Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:7958' (ECDSA) to the list of known hosts. 2022/09/20 13:18:17 fuzzer started 2022/09/20 13:18:18 dialing manager at localhost:34957 syzkaller login: [ 38.257807] cgroup: Unknown subsys name 'net' [ 38.353540] cgroup: Unknown subsys name 'rlimit' 2022/09/20 13:18:31 syscalls: 2215 2022/09/20 13:18:31 code coverage: enabled 2022/09/20 13:18:31 comparison tracing: enabled 2022/09/20 13:18:31 extra coverage: enabled 2022/09/20 13:18:31 setuid sandbox: enabled 2022/09/20 13:18:31 namespace sandbox: enabled 2022/09/20 13:18:31 Android sandbox: enabled 2022/09/20 13:18:31 fault injection: enabled 2022/09/20 13:18:31 leak checking: enabled 2022/09/20 13:18:31 net packet injection: enabled 2022/09/20 13:18:31 net device setup: enabled 2022/09/20 13:18:31 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/20 13:18:31 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/20 13:18:31 USB emulation: enabled 2022/09/20 13:18:31 hci packet injection: enabled 2022/09/20 13:18:31 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220920) 2022/09/20 13:18:31 802.15.4 emulation: enabled 2022/09/20 13:18:31 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/20 13:18:31 fetching corpus: 50, signal 30987/34425 (executing program) 2022/09/20 13:18:31 fetching corpus: 100, signal 48235/52988 (executing program) 2022/09/20 13:18:31 fetching corpus: 150, signal 55584/61676 (executing program) 2022/09/20 13:18:31 fetching corpus: 200, signal 60977/68347 (executing program) 2022/09/20 13:18:32 fetching corpus: 250, signal 66584/75124 (executing program) 2022/09/20 13:18:32 fetching corpus: 300, signal 71249/80942 (executing program) 2022/09/20 13:18:32 fetching corpus: 350, signal 76328/87022 (executing program) 2022/09/20 13:18:32 fetching corpus: 400, signal 81105/92752 (executing program) 2022/09/20 13:18:32 fetching corpus: 450, signal 85500/98119 (executing program) 2022/09/20 13:18:32 fetching corpus: 500, signal 91052/104380 (executing program) 2022/09/20 13:18:32 fetching corpus: 550, signal 95297/109372 (executing program) 2022/09/20 13:18:33 fetching corpus: 600, signal 98944/113793 (executing program) 2022/09/20 13:18:33 fetching corpus: 650, signal 102632/118152 (executing program) 2022/09/20 13:18:33 fetching corpus: 700, signal 104741/121068 (executing program) 2022/09/20 13:18:33 fetching corpus: 750, signal 108151/125092 (executing program) 2022/09/20 13:18:33 fetching corpus: 800, signal 111454/128972 (executing program) 2022/09/20 13:18:33 fetching corpus: 850, signal 113430/131664 (executing program) 2022/09/20 13:18:33 fetching corpus: 900, signal 115368/134309 (executing program) 2022/09/20 13:18:33 fetching corpus: 950, signal 117194/136835 (executing program) 2022/09/20 13:18:34 fetching corpus: 1000, signal 119793/139981 (executing program) 2022/09/20 13:18:34 fetching corpus: 1050, signal 121155/142045 (executing program) 2022/09/20 13:18:34 fetching corpus: 1100, signal 123262/144684 (executing program) 2022/09/20 13:18:34 fetching corpus: 1150, signal 125937/147705 (executing program) 2022/09/20 13:18:34 fetching corpus: 1200, signal 128727/150790 (executing program) 2022/09/20 13:18:34 fetching corpus: 1250, signal 130628/153124 (executing program) 2022/09/20 13:18:34 fetching corpus: 1300, signal 132348/155352 (executing program) 2022/09/20 13:18:34 fetching corpus: 1350, signal 135414/158553 (executing program) 2022/09/20 13:18:35 fetching corpus: 1400, signal 137085/160637 (executing program) 2022/09/20 13:18:35 fetching corpus: 1450, signal 139419/163148 (executing program) 2022/09/20 13:18:35 fetching corpus: 1500, signal 140681/164871 (executing program) 2022/09/20 13:18:35 fetching corpus: 1550, signal 142381/166887 (executing program) 2022/09/20 13:18:35 fetching corpus: 1600, signal 144706/169308 (executing program) 2022/09/20 13:18:35 fetching corpus: 1650, signal 146578/171406 (executing program) 2022/09/20 13:18:36 fetching corpus: 1700, signal 150365/174733 (executing program) 2022/09/20 13:18:36 fetching corpus: 1750, signal 151196/175993 (executing program) 2022/09/20 13:18:36 fetching corpus: 1800, signal 152758/177798 (executing program) 2022/09/20 13:18:36 fetching corpus: 1850, signal 154304/179543 (executing program) 2022/09/20 13:18:36 fetching corpus: 1900, signal 155763/181112 (executing program) 2022/09/20 13:18:36 fetching corpus: 1950, signal 156989/182582 (executing program) 2022/09/20 13:18:36 fetching corpus: 2000, signal 158271/184060 (executing program) 2022/09/20 13:18:36 fetching corpus: 2050, signal 159139/185222 (executing program) 2022/09/20 13:18:37 fetching corpus: 2100, signal 160620/186783 (executing program) 2022/09/20 13:18:37 fetching corpus: 2150, signal 161548/187910 (executing program) 2022/09/20 13:18:37 fetching corpus: 2200, signal 162771/189239 (executing program) 2022/09/20 13:18:37 fetching corpus: 2250, signal 163931/190530 (executing program) 2022/09/20 13:18:37 fetching corpus: 2300, signal 165002/191755 (executing program) 2022/09/20 13:18:37 fetching corpus: 2350, signal 165969/192894 (executing program) 2022/09/20 13:18:37 fetching corpus: 2400, signal 166936/193961 (executing program) 2022/09/20 13:18:37 fetching corpus: 2450, signal 167743/194927 (executing program) 2022/09/20 13:18:38 fetching corpus: 2500, signal 169149/196239 (executing program) 2022/09/20 13:18:38 fetching corpus: 2550, signal 170242/197377 (executing program) 2022/09/20 13:18:38 fetching corpus: 2600, signal 171362/198509 (executing program) 2022/09/20 13:18:38 fetching corpus: 2649, signal 172900/199857 (executing program) 2022/09/20 13:18:38 fetching corpus: 2699, signal 174504/201217 (executing program) 2022/09/20 13:18:38 fetching corpus: 2748, signal 175317/202168 (executing program) 2022/09/20 13:18:39 fetching corpus: 2798, signal 176690/203312 (executing program) 2022/09/20 13:18:39 fetching corpus: 2848, signal 177546/204214 (executing program) 2022/09/20 13:18:39 fetching corpus: 2898, signal 178758/205284 (executing program) 2022/09/20 13:18:39 fetching corpus: 2948, signal 179795/206370 (executing program) 2022/09/20 13:18:39 fetching corpus: 2998, signal 180557/207205 (executing program) 2022/09/20 13:18:39 fetching corpus: 3048, signal 181531/208061 (executing program) 2022/09/20 13:18:39 fetching corpus: 3097, signal 182587/208960 (executing program) 2022/09/20 13:18:39 fetching corpus: 3147, signal 183434/209750 (executing program) 2022/09/20 13:18:40 fetching corpus: 3197, signal 184924/210795 (executing program) 2022/09/20 13:18:40 fetching corpus: 3243, signal 186181/211779 (executing program) 2022/09/20 13:18:40 fetching corpus: 3293, signal 186793/212408 (executing program) 2022/09/20 13:18:40 fetching corpus: 3343, signal 187385/213035 (executing program) 2022/09/20 13:18:40 fetching corpus: 3393, signal 188423/213809 (executing program) 2022/09/20 13:18:40 fetching corpus: 3442, signal 189053/214420 (executing program) 2022/09/20 13:18:40 fetching corpus: 3489, signal 189895/215124 (executing program) 2022/09/20 13:18:40 fetching corpus: 3539, signal 190771/215830 (executing program) 2022/09/20 13:18:41 fetching corpus: 3589, signal 191866/216591 (executing program) 2022/09/20 13:18:41 fetching corpus: 3639, signal 192663/217246 (executing program) 2022/09/20 13:18:41 fetching corpus: 3689, signal 193416/217829 (executing program) 2022/09/20 13:18:41 fetching corpus: 3736, signal 194529/218564 (executing program) 2022/09/20 13:18:41 fetching corpus: 3785, signal 195264/219139 (executing program) 2022/09/20 13:18:41 fetching corpus: 3833, signal 195888/219659 (executing program) 2022/09/20 13:18:41 fetching corpus: 3883, signal 197294/220427 (executing program) 2022/09/20 13:18:42 fetching corpus: 3932, signal 198477/221107 (executing program) 2022/09/20 13:18:42 fetching corpus: 3981, signal 199390/221653 (executing program) 2022/09/20 13:18:42 fetching corpus: 4030, signal 200099/222164 (executing program) 2022/09/20 13:18:42 fetching corpus: 4080, signal 200629/222590 (executing program) 2022/09/20 13:18:42 fetching corpus: 4130, signal 201514/223070 (executing program) 2022/09/20 13:18:42 fetching corpus: 4180, signal 202329/223562 (executing program) 2022/09/20 13:18:42 fetching corpus: 4230, signal 202810/223920 (executing program) 2022/09/20 13:18:43 fetching corpus: 4280, signal 203367/224343 (executing program) 2022/09/20 13:18:43 fetching corpus: 4330, signal 203983/224699 (executing program) 2022/09/20 13:18:43 fetching corpus: 4380, signal 204683/225110 (executing program) 2022/09/20 13:18:43 fetching corpus: 4429, signal 205881/225725 (executing program) 2022/09/20 13:18:43 fetching corpus: 4479, signal 206552/226081 (executing program) 2022/09/20 13:18:43 fetching corpus: 4527, signal 207353/226510 (executing program) 2022/09/20 13:18:43 fetching corpus: 4576, signal 207969/226863 (executing program) 2022/09/20 13:18:43 fetching corpus: 4626, signal 208588/227142 (executing program) 2022/09/20 13:18:44 fetching corpus: 4676, signal 209290/227458 (executing program) 2022/09/20 13:18:44 fetching corpus: 4725, signal 210466/227869 (executing program) 2022/09/20 13:18:44 fetching corpus: 4774, signal 211190/228182 (executing program) 2022/09/20 13:18:44 fetching corpus: 4824, signal 211911/228446 (executing program) 2022/09/20 13:18:44 fetching corpus: 4873, signal 212728/228699 (executing program) 2022/09/20 13:18:44 fetching corpus: 4922, signal 213295/228918 (executing program) 2022/09/20 13:18:44 fetching corpus: 4972, signal 214096/229163 (executing program) 2022/09/20 13:18:45 fetching corpus: 5020, signal 215099/229388 (executing program) 2022/09/20 13:18:45 fetching corpus: 5070, signal 215517/229596 (executing program) 2022/09/20 13:18:45 fetching corpus: 5120, signal 216350/229838 (executing program) 2022/09/20 13:18:45 fetching corpus: 5170, signal 217150/230065 (executing program) 2022/09/20 13:18:45 fetching corpus: 5220, signal 217859/230217 (executing program) 2022/09/20 13:18:45 fetching corpus: 5270, signal 218224/230386 (executing program) 2022/09/20 13:18:45 fetching corpus: 5320, signal 218895/230538 (executing program) 2022/09/20 13:18:46 fetching corpus: 5370, signal 219772/230671 (executing program) 2022/09/20 13:18:46 fetching corpus: 5420, signal 220425/230794 (executing program) 