Warning: Permanently added '[localhost]:19367' (ECDSA) to the list of known hosts.
2022/10/01 03:27:35 fuzzer started
2022/10/01 03:27:35 dialing manager at localhost:35095
syzkaller login: [ 36.843756] cgroup: Unknown subsys name 'net'
[ 36.936279] cgroup: Unknown subsys name 'rlimit'
2022/10/01 03:27:49 syscalls: 2215
2022/10/01 03:27:49 code coverage: enabled
2022/10/01 03:27:49 comparison tracing: enabled
2022/10/01 03:27:49 extra coverage: enabled
2022/10/01 03:27:49 setuid sandbox: enabled
2022/10/01 03:27:49 namespace sandbox: enabled
2022/10/01 03:27:49 Android sandbox: enabled
2022/10/01 03:27:49 fault injection: enabled
2022/10/01 03:27:49 leak checking: enabled
2022/10/01 03:27:49 net packet injection: enabled
2022/10/01 03:27:49 net device setup: enabled
2022/10/01 03:27:49 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/10/01 03:27:49 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/10/01 03:27:49 USB emulation: enabled
2022/10/01 03:27:49 hci packet injection: enabled
2022/10/01 03:27:49 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930 )
2022/10/01 03:27:49 802.15.4 emulation: enabled
2022/10/01 03:27:49 fetching corpus: 0, signal 0/2000 (executing program)
2022/10/01 03:27:49 fetching corpus: 50, signal 22590/26090 (executing program)
2022/10/01 03:27:49 fetching corpus: 100, signal 32395/37297 (executing program)
2022/10/01 03:27:49 fetching corpus: 150, signal 38058/44379 (executing program)
2022/10/01 03:27:49 fetching corpus: 200, signal 46329/53714 (executing program)
2022/10/01 03:27:49 fetching corpus: 250, signal 54539/62882 (executing program)
2022/10/01 03:27:49 fetching corpus: 300, signal 62929/72010 (executing program)
2022/10/01 03:27:50 fetching corpus: 350, signal 67424/77411 (executing program)
2022/10/01 03:27:50 fetching corpus: 400, signal 73149/83785 (executing program)
2022/10/01 03:27:50 fetching corpus: 450, signal 76945/88365 (executing program)
2022/10/01 03:27:50 fetching corpus: 500, signal 80324/92493 (executing program)
2022/10/01 03:27:50 fetching corpus: 550, signal 82581/95559 (executing program)
2022/10/01 03:27:50 fetching corpus: 600, signal 85907/99500 (executing program)
2022/10/01 03:27:50 fetching corpus: 650, signal 88540/102793 (executing program)
2022/10/01 03:27:50 fetching corpus: 700, signal 91551/106294 (executing program)
2022/10/01 03:27:51 fetching corpus: 750, signal 94338/109596 (executing program)
2022/10/01 03:27:51 fetching corpus: 800, signal 96469/112357 (executing program)
2022/10/01 03:27:51 fetching corpus: 850, signal 99803/115970 (executing program)
2022/10/01 03:27:51 fetching corpus: 900, signal 103650/119921 (executing program)
2022/10/01 03:27:51 fetching corpus: 950, signal 105336/122058 (executing program)
2022/10/01 03:27:51 fetching corpus: 1000, signal 107662/124646 (executing program)
2022/10/01 03:27:51 fetching corpus: 1050, signal 108891/126392 (executing program)
2022/10/01 03:27:51 fetching corpus: 1100, signal 110321/128257 (executing program)
2022/10/01 03:27:51 fetching corpus: 1150, signal 112377/130498 (executing program)
2022/10/01 03:27:52 fetching corpus: 1200, signal 113400/132035 (executing program)
2022/10/01 03:27:52 fetching corpus: 1250, signal 115930/134590 (executing program)
2022/10/01 03:27:52 fetching corpus: 1300, signal 118214/136893 (executing program)
2022/10/01 03:27:52 fetching corpus: 1350, signal 119468/138415 (executing program)
2022/10/01 03:27:52 fetching corpus: 1400, signal 120472/139773 (executing program)
2022/10/01 03:27:52 fetching corpus: 1450, signal 121642/141165 (executing program)
2022/10/01 03:27:52 fetching corpus: 1500, signal 122763/142573 (executing program)
2022/10/01 03:27:52 fetching corpus: 1550, signal 124360/144291 (executing program)
2022/10/01 03:27:52 fetching corpus: 1600, signal 126295/146127 (executing program)
2022/10/01 03:27:53 fetching corpus: 1650, signal 127690/147598 (executing program)
2022/10/01 03:27:53 fetching corpus: 1700, signal 129697/149399 (executing program)
2022/10/01 03:27:53 fetching corpus: 1750, signal 130917/150725 (executing program)
2022/10/01 03:27:53 fetching corpus: 1800, signal 132510/152218 (executing program)
2022/10/01 03:27:53 fetching corpus: 1850, signal 133427/153257 (executing program)
2022/10/01 03:27:53 fetching corpus: 1900, signal 134517/154454 (executing program)
2022/10/01 03:27:53 fetching corpus: 1950, signal 137093/156392 (executing program)
2022/10/01 03:27:53 fetching corpus: 2000, signal 138096/157431 (executing program)
2022/10/01 03:27:54 fetching corpus: 2050, signal 139452/158641 (executing program)
2022/10/01 03:27:54 fetching corpus: 2100, signal 140714/159785 (executing program)
