[{&(0x7f00000000c0)="863c53142513ecdb27a6ab07930037fea1b95edd0a793e20f16d4bdf58466bfcdeabfaa8fae80ddc04eda5586968093568c97afd96e7a0ba5ad491c36c3ce1cdd6b93e6754850640bc5549a55850a142c2b717ff133f1788e2f6a77b27a2e152e2f9bb44f02bf709a71a95e3846188dd87c8615eeeed290bd7fc6b", 0x7b}, {&(0x7f00000001c0)="750285df52d84f62bd50d36115b28f5d4381a38f2a3b2084d1cbf91d8eb46140fd2ac11963561d29d796e90c463746fe5108a3e6f57ba77d67dae81d0efefc12756faf8a5469e43bc19d4c5601c01d06e8b598f97062c3891e8729e62fa3a57b5d8c4c30c109ce108e0287a8cbfd5daf0dfc5fd350e287849a54b8057e9bec9d5e7c45183e5619f539db85c04c27d1e03a8cd46e128ba62c158874e38913a72d70f72c9163967530217b8331630bda75e49d73c7561a5ae381b287ba14bc176b28e8db339cae1350edff2caa23746a9873355128c2883028956f225759f5fc0169ee6e", 0xe3}, {&(0x7f00000002c0)="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", 0x46b}], 0x3, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x2f}, @local}}}], 0x20}}], 0x1, 0x0)

12:37:30 executing program 6:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x12, 0x101}, 0x14}}, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0)

12:37:30 executing program 3:
keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f00000000c0)})
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[])
mkdirat(r0, &(0x7f0000000240)='./file2\x00', 0xda20f2ffc44e3566)
getpeername$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x6e)
syslog(0x2, &(0x7f00000004c0)=""/86, 0x56)
statfs(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=""/221)
fstat(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setreuid(0x0, r2)
syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000200)='./file0\x00', 0xffff, 0x3, &(0x7f0000000640)=[{&(0x7f00000008c0)="600c316ebd5875462c9bea202e0513fe325993e2a4ee961b34d5ef25ea0f3e5592efa79c68f68bc93efed017898686a423ad6debb98350a0a694ef6938348ea4006b6376d017b1c671ff71997b3225d55deb8614ea2d2b8370940bbaf777155abc5bd9e03f8d0b4aa4311771c253352148d388a6861b9653a76961e1449356709b05750c5f01c986c7c5ba565318350bd18174a2381936402a681f7961f5e3e85399f5e51a2a558840c8b982723a9118e7e6c1a366f0eac67b3c8a59b0935b6c0fe3ca", 0xc3, 0xfffffbfffffff801}, {&(0x7f0000000540)="cbd2b6369496d39063193ef75becb33707556018dca079506d733ca4b712d47eff7cdde6147f2397dad0c304127069d00518098c9d9a83893b7bee93c5dab51d37df77de3d184f65778631a333b9ec7f8801ba0279a75abf85b42089e6", 0x5d, 0x7a9311a1}, {&(0x7f00000005c0)="003fab42fc33318144338d63c2651f2a266d5d52838eee0a7c60db79a5984193200a437c11088e6f822fa87b677d2b68f273a2b0566d57610b20c0243a8d299ffe0dafe80d1e7b00cc26f3962d2a942bb137b61034df71d66a66e7a6a139cbeaa5b997fce5a9db14", 0x68, 0x9}], 0x1004, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@data_journal}, {@resgid={'resgid', 0x3d, r1}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}], [{@appraise_type}, {@fowner_lt}, {@uid_eq={'uid', 0x3d, r2}}, {@seclabel}, {@permit_directio}]})
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000380)=""/108, 0x6c)
unlink(&(0x7f0000000480)='./file0\x00')

12:37:30 executing program 7:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0)

12:37:30 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
recvmmsg(r1, &(0x7f0000007940)=[{{0x0, 0x0, 0x0}}], 0x500, 0x20000022, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000})
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x4, 0x0, 0x0, 0x4c5, 0x100}})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_POWER(r3, 0x112, 0xe, 0x0, &(0x7f00000000c0))
fcntl$dupfd(r3, 0x406, r0)

12:37:30 executing program 2:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0)
setxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000), &(0x7f0000000140)='system_u:object_r:mount_tmp_t:s0\x00', 0xfff0, 0x0)

12:37:30 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0)
getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.upper\x00', &(0x7f00000001c0)=""/166, 0xa6)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2008, 0x0)