2022/09/20 13:18:46 fetching corpus: 5470, signal 221008/230928 (executing program) 2022/09/20 13:18:46 fetching corpus: 5520, signal 222300/231037 (executing program) 2022/09/20 13:18:46 fetching corpus: 5570, signal 223079/231124 (executing program) 2022/09/20 13:18:46 fetching corpus: 5620, signal 223769/231143 (executing program) 2022/09/20 13:18:46 fetching corpus: 5670, signal 224382/231146 (executing program) 2022/09/20 13:18:47 fetching corpus: 5720, signal 224931/231147 (executing program) 2022/09/20 13:18:47 fetching corpus: 5746, signal 225110/231154 (executing program) 2022/09/20 13:18:47 fetching corpus: 5746, signal 225110/231154 (executing program) 2022/09/20 13:18:49 starting 8 fuzzer processes 13:18:49 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/stat\x00') fstat(r0, &(0x7f0000000080)) 13:18:49 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001600), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000001640)) 13:18:49 executing program 2: fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) 13:18:49 executing program 3: sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) fallocate(r0, 0x0, 0x0, 0x9) [ 70.011915] audit: type=1400 audit(1663679929.914:6): avc: denied { execmem } for pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:18:49 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) 13:18:49 executing program 5: removexattr(0x0, 0x0) 13:18:49 executing program 6: mq_notify(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x4, @thr={0x0, 0x0}}) 13:18:49 executing program 7: r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='(\x00') [ 71.407961] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.409770] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.413010] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.414331] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.422757] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.424410] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.440375] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 71.442176] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 71.443409] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 71.445964] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 71.448586] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 71.450196] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 71.455961] Bluetooth: hci7: HCI_REQ-0x0c1a [ 71.457177] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.463324] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.464816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.466052] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.470395] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.473237] Bluetooth: hci1: HCI_REQ-0x0c1a [ 71.473551] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.482737] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.485587] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.487318] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.492222] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.494109] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.498230] Bluetooth: hci0: HCI_REQ-0x0c1a [ 71.499403] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.506130] Bluetooth: hci2: HCI_REQ-0x0c1a [ 71.542149] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 71.544509] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.548727] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.551087] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 71.552261] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.554287] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 71.556085] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 71.557718] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 71.559033] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.559645] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.563332] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 71.568076] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.573887] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.575352] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 71.575469] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.580178] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 71.580382] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.582799] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 71.582821] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 71.591009] Bluetooth: hci6: HCI_REQ-0x0c1a [ 71.591747] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 71.594044] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.600815] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.602216] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 71.604274] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 71.615620] Bluetooth: hci4: HCI_REQ-0x0c1a [ 71.622037] Bluetooth: hci3: HCI_REQ-0x0c1a [ 71.622752] Bluetooth: hci5: HCI_REQ-0x0c1a [ 73.473505] Bluetooth: hci7: command 0x0409 tx timeout [ 73.537109] Bluetooth: hci1: command 0x0409 tx timeout [ 73.538131] Bluetooth: hci2: command 0x0409 tx timeout [ 73.539100] Bluetooth: hci0: command 0x0409 tx timeout [ 73.601014] Bluetooth: hci6: command 0x0409 tx timeout [ 73.665056] Bluetooth: hci4: command 0x0409 tx timeout [ 73.666224] Bluetooth: hci3: command 0x0409 tx timeout [ 73.729034] Bluetooth: hci5: command 0x0409 tx timeout [ 75.521509] Bluetooth: hci7: command 0x041b tx timeout [ 75.585119] Bluetooth: hci0: command 0x041b tx timeout [ 75.586004] Bluetooth: hci2: command 0x041b tx timeout [ 75.586745] Bluetooth: hci1: command 0x041b tx timeout [ 75.649009] Bluetooth: hci6: command 0x041b tx timeout [ 75.713050] Bluetooth: hci3: command 0x041b tx timeout [ 75.713886] Bluetooth: hci4: command 0x041b tx timeout [ 75.776967] Bluetooth: hci5: command 0x041b tx timeout [ 77.569068] Bluetooth: hci7: command 0x040f tx timeout [ 77.632995] Bluetooth: hci1: command 0x040f tx timeout [ 77.633807] Bluetooth: hci2: command 0x040f tx timeout [ 77.634604] Bluetooth: hci0: command 0x040f tx timeout [ 77.696971] Bluetooth: hci6: command 0x040f tx timeout [ 77.761001] Bluetooth: hci4: command 0x040f tx timeout [ 77.761792] Bluetooth: hci3: command 0x040f tx timeout [ 77.825104] Bluetooth: hci5: command 0x040f tx timeout [ 79.616990] Bluetooth: hci7: command 0x0419 tx timeout [ 79.681068] Bluetooth: hci0: command 0x0419 tx timeout [ 79.681877] Bluetooth: hci2: command 0x0419 tx timeout [ 79.682677] Bluetooth: hci1: command 0x0419 tx timeout [ 79.745076] Bluetooth: hci6: command 0x0419 tx timeout [ 79.809039] Bluetooth: hci3: command 0x0419 tx timeout [ 79.809857] Bluetooth: hci4: command 0x0419 tx timeout [ 79.873024] Bluetooth: hci5: command 0x0419 tx timeout 13:19:47 executing program 6: mq_notify(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x4, @thr={0x0, 0x0}}) [ 127.994538] audit: type=1400 audit(1663679987.897:7): avc: denied { open } for pid=3899 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 127.996020] audit: type=1400 audit(1663679987.897:8): avc: denied { kernel } for pid=3899 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 128.013189] audit: type=1400 audit(1663679987.916:9): avc: denied { write } for pid=3899 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 128.020683] ------------[ cut here ]------------ [ 128.021219] WARNING: CPU: 0 PID: 3902 at kernel/events/core.c:2047 perf_group_detach+0x99e/0x12f0 [ 128.021937] Modules linked in: [ 128.022171] CPU: 0 PID: 3902 Comm: modprobe Not tainted 6.0.0-rc6-next-20220920 #1 [ 128.022771] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 128.023607] RIP: 0010:perf_group_detach+0x99e/0x12f0 [ 128.024113] Code: 85 d5 f8 ff ff e8 a2 59 ee ff 65 44 8b 25 16 b3 aa 7e 31 ff 44 89 e6 e8 40 56 ee ff 45 85 e4 0f 84 0a 05 00 00 e8 82 59 ee ff <0f> 0b e9 a9 f8 ff ff e8 76 59 ee ff 65 8b 1d eb b2 aa 7e 31 ff 89 [ 128.026161] RSP: 0018:ffff88806ce09e60 EFLAGS: 00010046 [ 128.026557] RAX: 0000000080010002 RBX: ffff888008668000 RCX: 0000000000000000 [ 128.027077] RDX: ffff88801d495040 RSI: ffffffff8157c2be RDI: 0000000000000005 [ 128.027621] RBP: ffff888008668000 R08: 0000000000000005 R09: 0000000000000001 [ 128.028145] R10: 0000000000000000 R11: ffffffff865ae01b R12: 0000000000000000 [ 128.028691] R13: ffff888008668090 R14: ffff88806ce3d140 R15: ffff888008668000 [ 128.029241] FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 128.029860] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.030289] CR2: 00007f7800e47008 CR3: 000000001db0e000 CR4: 0000000000350ef0 [ 128.030823] Call Trace: [ 128.031027] [ 128.031205] ? perf_event_idx_default+0x10/0x10 [ 128.031571] ? event_sched_out+0x71c/0xcd0 [ 128.031910] __perf_remove_from_context+0x71e/0xb20 [ 128.032307] event_function+0x297/0x3d0 [ 128.032628] ? perf_output_read+0xf80/0xf80 [ 128.032966] remote_function+0x125/0x1b0 [ 128.033292] __flush_smp_call_function_queue+0x1df/0x5a0 [ 128.033718] ? perf_duration_warn+0x40/0x40 [ 128.034067] __sysvec_call_function_single+0x92/0x3a0 [ 128.034472] sysvec_call_function_single+0x89/0xc0 [ 128.034865] [ 128.035046] [ 128.035231] asm_sysvec_call_function_single+0x16/0x20 [ 128.035635] RIP: 0010:___slab_alloc+0x1cf/0x10c0 [ 128.036008] Code: 77 28 0f 85 24 04 00 00 49 c7 47 28 00 00 00 00 48 c7 c6 dd 0c 78 81 4c 89 ff e8 1c 1e b2 ff 48 83 3c 24 00 0f 85 53 01 00 00 <48> 83 7b 18 00 0f 84 ef 04 00 00 9c 41 5d fa 41 81 e5 00 02 00 00 [ 128.037348] RSP: 0018:ffff88801b0d7880 EFLAGS: 00000202 [ 128.037746] RAX: 00000000000009c7 RBX: ffff88806ce3c300 RCX: 1ffffffff0b602a9 [ 128.038279] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 128.038797] RBP: ffff888007c4f780 R08: 0000000000000001 R09: 0000000000000001 [ 128.039305] R10: 0000000000000001 R11: 0000000000000001 R12: 00000000ffffffff [ 128.039815] R13: 0000000000000000 R14: ffff88801d495040 R15: ffff88806ce3c320 [ 128.040364] ? __create_object+0x3d/0xc10 [ 128.040681] ? lock_release+0x3b2/0x750 [ 128.040976] ? kmem_cache_alloc+0x43/0x3e0 [ 128.041293] ? lock_is_held_type+0xd7/0x130 [ 128.041621] ? __create_object+0x3d/0xc10 [ 128.041940] __slab_alloc.constprop.0+0x45/0x90 [ 128.042290] ? __create_object+0x3d/0xc10 [ 128.042589] kmem_cache_alloc+0x2f1/0x3e0 [ 128.042909] __create_object+0x3d/0xc10 [ 128.043214] ? kasan_set_track+0x21/0x30 [ 