2022/10/01 03:27:54 fetching corpus: 2150, signal 141759/160741 (executing program)
2022/10/01 03:27:54 fetching corpus: 2200, signal 142623/161575 (executing program)
2022/10/01 03:27:54 fetching corpus: 2250, signal 143164/162273 (executing program)
2022/10/01 03:27:54 fetching corpus: 2300, signal 143609/162912 (executing program)
2022/10/01 03:27:54 fetching corpus: 2350, signal 145503/164202 (executing program)
2022/10/01 03:27:54 fetching corpus: 2400, signal 147240/165407 (executing program)
2022/10/01 03:27:54 fetching corpus: 2450, signal 148113/166173 (executing program)
2022/10/01 03:27:55 fetching corpus: 2500, signal 149398/167079 (executing program)
2022/10/01 03:27:55 fetching corpus: 2550, signal 150355/167891 (executing program)
2022/10/01 03:27:55 fetching corpus: 2600, signal 151151/168568 (executing program)
2022/10/01 03:27:55 fetching corpus: 2650, signal 151721/169113 (executing program)
2022/10/01 03:27:55 fetching corpus: 2700, signal 152158/169629 (executing program)
2022/10/01 03:27:55 fetching corpus: 2750, signal 153648/170626 (executing program)
2022/10/01 03:27:55 fetching corpus: 2800, signal 154876/171375 (executing program)
2022/10/01 03:27:55 fetching corpus: 2850, signal 156131/172209 (executing program)
2022/10/01 03:27:56 fetching corpus: 2900, signal 157161/172828 (executing program)
2022/10/01 03:27:56 fetching corpus: 2950, signal 157789/173363 (executing program)
2022/10/01 03:27:56 fetching corpus: 3000, signal 158803/173921 (executing program)
2022/10/01 03:27:56 fetching corpus: 3050, signal 159448/174404 (executing program)
2022/10/01 03:27:56 fetching corpus: 3100, signal 160111/174906 (executing program)
2022/10/01 03:27:56 fetching corpus: 3150, signal 160932/175356 (executing program)
2022/10/01 03:27:56 fetching corpus: 3200, signal 161455/175701 (executing program)
2022/10/01 03:27:57 fetching corpus: 3250, signal 162307/176166 (executing program)
2022/10/01 03:27:57 fetching corpus: 3300, signal 163441/176635 (executing program)
2022/10/01 03:27:57 fetching corpus: 3350, signal 164215/177011 (executing program)
2022/10/01 03:27:57 fetching corpus: 3400, signal 164810/177359 (executing program)
2022/10/01 03:27:57 fetching corpus: 3450, signal 165731/177829 (executing program)
2022/10/01 03:27:57 fetching corpus: 3500, signal 166626/178159 (executing program)
2022/10/01 03:27:57 fetching corpus: 3550, signal 167325/178453 (executing program)
2022/10/01 03:27:57 fetching corpus: 3600, signal 168016/178748 (executing program)
2022/10/01 03:27:57 fetching corpus: 3650, signal 168556/178957 (executing program)
2022/10/01 03:27:58 fetching corpus: 3700, signal 169745/179307 (executing program)
2022/10/01 03:27:58 fetching corpus: 3750, signal 170651/179593 (executing program)
2022/10/01 03:27:58 fetching corpus: 3800, signal 171528/179946 (executing program)
2022/10/01 03:27:58 fetching corpus: 3850, signal 172364/180169 (executing program)
2022/10/01 03:27:58 fetching corpus: 3900, signal 173153/180445 (executing program)
2022/10/01 03:27:58 fetching corpus: 3950, signal 174098/180639 (executing program)
2022/10/01 03:27:58 fetching corpus: 4000, signal 174969/180806 (executing program)
2022/10/01 03:27:59 fetching corpus: 4050, signal 176111/180973 (executing program)
2022/10/01 03:27:59 fetching corpus: 4100, signal 176692/181058 (executing program)
2022/10/01 03:27:59 fetching corpus: 4150, signal 177107/181150 (executing program)
2022/10/01 03:27:59 fetching corpus: 4195, signal 177545/181207 (executing program)
2022/10/01 03:27:59 fetching corpus: 4195, signal 177545/181245 (executing program)
2022/10/01 03:27:59 fetching corpus: 4195, signal 177545/181302 (executing program)
2022/10/01 03:27:59 fetching corpus: 4195, signal 177545/181350 (executing program)
2022/10/01 03:27:59 fetching corpus: 4195, signal 177545/181359 (executing program)
2022/10/01 03:27:59 fetching corpus: 4195, signal 177545/181359 (executing program)
2022/10/01 03:28:02 starting 8 fuzzer processes
03:28:02 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0)
03:28:02 executing program 1:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup(0x3791, &(0x7f00000001c0)={0x0, 0xef91, 0xf})
03:28:02 executing program 2:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000001440)={'veth0_to_batadv\x00'})
03:28:02 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000040)={@mcast1}, 0x14)
03:28:02 executing program 4:
r0 = syz_open_dev$vcsa(&(0x7f0000001b40), 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4042, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
03:28:02 executing program 5:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0xc0800, 0x0)
ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0)