12:37:30 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'syz_tun\x00', <r3=>0x0})
sendmmsg$inet(r1, &(0x7f0000000180)=[{{&(0x7f0000005340)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000c00)=[{&(0x7f00000000c0)="863c53142513ecdb27a6ab07930037fea1b95edd0a793e20f16d4bdf58466bfcdeabfaa8fae80ddc04eda5586968093568c97afd96e7a0ba5ad491c36c3ce1cdd6b93e6754850640bc5549a55850a142c2b717ff133f1788e2f6a77b27a2e152e2f9bb44f02bf709a71a95e3846188dd87c8615eeeed290bd7fc6b", 0x7b}, {&(0x7f00000001c0)="750285df52d84f62bd50d36115b28f5d4381a38f2a3b2084d1cbf91d8eb46140fd2ac11963561d29d796e90c463746fe5108a3e6f57ba77d67dae81d0efefc12756faf8a5469e43bc19d4c5601c01d06e8b598f97062c3891e8729e62fa3a57b5d8c4c30c109ce108e0287a8cbfd5daf0dfc5fd350e287849a54b8057e9bec9d5e7c45183e5619f539db85c04c27d1e03a8cd46e128ba62c158874e38913a72d70f72c9163967530217b8331630bda75e49d73c7561a5ae381b287ba14bc176b28e8db339cae1350edff2caa23746a9873355128c2883028956f225759f5fc0169ee6e", 0xe3}, {&(0x7f00000002c0)="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", 0x46b}], 0x3, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x2f}, @local}}}], 0x20}}], 0x1, 0x0)

12:37:31 executing program 7:
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x2f, 0xcb, 0x4b, 0x9, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x20, 0x8, 0x941, 0x5}})
r1 = dup(r0)
recvmmsg(r1, &(0x7f0000007940)=[{{0x0, 0x0, 0x0}}], 0x500, 0x20000022, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x4, 0x9, 0x9, 0x9, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}, @mcast1, 0x8000, 0x20, 0xfc05, 0x7f}})
syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x7, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="b22178ef8d035fd13afa95d806a1b883149ca0f1d8c7e938acf3dcd4fba96c424142815612c7b3df12963475864a3434f89ff51c494763e0f6", 0x39, 0x8}], 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='huge=advise,gid=', @ANYRESHEX, @ANYBLOB="2c6d6f64653d30303030303030303030303030303030303030303030362c6d6f64653d30303030303030303030303030303030303030303030302c6d6f64653d30303030303030303030303030303030303030303030362c7375626a5f757365723d2001002c646f6c745f686173682c66756e633d4649524d574152455f434845434b2c646f6e745f686173682c00"])

12:37:31 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0)
read(r0, &(0x7f0000000000), 0x2000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8401, 0x0)
ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f00000000c0)={'ipvlan1\x00'})
write$binfmt_elf64(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40)

[  156.631740] tmpfs: Unknown parameter 'ext3'
[  168.647012] kmemleak: 9 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
BUG: memory leak
unreferenced object 0xffff888041837280 (size 96):
  comm "softirq", pid 0, jiffies 4294821940 (age 20.476s)
  hex dump (first 32 bytes):
    01 00 00 00 00 01 02 ff 05 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000df7b1814>] __skb_ext_alloc+0x19/0x80
    [<00000000230296a2>] skb_ext_add+0x503/0x670
    [<00000000531f7047>] __alloc_skb+0x3c1/0x620
    [<0000000025b6020b>] skb_copy+0x12b/0x2e0
    [<00000000d6b843c7>] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb3e/0x1370
    [<0000000024f605a8>] mac80211_hwsim_tx_frame+0x152/0x1e0
    [<000000007337d150>] mac80211_hwsim_beacon_tx+0x49d/0x900
    [<00000000b2aee645>] __iterate_interfaces+0x1f0/0x530
    [<00000000e94582c9>] ieee80211_iterate_active_interfaces_atomic+0x72/0x180
    [<00000000dd2bb15c>] mac80211_hwsim_beacon+0xd5/0x1a0
    [<0000000011ff018d>] __hrtimer_run_queues+0x5e8/0xb50
    [<0000000004c116b5>] hrtimer_run_softirq+0x148/0x300
    [<000000005cb474e5>] __do_softirq+0x1b6/0x86a
    [<000000008a5644d5>] asm_call_irq_on_stack+0x12/0x20
    [<00000000551ffbc4>] do_softirq_own_stack+0x80/0xa0
    [<00000000133f1902>] irq_exit_rcu+0x110/0x1a0