128.043522] kmem_cache_alloc+0x23c/0x3e0 [ 128.043840] security_file_alloc+0x34/0x170 [ 128.044173] __alloc_file+0xb6/0x240 [ 128.044451] alloc_empty_file+0x6d/0x170 [ 128.044759] path_openat+0xd4/0x2800 [ 128.045052] ? path_lookupat+0x850/0x850 [ 128.045352] do_filp_open+0x1b6/0x410 [ 128.045647] ? may_open_dev+0xf0/0xf0 [ 128.045944] ? find_held_lock+0x2c/0x110 [ 128.046249] ? lock_release+0x3b2/0x750 [ 128.046555] ? do_raw_spin_lock+0x121/0x260 [ 128.046889] ? rwlock_bug.part.0+0x90/0x90 [ 128.047218] ? _find_next_bit+0x1e5/0x260 [ 128.047539] ? _raw_spin_unlock+0x24/0x40 [ 128.047851] ? alloc_fd+0x2f0/0x700 [ 128.048142] do_sys_openat2+0x171/0x4c0 [ 128.048452] ? build_open_flags+0x6f0/0x6f0 [ 128.048788] ? handle_mm_fault+0x6fd/0xa20 [ 128.049110] ? up_write+0x480/0x480 [ 128.049396] __x64_sys_openat+0x13f/0x1f0 [ 128.049707] ? __ia32_compat_sys_open+0x1c0/0x1c0 [ 128.050085] ? syscall_enter_from_user_mode+0x1d/0x50 [ 128.050460] ? syscall_enter_from_user_mode+0x1d/0x50 [ 128.050856] do_syscall_64+0x3b/0x90 [ 128.051142] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.051541] RIP: 0033:0x7f7800e66b84 [ 128.051822] Code: f9 41 89 f0 41 83 e2 40 75 2c 89 f0 25 00 00 41 00 3d 00 00 41 00 74 1e 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 2c c3 0f 1f 00 48 8d 44 24 08 c7 44 24 b8 10 [ 128.053141] RSP: 002b:00007ffdd416fa38 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 128.053644] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7800e66b84 [ 128.054123] RDX: 0000000000080000 RSI: 00007f7800e77e00 RDI: 00000000ffffff9c [ 128.054593] RBP: 00007ffdd416faa0 R08: 0000000000080000 R09: 00007f7800e77e00 [ 128.055064] R10: 0000000000000000 R11: 0000000000000287 R12: 00007ffdd416faff [ 128.055584] R13: 00007f7800e77e00 R14: 00007f7800e76060 R15: 00007ffdd416fb10 [ 128.056135] [ 128.056311] irq event stamp: 2504 [ 128.056571] hardirqs last enabled at (2503): [] ___slab_alloc+0x327/0x10c0 [ 128.057191] hardirqs last disabled at (2504): [] sysvec_call_function_single+0xb/0xc0 [ 128.057896] softirqs last enabled at (1992): [] __irq_exit_rcu+0x11b/0x180 [ 128.058539] softirqs last disabled at (1951): [] __irq_exit_rcu+0x11b/0x180 [ 128.059175] ---[ end trace 0000000000000000 ]--- [ 128.059523] ------------[ cut here ]------------ [ 128.059837] WARNING: CPU: 0 PID: 3902 at kernel/events/core.c:2183 perf_group_detach+0x9c7/0x12f0 [ 128.060427] Modules linked in: [ 128.060648] CPU: 0 PID: 3902 Comm: modprobe Tainted: G W 6.0.0-rc6-next-20220920 #1 [ 128.061240] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 128.061986] RIP: 0010:perf_group_detach+0x9c7/0x12f0 [ 128.062329] Code: ff 0f 0b e9 a9 f8 ff ff e8 76 59 ee ff 65 8b 1d eb b2 aa 7e 31 ff 89 de e8 16 56 ee ff 85 db 0f 84 86 04 00 00 e8 59 59 ee ff <0f> 0b e9 0e fa ff ff e8 4d 59 ee ff 48 8b 7c 24 20 48 81 c7 f8 00 [ 128.063504] RSP: 0018:ffff88806ce09e60 EFLAGS: 00010046 [ 128.063855] RAX: 0000000080010002 RBX: 0000000000000000 RCX: 0000000000000000 [ 128.064326] RDX: ffff88801d495040 RSI: ffffffff8157c2e7 RDI: 0000000000000005 [ 128.064798] RBP: ffff888008668000 R08: 0000000000000005 R09: 0000000000000001 [ 128.065265] R10: 0000000000000000 R11: ffffffff865ae01b R12: ffff888008668000 [ 128.065730] R13: ffff888008668000 R14: ffff88806ce3d140 R15: ffff888008668000 [ 128.066209] FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 128.066736] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.067126] CR2: 00007f7800e47008 CR3: 000000001db0e000 CR4: 0000000000350ef0 [ 128.067597] Call Trace: [ 128.067777] [ 128.067934] ? perf_event_idx_default+0x10/0x10 [ 128.068256] ? event_sched_out+0x71c/0xcd0 [ 128.068545] __perf_remove_from_context+0x71e/0xb20 [ 128.068885] event_function+0x297/0x3d0 [ 128.069170] ? perf_output_read+0xf80/0xf80 [ 128.069478] remote_function+0x125/0x1b0 [ 128.069759] __flush_smp_call_function_queue+0x1df/0x5a0 [ 128.070130] ? perf_duration_warn+0x40/0x40 [ 128.070428] __sysvec_call_function_single+0x92/0x3a0 [ 128.070776] sysvec_call_function_single+0x89/0xc0 [ 128.071112] [ 128.071270] [ 128.071426] asm_sysvec_call_function_single+0x16/0x20 [ 128.071776] RIP: 0010:___slab_alloc+0x1cf/0x10c0 [ 128.072100] Code: 77 28 0f 85 24 04 00 00 49 c7 47 28 00 00 00 00 48 c7 c6 dd 0c 78 81 4c 89 ff e8 1c 1e b2 ff 48 83 3c 24 00 0f 85 53 01 00 00 <48> 83 7b 18 00 0f 84 ef 04 00 00 9c 41 5d fa 41 81 e5 00 02 00 00 [ 128.073271] RSP: 0018:ffff88801b0d7880 EFLAGS: 00000202 [ 128.073623] RAX: 00000000000009c7 RBX: ffff88806ce3c300 RCX: 1ffffffff0b602a9 [ 128.074110] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 128.074575] RBP: ffff888007c4f780 R08: 0000000000000001 R09: 0000000000000001 [ 128.075044] R10: 0000000000000001 R11: 0000000000000001 R12: 00000000ffffffff [ 128.075505] R13: 0000000000000000 R14: ffff88801d495040 R15: ffff88806ce3c320 [ 128.075992] ? __create_object+0x3d/0xc10 [ 128.076273] ? lock_release+0x3b2/0x750 [ 128.076544] ? kmem_cache_alloc+0x43/0x3e0 [ 128.076838] ? lock_is_held_type+0xd7/0x130 [ 128.077128] ? __create_object+0x3d/0xc10 [ 128.077405] __slab_alloc.constprop.0+0x45/0x90 [ 128.077721] ? __create_object+0x3d/0xc10 [ 128.078014] kmem_cache_alloc+0x2f1/0x3e0 [ 128.078299] __create_object+0x3d/0xc10 [ 128.078571] ? kasan_set_track+0x21/0x30 [ 128.078853] kmem_cache_alloc+0x23c/0x3e0 [ 128.079141] security_file_alloc+0x34/0x170 [ 128.079435] __alloc_file+0xb6/0x240 [ 128.079691] alloc_empty_file+0x6d/0x170 [ 128.079969] path_openat+0xd4/0x2800 [ 128.080234] ? path_lookupat+0x850/0x850 [ 128.080518] do_filp_open+0x1b6/0x410 [ 128.080780] ? may_open_dev+0xf0/0xf0 [ 128.081040] ? find_held_lock+0x2c/0x110 [ 128.081322] ? lock_release+0x3b2/0x750 [ 128.081598] ? do_raw_spin_lock+0x121/0x260 [ 128.081898] ? rwlock_bug.part.0+0x90/0x90 [ 128.082191] ? _find_next_bit+0x1e5/0x260 [ 128.082480] ? _raw_spin_unlock+0x24/0x40 [ 128.082764] ? alloc_fd+0x2f0/0x700 [ 128.083028] do_sys_openat2+0x171/0x4c0 [ 128.083304] ? build_open_flags+0x6f0/0x6f0 [ 128.083601] ? handle_mm_fault+0x6fd/0xa20 [ 128.083884] ? up_write+0x480/0x480 [ 128.084139] __x64_sys_openat+0x13f/0x1f0 [ 128.084421] ? __ia32_compat_sys_open+0x1c0/0x1c0 [ 128.084752] ? syscall_enter_from_user_mode+0x1d/0x50 [ 128.085098] ? syscall_enter_from_user_mode+0x1d/0x50 [ 128.085446] do_syscall_64+0x3b/0x90 [ 128.085709] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.086075] RIP: 0033:0x7f7800e66b84 [ 128.086327] Code: f9 41 89 f0 41 83 e2 40 75 2c 89 f0 25 00 00 41 00 3d 00 00 41 00 74 1e 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 2c c3 0f 1f 00 48 8d 44 24 08 c7 44 24 b8 10 [ 128.087498] RSP: 002b:00007ffdd416fa38 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 128.087994] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7800e66b84 [ 128.088464] RDX: 0000000000080000 RSI: 00007f7800e77e00 RDI: 00000000ffffff9c [ 128.088934] RBP: 00007ffdd416faa0 R08: 0000000000080000 R09: 00007f7800e77e00 [ 128.089402] R10: 0000000000000000 R11: 0000000000000287 R12: 00007ffdd416faff [ 128.089864] R13: 00007f7800e77e00 R14: 00007f7800e76060 R15: 00007ffdd416fb10 [ 128.090354] [ 128.090519] irq event stamp: 2504 [ 128.090749] hardirqs last enabled at (2503): [] ___slab_alloc+0x327/0x10c0 [ 128.091312] hardirqs last disabled at (2504): [] sysvec_call_function_single+0xb/0xc0 [ 128.091942] softirqs last enabled at (1992): [] __irq_exit_rcu+0x11b/0x180 [ 128.092512] softirqs last disabled at (1951): [] __irq_exit_rcu+0x11b/0x180 [ 128.093079] ---[ end trace 0000000000000000 ]--- [ 128.093416] ------------[ cut here ]------------ [ 128.093729] WARNING: CPU: 0 PID: 3902 at kernel/events/core.c:655 perf_event_update_sibling_time+0xd5/0x4d0 [ 128.094381] Modules linked in: [ 128.094599] CPU: 0 PID: 3902 Comm: modprobe Tainted: G W 6.0.0-rc6-next-20220920 #1 [ 128.095185] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 128.095916] RIP: 0010:perf_event_update_sibling_time+0xd5/0x4d0 [ 128.096317] Code: 5e 41 5f e9 7d d7 f0 ff e8 78 d7 f0 ff 65 8b 1d ed 30 ad 7e 31 ff 89 de e8 18 d4 f0 ff 85 db 0f 84 d3 02 00 00 e8 5b d7 f0 ff <0f> 0b eb 97 e8 52 d7 f0 ff 48 8d 7d 10 48 b8 00 00 00 00 00 fc ff [ 128.097490] RSP: 0018:ffff88806ce09e58 EFLAGS: 00010046 [ 128.097839] RAX: 0000000080010002 RBX: 0000000000000000 RCX: 0000000000000000 [ 128.098325] RDX: ffff88801d495040 RSI: ffffffff815544e5 RDI: 0000000000000005 [ 128.098789] RBP: ffff888008668000 R08: 0000000000000005 R09: 0000000000000001 [ 128.099256] R10: 0000000000000000 R11: ffffffff865ae01b R12: 0000000000000000 [ 128.099722] R13: ffff8880086680a8 R14: 0000000000000001 R15: 0000000000000001 [ 128.100193] FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 128.100722] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.101105] CR2: 00007f7800e47008 CR3: 000000001db0e000 CR4: 0000000000350ef0 [ 128.101571] Call Trace: [ 128.101748] [ 128.101906] ? lock_is_held_type+0xd7/0x130 [ 128.102193] ? perf_event_update_time+0x285/0x380 [ 128.102525] list_del_event+0x524/0x860 [ 128.102802] __perf_remove_from_context+0xd2/0xb20 [ 128.103141] event_function+0x297/0x3d0 [ 128.103413] ? perf_output_read+0xf80/0xf80 [ 128.103707] remote_function+0x125/0x1b0 [ 128.103989] __flush_smp_call_function_queue+0x1df/0x5a0 [ 128.104349] ? perf_duration_warn+0x40/0x40 [ 128.104647] __sysvec_call_function_single+0x92/0x3a0 [ 128.104997] sysvec_call_function_single+0x89/0xc0 [ 128.105333] [ 128.105491] [ 128.105650] asm_sysvec_call_function_single+0x16/0x20 [ 128.106010] RIP: 0010:___slab_alloc+0x1cf/0x10c0 [ 128.106331] Code: 77 28 0f 85 24 04 00 00 49 c7 47 28 00 00 00 00 48 c7 c6 dd 0c 78 81 4c 89 ff e8 1c 1e b2 ff 48 83 3c 24 00 0f 85 53 01 00 00 <48> 83 7b 18 00 0f 84 ef 04 00 00 9c 41 5d fa 41 81 e5 00 02 00 00 [ 128.107502] RSP: 0018:ffff88801b0d7880 EFLAGS: 00000202 [ 128.107852] RAX: 00000000000009c7 RBX: ffff88806ce3c300 RCX: 1ffffffff0b602a9 [ 128.108316] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 128.108787] RBP: ffff888007c4f780 R08: 0000000000000001 R09: 0000000000000001 [ 128.109253] R10: 0000000000000001 R11: 0000000000000001 R12: 00000000ffffffff [ 128.109720] R13: 0000000000000000 R14: ffff88801d495040 R15: ffff88806ce3c320 [ 128.110214] ? __create_object+0x3d/0xc10 [ 128.110498] ? lock_release+0x3b2/0x750 [ 128.110772] ? kmem_cache_alloc+0x43/0x3e0 [ 128.111065] ? lock_is_held_type+0xd7/0x130 [ 128.111355] ? __create_object+0x3d/0xc10 [ 128.111639] __slab_alloc.constprop.0+0x45/0x90 [ 128.111957] ? __create_object+0x3d/0xc10 [ 128.112235] kmem_cache_alloc+0x2f1/0x3e0 [ 128.112520] __create_object+0x3d/0xc10 [ 128.112794] ? kasan_set_track+0x21/0x30 [ 128.113077] kmem_cache_alloc+0x23c/0x3e0 [ 128.113364] security_file_alloc+0x34/0x170 [ 128.113664] __alloc_file+0xb6/0x240 [ 128.113924] alloc_empty_file+0x6d/0x170 [ 128.114203] path_openat+0xd4/0x2800 [ 128.114466] ? path_lookupat+0x850/0x850 [ 128.114753] do_filp_open+0x1b6/0x410 [ 128.115016] ? may_open_dev+0xf0/0xf0 [ 128.115274] ? find_held_lock+0x2c/0x110 [ 128.115555] ? lock_release+0x3b2/0x750 [ 128.115831] ? do_raw_spin_lock+0x121/0x260 [ 128.116129] ? rwlock_bug.part.0+0x90/0x90 [ 128.116467] ? _find_next_bit+0x1e5/0x260 [ 128.116793] ? _raw_spin_unlock+0x24/0x40 [ 128.117113] ? alloc_fd+0x2f0/0x700 [ 128.117410] do_sys_openat2+0x171/0x4c0 [ 128.117723] ? build_open_flags+0x6f0/0x6f0 [ 128.118048] ? handle_mm_fault+0x6fd/0xa20 [ 128.118347] ? up_write+0x480/0x480 [ 128.118619] __x64_sys_openat+0x13f/0x1f0 [ 128.118918] ? __ia32_compat_sys_open+0x1c0/0x1c0 [ 128.119265] ? syscall_enter_from_user_mode+0x1d/0x50 [ 128.119629] ? syscall_enter_from_user_mode+0x1d/0x50 [ 128.120018] do_syscall_64+0x3b/0x90 [ 128.120302] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.120655] RIP: 0033:0x7f7800e66b84 [ 128.120909] Code: f9 41 89 f0 41 83 e2 40 75 2c 89 f0 25 00 00 41 00 3d 00 00 41 00 74 1e 44 89 c2 4c 89 ce bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 2c c3 0f 1f 00 48 8d 44 24 08 c7 44 24 b8 10 [ 128.122106] RSP: 002b:00007ffdd416fa38 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 128.122604] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7800e66b84 [ 128.123074] RDX: 0000000000080000 RSI: 00007f7800e77e00 RDI: 00000000ffffff9c [ 128.123544] RBP: 00007ffdd416faa0 R08: 0000000000080000 R09: 00007f7800e77e00 [ 128.124008] R10: 0000000000000000 R11: 0000000000000287 R12: 00007ffdd416faff [ 128.124473] R13: 00007f7800e77e00 R14: 00007f7800e76060 R15: 00007ffdd416fb10 [ 128.124960] [ 128.125123] irq event stamp: 2504 [ 128.125353] hardirqs last enabled at (2503): [] ___slab_alloc+0x327/0x10c0 [ 128.125929] hardirqs last disabled at (2504): [] sysvec_call_function_single+0xb/0xc0 [ 128.126548] softirqs last enabled at (1992): [] __irq_exit_rcu+0x11b/0x180 [ 128.127114] softirqs last disabled at (1951): [] __irq_exit_rcu+0x11b/0x180 [ 128.127677] ---[ end trace 0000000000000000 ]--- 13:19:48 executing program 6: mq_notify(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x4, @thr={0x0, 0x0}}) 13:19:48 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001600), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000001640)) 13:19:48 executing program 6: mq_notify(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x4, @thr={0x0, 0x0}}) 13:19:48 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001600), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000001640)) 13:19:48 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000001ac0)={'sit0\x00', 0x0}) 13:19:48 executing program 5: removexattr(0x0, 0x0) 13:19:48 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001600), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000001640)) [ 128.986750] ------------[ cut here ]------------ [ 128.986771] [ 128.986774] ====================================================== [ 128.986778] WARNING: possible circular locking dependency detected [ 128.986783] 6.0.0-rc6-next-20220920 #1 Tainted: G W [ 128.986790] ------------------------------------------------------ [ 128.986793] syz-executor.3/3957 is trying to acquire lock: [ 128.986800] ffffffff853faab8 ((console_sem).lock){-...}-{2:2}, at: down_trylock+0xe/0x70 [ 128.986835] [ 128.986835] but task is already holding lock: [ 128.986838] ffff888010363020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 128.986865] [ 128.986865] which lock already depends on the new lock. [ 128.986865] [ 128.986868] [ 128.986868] the existing dependency chain (in reverse order) is: [ 128.986872] [ 128.986872] -> #3 (&ctx->lock){....}-{2:2}: [ 128.986888] _raw_spin_lock+0x2a/0x40 [ 128.986910] __perf_event_task_sched_out+0x53b/0x18d0 [ 128.986923] __schedule+0xedd/0x2470 [ 128.986935] schedule+0xda/0x1b0 [ 128.986947] exit_to_user_mode_prepare+0x114/0x1a0 [ 128.986959] syscall_exit_to_user_mode+0x19/0x40 [ 128.986970] do_syscall_64+0x48/0x90 [ 128.986986] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.987005] [ 128.987005] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 128.987018] _raw_spin_lock_nested+0x30/0x40 [ 128.987035] raw_spin_rq_lock_nested+0x1e/0x30 [ 128.987048] task_fork_fair+0x63/0x4d0 [ 128.987064] sched_cgroup_fork+0x3d0/0x540 [ 128.987078] copy_process+0x4183/0x6e20 [ 128.987088] kernel_clone+0xe7/0x890 [ 128.987098] user_mode_thread+0xad/0xf0 [ 128.987108] rest_init+0x24/0x250 [ 128.987118] arch_call_rest_init+0xf/0x14 [ 128.987133] start_kernel+0x4c1/0x4e6 [ 128.987145] secondary_startup_64_no_verify+0xe0/0xeb [ 128.987159] [ 128.987159] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 128.987172] _raw_spin_lock_irqsave+0x39/0x60 [ 128.987189] try_to_wake_up+0xab/0x1930 [ 128.987202] up+0x75/0xb0 [ 128.987214] __up_console_sem+0x6e/0x80 [ 128.987229] console_unlock+0x46a/0x590 [ 128.987245] do_con_write+0xc05/0x1d50 [ 128.987257] con_write+0x21/0x40 [ 128.987267] n_tty_write+0x4d4/0xfe0 [ 128.987280] file_tty_write.constprop.0+0x49c/0x8f0 [ 128.987292] vfs_write+0x9c3/0xd90 [ 128.987310] ksys_write+0x127/0x250 [ 128.987327] do_syscall_64+0x3b/0x90 [ 128.987342] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.987361] [ 128.987361] -> #0 ((console_sem).lock){-...}-{2:2}: [ 128.987374] __lock_acquire+0x2a02/0x5e70 [ 128.987390] lock_acquire+0x1a2/0x530 [ 128.987406] _raw_spin_lock_irqsave+0x39/0x60 [ 128.987423] down_trylock+0xe/0x70 [ 128.987435] __down_trylock_console_sem+0x3b/0xd0 [ 128.987451] vprintk_emit+0x16b/0x560 [ 128.987467] vprintk+0x84/0xa0 [ 128.987483] _printk+0xba/0xf1 [ 128.987493] report_bug.cold+0x72/0xab [ 128.987508] handle_bug+0x3c/0x70 [ 128.987523] exc_invalid_op+0x14/0x50 [ 128.987539] asm_exc_invalid_op+0x16/0x20 [ 128.987549] group_sched_out.part.0+0x2c7/0x460 [ 128.987560] ctx_sched_out+0x8f1/0xc10 [ 128.987570] __perf_event_task_sched_out+0x6d0/0x18d0 [ 128.987582] __schedule+0xedd/0x2470 [ 128.987594] schedule+0xda/0x1b0 [ 128.987606] exit_to_user_mode_prepare+0x114/0x1a0 [ 128.987617] syscall_exit_to_user_mode+0x19/0x40 [ 128.987627] do_syscall_64+0x48/0x90 [ 128.987643] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.987661] [ 128.987661] other info that might help us debug this: [ 128.987661] [ 128.987664] Chain exists of: [ 128.987664] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 128.987664] [ 128.987679] Possible unsafe locking scenario: [ 128.987679] [ 128.987681] CPU0 CPU1 [ 128.987684] ---- ---- [ 128.987686] lock(&ctx->lock); [ 128.987691] lock(&rq->__lock); [ 128.987698] lock(&ctx->lock); [ 128.987704] lock((console_sem).lock); [ 128.987710] [ 128.987710] *** DEADLOCK *** [ 128.987710] [ 128.987712] 2 locks held by syz-executor.3/3957: [ 128.987718] #0: ffff88806ce37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 128.987746] #1: ffff888010363020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 128.987773] [ 128.987773] stack backtrace: [ 128.987777] CPU: 0 PID: 3957 Comm: syz-executor.3 Tainted: G W 6.0.0-rc6-next-20220920 #1 [ 128.987790] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 128.987798] Call Trace: [ 128.987801] [ 128.987805] dump_stack_lvl+0x8b/0xb3 [ 128.987822] check_noncircular+0x263/0x2e0 [ 128.987838] ? format_decode+0x26c/0xb50 [ 128.987853] ? print_circular_bug+0x450/0x450 [ 128.987870] ? enable_ptr_key_workfn+0x20/0x20 [ 128.987886] ? format_decode+0x26c/0xb50 [ 128.987902] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 128.987919] __lock_acquire+0x2a02/0x5e70 [ 128.987940] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 128.987963] lock_acquire+0x1a2/0x530 [ 128.987979] ? down_trylock+0xe/0x70 [ 128.987994] ? lock_release+0x750/0x750 [ 128.988014] ? vprintk+0x84/0xa0 [ 128.988031] _raw_spin_lock_irqsave+0x39/0x60 [ 128.988049] ? down_trylock+0xe/0x70 [ 128.988062] down_trylock+0xe/0x70 [ 128.988075] ? vprintk+0x84/0xa0 [ 128.988092] __down_trylock_console_sem+0x3b/0xd0 [ 128.988109] vprintk_emit+0x16b/0x560 [ 128.988128] vprintk+0x84/0xa0 [ 128.988145] _printk+0xba/0xf1 [ 128.988155] ? record_print_text.cold+0x16/0x16 [ 128.988170] ? report_bug.cold+0x66/0xab [ 128.988186] ? group_sched_out.part.0+0x2c7/0x460 [ 128.988198] report_bug.cold+0x72/0xab [ 128.988217] handle_bug+0x3c/0x70 [ 128.988236] exc_invalid_op+0x14/0x50 [ 128.988252] asm_exc_invalid_op+0x16/0x20 [ 128.988263] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 128.988276] Code: 5e 41 5f e9 9b b9 ef ff e8 96 b9 ef ff 65 8b 1d 0b 13 ac 7e 31 ff 89 de e8 36 b6 ef ff 85 db 0f 84 8a 00 00 00 e8 79 b9 ef ff <0f> 0b e9 a5 fe ff ff e8 6d b9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 128.988288] RSP: 0018:ffff888041fc7c48 EFLAGS: 00010006 [ 128.988297] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 128.988304] RDX: ffff88801f011ac0 RSI: ffffffff815662c7 RDI: 0000000000000005 [ 128.988312] RBP: ffff888008668b90 R08: 0000000000000005 R09: 0000000000000001 [ 128.988320] R10: 0000000000000000 R11: ffffffff865ae01b R12: ffff888010363000 [ 128.988328] R13: ffff88806ce3d140 R14: ffffffff8547cec0 R15: 0000000000000002 [ 128.988339] ? group_sched_out.part.0+0x2c7/0x460 [ 128.988352] ? group_sched_out.part.0+0x2c7/0x460 [ 128.988365] ctx_sched_out+0x8f1/0xc10 [ 128.988378] __perf_event_task_sched_out+0x6d0/0x18d0 [ 128.988393] ? lock_is_held_type+0xd7/0x130 [ 128.988406] ? __perf_cgroup_move+0x160/0x160 [ 128.988418] ? set_next_entity+0x304/0x550 [ 128.988435] ? update_curr+0x267/0x740 [ 128.988453] ? lock_is_held_type+0xd7/0x130 [ 128.988465] __schedule+0xedd/0x2470 [ 128.988481] ? io_schedule_timeout+0x150/0x150 [ 128.988496] ? rcu_read_lock_sched_held+0x3e/0x80 [ 128.988516] schedule+0xda/0x1b0 [ 128.988529] exit_to_user_mode_prepare+0x114/0x1a0 [ 128.988541] syscall_exit_to_user_mode+0x19/0x40 [ 128.988553] do_syscall_64+0x48/0x90 [ 128.988569] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.988589] RIP: 0033:0x7faa56444b19 [ 