03:28:02 executing program 6:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @local}}}}}}, 0x0)
recvfrom(r0, 0x0, 0x3, 0x0, 0x0, 0x0)
03:28:02 executing program 7:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @remote, {[@timestamp_addr={0x44, 0x1c, 0xf, 0x3, 0x0, [{@dev}, {@local}, {@loopback}]}]}}, {0x0, 0x0, 0x8}}}}}, 0x0)
[ 63.646256] audit: type=1400 audit(1664594882.321:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[ 64.956196] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 64.958297] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 64.959995] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 64.962037] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 64.964141] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 64.965510] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 64.966670] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 64.969329] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 64.971411] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 64.971711] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 64.974343] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 64.995051] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 64.997932] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 64.999780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 65.001128] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 65.002578] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 65.003779] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 65.007519] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 65.008547] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 65.009589] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 65.010610] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 65.012043] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 65.013334] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 65.015533] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 65.015826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 65.018347] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 65.019723] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 65.019830] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 65.021034] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 65.024770] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 65.026460] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 65.027852] Bluetooth: hci3: HCI_REQ-0x0c1a
[ 65.029185] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 65.029269] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 65.030834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 65.036348] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 65.037695] Bluetooth: hci4: HCI_REQ-0x0c1a
[ 65.040581] Bluetooth: hci2: HCI_REQ-0x0c1a
[ 65.055702] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 65.059557] Bluetooth: hci0: HCI_REQ-0x0c1a
[ 65.060873] Bluetooth: hci5: HCI_REQ-0x0c1a
[ 65.065802] Bluetooth: hci1: HCI_REQ-0x0c1a
[ 65.089271] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 65.092737] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 65.095435] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 65.101097] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 65.104199] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 65.106350] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 65.113547] Bluetooth: hci6: HCI_REQ-0x0c1a
[ 67.087488] Bluetooth: hci7: Opcode 0x c03 failed: -110
[ 67.087963] Bluetooth: hci0: command 0x0409 tx timeout
[ 67.089253] Bluetooth: hci1: command 0x0409 tx timeout
[ 67.089455] Bluetooth: hci5: command 0x0409 tx timeout
[ 67.090072] Bluetooth: hci2: command 0x0409 tx timeout
[ 67.090498] Bluetooth: hci3: command 0x0409 tx timeout
[ 67.151683] Bluetooth: hci6: command 0x0409 tx timeout
[ 67.151704] Bluetooth: hci4: command 0x0409 tx timeout
[ 69.135443] Bluetooth: hci2: command 0x041b tx timeout
[ 69.135926] Bluetooth: hci5: command 0x041b tx timeout
[ 69.136337] Bluetooth: hci1: command 0x041b tx timeout
[ 69.136829] Bluetooth: hci0: command 0x041b tx timeout
[ 69.137294] Bluetooth: hci3: command 0x041b tx timeout
[ 69.199437] Bluetooth: hci4: command 0x041b tx timeout
[ 69.200163] Bluetooth: hci6: command 0x041b tx timeout
[ 71.184554] Bluetooth: hci3: command 0x040f tx timeout
[ 71.184582] Bluetooth: hci0: command 0x040f tx timeout
[ 71.185033] Bluetooth: hci1: command 0x040f tx timeout
[ 71.185527] Bluetooth: hci5: command 0x040f tx timeout
[ 71.185905] Bluetooth: hci2: command 0x040f tx timeout
[ 71.248511] Bluetooth: hci6: command 0x040f tx timeout
[ 71.248959] Bluetooth: hci4: command 0x040f tx timeout