BUG: memory leak
unreferenced object 0xffff888041837480 (size 96):
  comm "softirq", pid 0, jiffies 4294821940 (age 20.476s)
  hex dump (first 32 bytes):
    01 00 00 00 00 01 02 ff 05 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000df7b1814>] __skb_ext_alloc+0x19/0x80
    [<00000000230296a2>] skb_ext_add+0x503/0x670
    [<00000000531f7047>] __alloc_skb+0x3c1/0x620
    [<0000000025b6020b>] skb_copy+0x12b/0x2e0
    [<00000000d6b843c7>] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb3e/0x1370
    [<0000000024f605a8>] mac80211_hwsim_tx_frame+0x152/0x1e0
    [<000000007337d150>] mac80211_hwsim_beacon_tx+0x49d/0x900
    [<00000000b2aee645>] __iterate_interfaces+0x1f0/0x530
    [<00000000e94582c9>] ieee80211_iterate_active_interfaces_atomic+0x72/0x180
    [<00000000dd2bb15c>] mac80211_hwsim_beacon+0xd5/0x1a0
    [<0000000011ff018d>] __hrtimer_run_queues+0x5e8/0xb50
    [<0000000004c116b5>] hrtimer_run_softirq+0x148/0x300
    [<000000005cb474e5>] __do_softirq+0x1b6/0x86a
    [<000000008a5644d5>] asm_call_irq_on_stack+0x12/0x20
    [<00000000551ffbc4>] do_softirq_own_stack+0x80/0xa0
    [<00000000133f1902>] irq_exit_rcu+0x110/0x1a0

BUG: memory leak
unreferenced object 0xffff888041837180 (size 96):
  comm "softirq", pid 0, jiffies 4294822042 (age 20.374s)
  hex dump (first 32 bytes):
    01 00 00 00 00 01 02 ff 05 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<00000000df7b1814>] __skb_ext_alloc+0x19/0x80
    [<00000000230296a2>] skb_ext_add+0x503/0x670
    [<00000000531f7047>] __alloc_skb+0x3c1/0x620
    [<0000000025b6020b>] skb_copy+0x12b/0x2e0
    [<00000000d6b843c7>] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb3e/0x1370
    [<0000000024f605a8>] mac80211_hwsim_tx_frame+0x152/0x1e0
    [<000000007337d150>] mac80211_hwsim_beacon_tx+0x49d/0x900
    [<00000000b2aee645>] __iterate_interfaces+0x1f0/0x530
    [<00000000e94582c9>] ieee80211_iterate_active_interfaces_atomic+0x72/0x180
    [<00000000dd2bb15c>] mac80211_hwsim_beacon+0xd5/0x1a0
    [<0000000011ff018d>] __hrtimer_run_queues+0x5e8/0xb50
    [<0000000004c116b5>] hrtimer_run_softirq+0x148/0x300
    [<000000005cb474e5>] __do_softirq+0x1b6/0x86a
    [<000000008a5644d5>] asm_call_irq_on_stack+0x12/0x20
    [<00000000551ffbc4>] do_softirq_own_stack+0x80/0xa0
    [<00000000133f1902>] irq_exit_rcu+0x110/0x1a0

BUG: leak checking failed

VM DIAGNOSIS:
12:37:51  Registers:
info registers vcpu 0
RAX=ffffffff83d9f840 RBX=ffffffff84c32280 RCX=ffffffff83d87af8 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff83d9fbff RBP=fffffbfff0986450 RSP=ffffffff84c07e40
R8 =0000000000000001 R9 =ffff88806ce3406b R10=ffffed100d9c680d R11=0000000000000001
R12=0000000000000000 R13=ffffffff85472cc8 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff83d9f84e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fffaeb21e48 CR3=00000000181e8000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000003f9f8072203894be
XMM02=0000000000000000412dcfda00000000 XMM03=0000ff00000000000000000000000000
XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962
XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffffffff83d9f840 RBX=ffff888008533280 RCX=ffffffff83d87af8 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff83d9fbff RBP=ffffed10010a6650 RSP=ffff88800857fe78
R8 =0000000000000001 R9 =ffff88806cf3406b R10=ffffed100d9e680d R11=0000000000000001
R12=0000000000000001 R13=ffffffff85472cc8 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff83d9f84e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000003e000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000003c000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000971000 CR3=00000000181e8000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=0a64656c69616620676e696b63656863
XMM02=31636e75662e6e75522e6c697475736f XMM03=00000000000000000000000000000000
XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962
XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72
XMM08=0169a3c88a7445768a74461d3021879b XMM09=5b2c825a5b0f2b6096dca45ffb3f5bd9
XMM10=aed034e1fb6195479d2206903599465c XMM11=66ccff39ff0e884faed1b4fb86648549
XMM12=423f271c1af74b648cac5a57ea51d752 XMM13=278f330ff4635ca95d2e3e27f3335e52
XMM14=6e61fabc87e87542d8d92452a253b5d5 XMM15=6a6d1ba5fd3562f03b70e6a500269340