128.988597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 128.988608] RSP: 002b:00007faa539ba218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 128.988619] RAX: 0000000000000001 RBX: 00007faa56557f68 RCX: 00007faa56444b19 [ 128.988626] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007faa56557f6c [ 128.988634] RBP: 00007faa56557f60 R08: 000000000000000e R09: 0000000000000000 [ 128.988641] R10: 0000000000000003 R11: 0000000000000246 R12: 00007faa56557f6c [ 128.988648] R13: 00007fffbcaa266f R14: 00007faa539ba300 R15: 0000000000022000 [ 128.988661] [ 129.040780] WARNING: CPU: 0 PID: 3957 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 129.041382] Modules linked in: [ 129.041600] CPU: 0 PID: 3957 Comm: syz-executor.3 Tainted: G W 6.0.0-rc6-next-20220920 #1 [ 129.042229] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 129.042967] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 129.043325] Code: 5e 41 5f e9 9b b9 ef ff e8 96 b9 ef ff 65 8b 1d 0b 13 ac 7e 31 ff 89 de e8 36 b6 ef ff 85 db 0f 84 8a 00 00 00 e8 79 b9 ef ff <0f> 0b e9 a5 fe ff ff e8 6d b9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 129.044510] RSP: 0018:ffff888041fc7c48 EFLAGS: 00010006 [ 129.044862] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 129.045332] RDX: ffff88801f011ac0 RSI: ffffffff815662c7 RDI: 0000000000000005 [ 129.045801] RBP: ffff888008668b90 R08: 0000000000000005 R09: 0000000000000001 [ 129.046278] R10: 0000000000000000 R11: ffffffff865ae01b R12: ffff888010363000 [ 129.046741] R13: ffff88806ce3d140 R14: ffffffff8547cec0 R15: 0000000000000002 [ 129.047210] FS: 00007faa539ba700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 129.047733] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.048118] CR2: 000055e5733120e0 CR3: 0000000040aac000 CR4: 0000000000350ef0 [ 129.048584] Call Trace: [ 129.048761] [ 129.048918] ctx_sched_out+0x8f1/0xc10 [ 129.049182] __perf_event_task_sched_out+0x6d0/0x18d0 [ 129.049529] ? lock_is_held_type+0xd7/0x130 [ 129.049817] ? __perf_cgroup_move+0x160/0x160 [ 129.050122] ? set_next_entity+0x304/0x550 [ 129.050411] ? update_curr+0x267/0x740 [ 129.050680] ? lock_is_held_type+0xd7/0x130 [ 129.050967] __schedule+0xedd/0x2470 [ 129.051225] ? io_schedule_timeout+0x150/0x150 [ 129.051534] ? rcu_read_lock_sched_held+0x3e/0x80 [ 129.051864] schedule+0xda/0x1b0 [ 129.052099] exit_to_user_mode_prepare+0x114/0x1a0 [ 129.052428] syscall_exit_to_user_mode+0x19/0x40 [ 129.052745] do_syscall_64+0x48/0x90 [ 129.053004] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 129.053355] RIP: 0033:0x7faa56444b19 [ 129.053605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 129.054794] RSP: 002b:00007faa539ba218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 129.055290] RAX: 0000000000000001 RBX: 00007faa56557f68 RCX: 00007faa56444b19 [ 129.055756] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007faa56557f6c [ 129.056220] RBP: 00007faa56557f60 R08: 000000000000000e R09: 0000000000000000 [ 129.056686] R10: 0000000000000003 R11: 0000000000000246 R12: 00007faa56557f6c [ 129.057152] R13: 00007fffbcaa266f R14: 00007faa539ba300 R15: 0000000000022000 [ 129.057621] [ 129.057781] irq event stamp: 676 [ 129.058010] hardirqs last enabled at (675): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 129.058622] hardirqs last disabled at (676): [] __schedule+0x1225/0x2470 [ 129.059162] softirqs last enabled at (550): [] __irq_exit_rcu+0x11b/0x180 [ 129.059720] softirqs last disabled at (495): [] __irq_exit_rcu+0x11b/0x180 [ 129.060277] ---[ end trace 0000000000000000 ]--- [ 129.170609] syz-executor.2 (3962) used greatest stack depth: 24344 bytes left 13:19:49 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/stat\x00') fstat(r0, &(0x7f0000000080)) 13:19:49 executing program 2: fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) 13:19:49 executing program 7: r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='(\x00') 13:19:49 executing program 3: sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) fallocate(r0, 0x0, 0x0, 0x9) 13:19:49 executing program 5: removexattr(0x0, 0x0) 13:19:49 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) 13:19:49 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000280)=0x7, 0x4) 13:19:49 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x19) 13:19:49 executing program 6: sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) fallocate(r0, 0x0, 0x0, 0x9) 13:19:49 executing program 7: r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='(\x00') 13:19:49 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x19) 13:19:49 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) 13:19:49 executing program 5: removexattr(0x0, 0x0) 13:19:49 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/stat\x00') fstat(r0, &(0x7f0000000080)) 13:19:49 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x19) 13:19:49 executing program 6: sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) fallocate(r0, 0x0, 0x0, 0x9) 13:19:49 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) 13:19:49 executing program 7: r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='(\x00') 13:19:49 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000000c0)={0x10000, 0x0, 0xfffffffd}) 13:19:49 executing program 3: sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) fallocate(r0, 0x0, 0x0, 0x9) 13:19:49 executing program 2: fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) 13:19:49 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x19) 13:19:49 executing program 6: sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) fallocate(r0, 0x0, 0x0, 0x9) 13:19:49 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/stat\x00') fstat(r0, &(0x7f0000000080)) 13:19:49 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}]}}) 13:19:49 executing program 7: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) 13:19:49 executing program 3: sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) fallocate(r0, 0x0, 0x0, 0x9) 13:19:49 executing program 2: fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) 13:19:49 executing program 4: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100), 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') chdir(&(0x7f00000001c0)='./file0/../file0/../file0\x00') mount$9p_unix(0xffffffffffffffff, &(0x7f00000000c0)='./file0/../file0/../file0\x00', &(0x7f0000000140), 0x18880ac, &(0x7f0000000200)={'trans=unix,', {[{@version_u}], [{@smackfstransmute={'smackfstransmute', 0x3d, '!'}}, {@seclabel}, {@context={'context', 0x3d, 'root'}}, {@subj_user={'subj_user', 0x3d, '-+'}}]}}) dup2(r0, 0xffffffffffffffff) rmdir(&(0x7f0000000280)='./file0/../file0/../file0\x00') 13:19:49 executing program 7: io_destroy(0x0) 13:19:49 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f0000000940)) 13:19:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000300)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004440)={&(0x7f0000004400)={0x14, 0x5, 0x6, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0}, 0x40000) syz_io_uring_setup(0xaaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000035c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r6, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32=r7, @ANYRES32=r2, @ANYRES32=r5, @ANYRESHEX=r4, @ANYRES64, @ANYRESOCT, @ANYRES64=r3, @ANYRES32, @ANYRESOCT]) r8 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r8, 0x0) close(r8) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4801) 13:19:49 executing program 3: sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x6) [ 129.724357] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 129.725117] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 129.725782] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 129.726385] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 129.726975] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 129.728475] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 129.728877] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.729570] Buffer I/O error on dev sr0, logical block 0, async page read [ 129.734085] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 129.734494] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.735149] Buffer I/O error on dev sr0, logical block 1, async page read [ 129.735835] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 129.736268] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.736886] Buffer I/O error on dev sr0, logical block 2, async page read [ 129.737548] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 129.737985] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.738608] Buffer I/O error on dev sr0, logical block 3, async page read [ 129.739304] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 129.739827] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.740485] Buffer I/O error on dev sr0, logical block 4, async page read [ 129.741178] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 129.741602] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.742263] Buffer I/O error on dev sr0, logical block 5, async page read [ 129.747071] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 129.747480] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.748126] Buffer I/O error on dev sr0, logical block 6, async page read [ 129.748859] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 129.749307] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.749960] Buffer I/O error on dev sr0, logical block 7, async page read [ 129.750710] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 129.751154] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.751779] Buffer I/O error on dev sr0, logical block 0, async page read [ 129.752504] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 129.752944] Buffer I/O error on dev sr0, logical block 1, async page read [ 129.754243] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 129.754815] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 129.755412] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 129.755978] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 129.757049] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 129.758369] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 13:19:49 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 13:19:49 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f0000000940)) 13:19:49 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f0000000940)) 13:19:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x2c, 0x2, 0x1, 0x801, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x3, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x2c}}, 0x0) 13:19:49 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f0000000940)) 13:19:49 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f0000000940)) 13:19:49 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cgroups\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000140)='!\x00', 0x0, 0x0) 13:19:49 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0, 0x460, &(0x7f00000005c0)={[{@mode}]}) 13:19:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000300)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004440)={&(0x7f0000004400)={0x14, 0x5, 0x6, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0}, 0x40000) syz_io_uring_setup(0xaaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000035c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r6, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32=r7, @ANYRES32=r2, @ANYRES32=r5, @ANYRESHEX=r4, @ANYRES64, @ANYRESOCT, @ANYRES64=r3, @ANYRES32, @ANYRESOCT]) r8 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r8, 0x0) close(r8) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4801) [ 129.920351] ======================================================= 13:19:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000300)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004440)={&(0x7f0000004400)={0x14, 0x5, 0x6, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0}, 0x40000) syz_io_uring_setup(0xaaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000035c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r6, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32=r7, @ANYRES32=r2, @ANYRES32=r5, @ANYRESHEX=r4, @ANYRES64, @ANYRESOCT, @ANYRES64=r3, @ANYRES32, @ANYRESOCT]) r8 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r8, 0x0) close(r8) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4801) [ 129.920351] WARNING: The mand mount option has been deprecated and [ 129.920351] and is ignored by this kernel. Remove the mand [ 129.920351] option from the mount to silence this warning. [ 129.920351] ======================================================= 13:19:49 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f0000000940)) 13:19:49 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f0000000940)) 13:19:49 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x6}}) 13:19:49 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x5414, &(0x7f0000000200)={0x0, 0x0}) 13:19:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000300)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004440)={&(0x7f0000004400)={0x14, 0x5, 0x6, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0}, 0x40000) syz_io_uring_setup(0xaaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000035c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r6, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32=r7, @ANYRES32=r2, @ANYRES32=r5, @ANYRESHEX=r4, @ANYRES64, @ANYRESOCT, @ANYRES64=r3, @ANYRES32, @ANYRESOCT]) r8 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r8, 0x0) close(r8) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4801) 13:19:49 executing program 6: pkey_alloc(0x0, 0x0) pkey_alloc(0x0, 0x0) [ 129.980415] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 129.981238] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 129.981722] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 129.982196] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 130.000652] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.001451] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.002230] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.004631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.005249] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.005813] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.006394] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.007337] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.008173] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.009274] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.009877] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.010523] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.011105] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.012829] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.013528] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.014134] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.014772] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.015412] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.016085] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.034995] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.036604] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.051523] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.052305] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.052888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.053769] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.054944] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.055482] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.058191] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.058735] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.061104] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.062938] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.063517] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.064278] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.064833] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.065352] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.066068] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.066600] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.067164] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.067761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.068379] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.085144] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.088617] syz-executor.1 (4063) used greatest stack depth: 24152 bytes left [ 130.104140] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 130.104777] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 130.105495] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 130.105955] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 130.106866] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.107397] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.107996] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.109602] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.110162] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.110731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.111422] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.112006] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.176316] netlink: 'syz-executor.3': attribute type 12 has an invalid length. 13:19:50 executing program 6: clock_getres(0xda2ad29fa4941700, 0x0) 13:19:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x5414, &(0x7f0000000200)={0x0, 0x0}) 13:19:50 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000c00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000c40)=0x40) 13:19:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x20, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0xc, 0xc, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}]}, 0x20}], 0x1}, 0x0) 13:19:50 executing program 4: setuid(0xee00) prctl$PR_SET_SECUREBITS(0x18, 0x0) 13:19:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000300)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004440)={&(0x7f0000004400)={0x14, 0x5, 0x6, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0}, 0x40000) syz_io_uring_setup(0xaaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000035c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r6, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32=r7, @ANYRES32=r2, @ANYRES32=r5, @ANYRESHEX=r4, @ANYRES64, @ANYRESOCT, @ANYRES64=r3, @ANYRES32, @ANYRESOCT]) r8 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r8, 0x0) close(r8) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4801) 13:19:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000300)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004440)={&(0x7f0000004400)={0x14, 0x5, 0x6, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0}, 0x40000) syz_io_uring_setup(0xaaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000035c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r6, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32=r7, @ANYRES32=r2, @ANYRES32=r5, @ANYRESHEX=r4, @ANYRES64, @ANYRESOCT, @ANYRES64=r3, @ANYRES32, @ANYRESOCT]) r8 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r8, 0x0) close(r8) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4801) 13:19:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000300)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004440)={&(0x7f0000004400)={0x14, 0x5, 0x6, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0}, 0x40000) syz_io_uring_setup(0xaaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000035c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r6, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32=r7, @ANYRES32=r2, @ANYRES32=r5, @ANYRESHEX=r4, @ANYRES64, @ANYRESOCT, @ANYRES64=r3, @ANYRES32, @ANYRESOCT]) r8 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r8, 0x0) close(r8) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4801) 13:19:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x20, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0xc, 0xc, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}]}, 0x20}], 0x1}, 0x0) 13:19:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x5414, &(0x7f0000000200)={0x0, 0x0}) 13:19:50 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x83, 0x2}]}}}], 0x18}}], 0x1, 0x0) 13:19:50 executing program 6: mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x100000000, 0x9b, 0x3) 13:19:50 executing program 4: setuid(0xee00) prctl$PR_SET_SECUREBITS(0x18, 0x0) [ 130.253493] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 130.254479] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 130.255230] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 130.255749] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 130.256257] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 13:19:50 executing program 6: mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x100000000, 0x9b, 0x3) [ 130.288446] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 130.289186] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 130.289705] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 130.290361] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 130.291734] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.292339] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.292883] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.293714] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.294297] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.294878] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.295611] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 130.296226] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 13:19:50 executing program 4: setuid(0xee00) prctl$PR_SET_SECUREBITS(0x18, 0x0) 13:19:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x5414, &(0x7f0000000200)={0x0, 0x0}) [ 130.331254] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 130.331985] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 130.332486] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 130.332983] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 130.353392] netlink: 'syz-executor.3': attribute type 12 has an invalid length. 13:19:50 executing program 7: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2) finit_module(0xffffffffffffffff, 0x0, 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x3, 0x7, 0x9, 0x1, 0x0, 0x7, 0x20, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000003c0), 0x6}, 0x42, 0x4, 0x200, 0x2, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x8000, 0x0, 0x7}, 0xffffffffffffffff, 0xe49, 0xffffffffffffffff, 0xe) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) shmget(0x0, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r4 = signalfd(r1, &(0x7f0000000000)={[0x8]}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x24004805) 13:19:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x20, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0xc, 0xc, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}]}, 0x20}], 0x1}, 0x0) 13:19:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000300)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004440)={&(0x7f0000004400)={0x14, 0x5, 0x6, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0}, 0x40000) syz_io_uring_setup(0xaaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000035c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r6, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32=r7, @ANYRES32=r2, @ANYRES32=r5, @ANYRESHEX=r4, @ANYRES64, @ANYRESOCT, @ANYRES64=r3, @ANYRES32, @ANYRESOCT]) r8 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r8, 0x0) close(r8) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4801) 13:19:50 executing program 6: mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x100000000, 0x9b, 0x3) 13:19:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x20, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}, @nested={0xc, 0xc, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}]}, 0x20}], 0x1}, 0x0) 13:19:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000300)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004440)={&(0x7f0000004400)={0x14, 0x5, 0x6, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0}, 0x40000) syz_io_uring_setup(0xaaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000035c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r6, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32=r7, @ANYRES32=r2, @ANYRES32=r5, @ANYRESHEX=r4, @ANYRES64, @ANYRESOCT, @ANYRES64=r3, @ANYRES32, @ANYRESOCT]) r8 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r8, 0x0) close(r8) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4801) 13:19:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000300)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004440)={&(0x7f0000004400)={0x14, 0x5, 0x6, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0}, 0x40000) syz_io_uring_setup(0xaaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000035c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r6, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYRES32=r7, @ANYRES32=r2, @ANYRES32=r5, @ANYRESHEX=r4, @ANYRES64, @ANYRESOCT, @ANYRES64=r3, @ANYRES32, @ANYRESOCT]) r8 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r8, 0x0) close(r8) syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4801) [ 130.419516] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 130.437910] hrtimer: interrupt took 22282 ns 13:19:50 executing program 3: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2) finit_module(0xffffffffffffffff, 0x0, 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x3, 0x7, 0x9, 0x1, 0x0, 0x7, 0x20, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000003c0), 0x6}, 0x42, 0x4, 0x200, 0x2, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x8000, 0x0, 0x7}, 0xffffffffffffffff, 0xe49, 0xffffffffffffffff, 0xe) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) shmget(0x0, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r4 = signalfd(r1, &(0x7f0000000000)={[0x8]}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x24004805) 13:19:50 executing program 4: setuid(0xee00) prctl$PR_SET_SECUREBITS(0x18, 0x0) 13:19:50 executing program 6: mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x100000000, 0x9b, 0x3) 13:19:50 executing program 7: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2) finit_module(0xffffffffffffffff, 0x0, 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x3, 0x7, 0x9, 0x1, 0x0, 0x7, 0x20, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000003c0), 0x6}, 0x42, 0x4, 0x200, 0x2, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x8000, 0x0, 0x7}, 0xffffffffffffffff, 0xe49, 0xffffffffffffffff, 0xe) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) shmget(0x0, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r4 = signalfd(r1, &(0x7f0000000000)={[0x8]}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x24004805) 13:19:50 executing program 5: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2) finit_module(0xffffffffffffffff, 0x0, 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x3, 0x7, 0x9, 0x1, 0x0, 0x7, 0x20, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000003c0), 0x6}, 0x42, 0x4, 0x200, 0x2, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x8000, 0x0, 0x7}, 0xffffffffffffffff, 0xe49, 0xffffffffffffffff, 0xe) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) shmget(0x0, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r4 = signalfd(r1, &(0x7f0000000000)={[0x8]}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x24004805) 13:19:50 executing program 7: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2) finit_module(0xffffffffffffffff, 0x0, 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x3, 0x7, 0x9, 0x1, 0x0, 0x7, 0x20, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000003c0), 0x6}, 0x42, 0x4, 0x200, 0x2, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x8000, 0x0, 0x7}, 0xffffffffffffffff, 0xe49, 0xffffffffffffffff, 0xe) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) shmget(0x0, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r4 = signalfd(r1, &(0x7f0000000000)={[0x8]}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x24004805) 13:19:50 executing program 3: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2) finit_module(0xffffffffffffffff, 0x0, 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x3, 0x7, 0x9, 0x1, 0x0, 0x7, 0x20, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000003c0), 0x6}, 0x42, 0x4, 0x200, 0x2, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x8000, 0x0, 0x7}, 0xffffffffffffffff, 0xe49, 0xffffffffffffffff, 0xe) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) shmget(0x0, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r4 = signalfd(r1, &(0x7f0000000000)={[0x8]}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x24004805) 13:19:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x50, 0x0, &(0x7f0000000140)) 13:19:50 executing program 7: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2) finit_module(0xffffffffffffffff, 0x0, 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x3, 0x7, 0x9, 0x1, 0x0, 0x7, 0x20, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000003c0), 0x6}, 0x42, 0x4, 0x200, 0x2, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x8000, 0x0, 0x7}, 0xffffffffffffffff, 0xe49, 0xffffffffffffffff, 0xe) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) shmget(0x0, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r4 = signalfd(r1, &(0x7f0000000000)={[0x8]}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x24004805) 13:19:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x50, 0x0, &(0x7f0000000140)) 13:19:51 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000008c0), 0x1, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 13:19:51 executing program 1: socket$inet6(0xa, 0x0, 0x8) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x5, 0x3, &(0x7f0000000380)=[{&(0x7f0000000180)="7b67ccad6f09a91b4dc12b5f39cbd96415b251227a22bb0740d97abcec605ce12c4d1143193a90296fc633b5d657907f021b36e68a4282b25dc43273601ded766cf52754fa2856899a7e02fb024dc2ee519565b183cbbf9e2967709864a2221f1c96816eb6434fa27e17ded1127b5178d907321cdb6b8c1250a1570c5bb0691ed6ad1565fac0eacfc8fd6a1ceb8fa18c5b10dd83d4f37815", 0x98, 0x8}, {&(0x7f0000000240)="59bf21e0160df960c0cda5ca5d64b0357dc83b5cbf95dc67a68558d096a531b08be05ccd59b836919cdd91c135b78cc0bd8abc96c0027ae9d75acc5631e999bf4c8414dbd0c6d5df872be374a0e8886f7dafdb3c2bb6405c67c38264", 0x5c, 0x8000}, {&(0x7f00000002c0)="05bab93e90d055726bccbac654e3604a27823f5c46ba8891eb570b9f3a0e68b66c3aa29e9cd54e81939d796fdb2b45f60fb36860cc5c70933d871970533ebba29a69852cf10f9a", 0x47, 0x100000001}], 0x2000004, &(0x7f0000000400)={[{@sb={'sb', 0x3d, 0x287d}}, {@noload}, {@noload}, {@noquota}, {@noauto_da_alloc}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x37, 0x33, 0x34, 0x36, 0x63, 0x31, 0x66], 0x2d, [0x0, 0x64, 0x39, 0x64], 0x2d, [0x35, 0x64, 0x31, 0x66], 0x2d, [0x33, 0x38, 0x64, 0x37], 0x2d, [0x9, 0x61, 0x36, 0x35, 0x36, 0x33, 0x64, 0x33]}}}]}) 13:19:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000000180), 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) 13:19:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x50, 0x0, &(0x7f0000000140)) 13:19:51 executing program 6: mq_open(&(0x7f0000000880)=']-\xf4]+)-\x00', 0x40, 0x0, 0x0) 13:19:51 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180), 0x4) bind$packet(r0, &(0x7f0000000380), 0x14) 13:19:51 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r1 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendfile(r1, r0, 0x0, 0x48) 13:19:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x50, 0x0, &(0x7f0000000140)) 13:19:51 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000200), &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[]) mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x80000}, 0x20) 13:19:51 executing program 5: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2) finit_module(0xffffffffffffffff, 0x0, 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x3, 0x7, 0x9, 0x1, 0x0, 0x7, 0x20, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000003c0), 0x6}, 0x42, 0x4, 0x200, 0x2, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x8000, 0x0, 0x7}, 0xffffffffffffffff, 0xe49, 0xffffffffffffffff, 0xe) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) shmget(0x0, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r4 = signalfd(r1, &(0x7f0000000000)={[0x8]}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x24004805) 13:19:51 executing program 6: syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r1 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendfile(r1, r0, 0x0, 0x48) 13:19:51 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x1, &(0x7f00000061c0)=[{&(0x7f0000005100)="9f", 0x1}], 0x0, 0x0) 13:19:51 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r1 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendfile(r1, r0, 0x0, 0x48) 13:19:51 executing program 1: r0 = syz_io_uring_setup(0x554, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000380)={0xfffffffe, 0x0, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 13:19:51 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r1 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendfile(r1, r0, 0x0, 0x48) 13:19:51 executing program 3: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2) finit_module(0xffffffffffffffff, 0x0, 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x3, 0x7, 0x9, 0x1, 0x0, 0x7, 0x20, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000003c0), 0x6}, 0x42, 0x4, 0x200, 0x2, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x8000, 0x0, 0x7}, 0xffffffffffffffff, 0xe49, 0xffffffffffffffff, 0xe) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) shmget(0x0, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r4 = signalfd(r1, &(0x7f0000000000)={[0x8]}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x24004805) 13:19:51 executing program 5: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2) finit_module(0xffffffffffffffff, 0x0, 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x3, 0x7, 0x9, 0x1, 0x0, 0x7, 0x20, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000003c0), 0x6}, 0x42, 0x4, 0x200, 0x2, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x8000, 0x0, 0x7}, 0xffffffffffffffff, 0xe49, 0xffffffffffffffff, 0xe) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) shmget(0x0, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r4 = signalfd(r1, &(0x7f0000000000)={[0x8]}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x24004805) 13:19:51 executing program 2: syz_emit_ethernet(0x32, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @multicast1, @multicast1}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, "6c5ea7"}}}}}}, 0x0) 13:19:51 executing program 6: syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r1 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendfile(r1, r0, 0x0, 0x48) 13:19:51 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r1 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendfile(r1, r0, 0x0, 0x48) 13:19:51 executing program 1: mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x1) 13:19:51 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r1 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendfile(r1, r0, 0x0, 0x48) 13:19:51 executing program 6: syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r1 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendfile(r1, r0, 0x0, 0x48) 13:19:51 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000380), 0x4) 13:19:51 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000003900)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 13:19:51 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r1 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendfile(r1, r0, 0x0, 0x48) 13:19:51 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r1 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendfile(r1, r0, 0x0, 0x48) 13:19:51 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000003900)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 13:19:51 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, {{0x10, 0x0, @multicast2}}}, 0x108) 13:19:51 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x603}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1d451ba7be1b1b97}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0x54}}, 0x4004040) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) getdents(r1, &(0x7f0000000000)=""/94, 0x20000018) 13:19:51 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 13:19:51 executing program 3: keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) 13:19:51 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @window={0x3, 0xfffc}, @sack_perm, @sack_perm], 0x4) syz_io_uring_complete(0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r1, 0x402, 0x4) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2f, 0x4, 0x4, 0xfffffff9, 0x61, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x80, 0x8a3, 0x7fffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000001200)={@local, 0x72, r2}) 13:19:52 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setrlimit(0x0, &(0x7f0000002000)) 13:19:52 executing program 3: keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) 13:19:52 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000003900)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 13:19:52 executing program 6: syz_io_uring_setup(0xebe, &(0x7f00000017c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) 13:19:52 executing program 3: keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) 13:19:52 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @window={0x3, 0xfffc}, @sack_perm, @sack_perm], 0x4) syz_io_uring_complete(0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r1, 0x402, 0x4) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2f, 0x4, 0x4, 0xfffffff9, 0x61, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x80, 0x8a3, 0x7fffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000001200)={@local, 0x72, r2}) 13:19:52 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @window={0x3, 0xfffc}, @sack_perm, @sack_perm], 0x4) syz_io_uring_complete(0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r1, 0x402, 0x4) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2f, 0x4, 0x4, 0xfffffff9, 0x61, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x80, 0x8a3, 0x7fffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000001200)={@local, 0x72, r2}) 13:19:52 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000003900)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 13:19:52 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @window={0x3, 0xfffc}, @sack_perm, @sack_perm], 0x4) syz_io_uring_complete(0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r1, 0x402, 0x4) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2f, 0x4, 0x4, 0xfffffff9, 0x61, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x80, 0x8a3, 0x7fffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000001200)={@local, 0x72, r2}) 13:19:52 executing program 3: keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) 13:19:52 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @window={0x3, 0xfffc}, @sack_perm, @sack_perm], 0x4) syz_io_uring_complete(0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r1, 0x402, 0x4) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2f, 0x4, 0x4, 0xfffffff9, 0x61, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x80, 0x8a3, 0x7fffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000001200)={@local, 0x72, r2}) 13:19:52 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000003b00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x1400) VM DIAGNOSIS: 13:19:48 Registers: info registers vcpu 0 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b1551 RDI=ffffffff87643ba0 RBP=ffffffff87643b60 RSP=ffff88806ce09788 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000035 R11=0000000000000001 R12=0000000000000035 R13=ffffffff87643b60 R14=0000000000000010 R15=ffffffff822b1540 RIP=ffffffff822b15a9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7800e47008 CR3=000000001db0e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 6f732e616d7a6c62 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00352e6f732e616d 7a6c62696c2f756e YMM03=0000000000000000 0000000000000000 672d78756e696c2d 34365f3638782f62 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=1ffff11003e44f5c RCX=0000000000000000 RDX=ffff88801f278000 RSI=ffffffff813bc3e3 RDI=0000000000000005 RBP=ffff88801f227b90 RSP=ffff88801f227ac0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200 RIP=ffffffff813bc3e5 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555555fb5400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2e222000 CR3=000000001bf82000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 7463656a6e695f31 313230385f7a7973 YMM03=0000000000000000 0000000000000000 00007fde938257c8 00007fde938257c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000