[ 71.824442] Bluetooth: hci7: Opcode 0x c03 failed: -110
[ 73.231497] Bluetooth: hci5: command 0x0419 tx timeout
[ 73.231949] Bluetooth: hci1: command 0x0419 tx timeout
[ 73.232347] Bluetooth: hci0: command 0x0419 tx timeout
[ 73.232818] Bluetooth: hci3: command 0x0419 tx timeout
[ 73.233210] Bluetooth: hci2: command 0x0419 tx timeout
[ 73.296512] Bluetooth: hci4: command 0x0419 tx timeout
[ 73.296932] Bluetooth: hci6: command 0x0419 tx timeout
[ 74.408575] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 74.414005] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 74.416232] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 74.425857] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 74.429539] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 74.431027] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 74.440067] Bluetooth: hci7: HCI_REQ-0x0c1a
[ 76.495522] Bluetooth: hci7: command 0x0409 tx timeout
[ 78.543447] Bluetooth: hci7: command 0x041b tx timeout
[ 80.592425] Bluetooth: hci7: command 0x040f tx timeout
[ 82.639467] Bluetooth: hci7: command 0x0419 tx timeout
03:28:55 executing program 6:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @local}}}}}}, 0x0)
recvfrom(r0, 0x0, 0x3, 0x0, 0x0, 0x0)
03:28:56 executing program 6:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @local}}}}}}, 0x0)
recvfrom(r0, 0x0, 0x3, 0x0, 0x0, 0x0)
03:28:56 executing program 7:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @remote, {[@timestamp_addr={0x44, 0x1c, 0xf, 0x3, 0x0, [{@dev}, {@local}, {@loopback}]}]}}, {0x0, 0x0, 0x8}}}}}, 0x0)
03:28:56 executing program 7:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @remote, {[@timestamp_addr={0x44, 0x1c, 0xf, 0x3, 0x0, [{@dev}, {@local}, {@loopback}]}]}}, {0x0, 0x0, 0x8}}}}}, 0x0)
03:28:56 executing program 6:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @local}}}}}}, 0x0)
recvfrom(r0, 0x0, 0x3, 0x0, 0x0, 0x0)
03:28:56 executing program 7:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @remote, {[@timestamp_addr={0x44, 0x1c, 0xf, 0x3, 0x0, [{@dev}, {@local}, {@loopback}]}]}}, {0x0, 0x0, 0x8}}}}}, 0x0)
03:28:56 executing program 7:
r0 = syz_io_uring_setup(0x5cf9, &(0x7f00000025c0)={0x0, 0xdafd}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000002640), &(0x7f0000002680))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
03:28:56 executing program 7:
r0 = syz_io_uring_setup(0x5cf9, &(0x7f00000025c0)={0x0, 0xdafd}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000002640), &(0x7f0000002680))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
03:29:02 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0)
03:29:02 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000040)={@mcast1}, 0x14)
03:29:02 executing program 5:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0xc0800, 0x0)
ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0)
03:29:02 executing program 4:
r0 = syz_open_dev$vcsa(&(0x7f0000001b40), 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4042, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
03:29:02 executing program 2:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000001440)={'veth0_to_batadv\x00'})
03:29:02 executing program 7:
r0 = syz_io_uring_setup(0x5cf9, &(0x7f00000025c0)={0x0, 0xdafd}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000002640), &(0x7f0000002680))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
03:29:02 executing program 6:
r0 = syz_io_uring_setup(0x5cf9, &(0x7f00000025c0)={0x0, 0xdafd}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000002640), &(0x7f0000002680))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
03:29:02 executing program 1:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup(0x3791, &(0x7f00000001c0)={0x0, 0xef91, 0xf})
03:29:02 executing program 1:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup(0x3791, &(0x7f00000001c0)={0x0, 0xef91, 0xf})
03:29:02 executing program 6:
r0 = syz_io_uring_setup(0x5cf9, &(0x7f00000025c0)={0x0, 0xdafd}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000002640), &(0x7f0000002680))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
03:29:02 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0)
03:29:02 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000040)={@mcast1}, 0x14)
03:29:02 executing program 5:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0xc0800, 0x0)
ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0)
03:29:02 executing program 7:
r0 = syz_io_uring_setup(0x5cf9, &(0x7f00000025c0)={0x0, 0xdafd}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000002640), &(0x7f0000002680))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
03:29:02 executing program 4:
r0 = syz_open_dev$vcsa(&(0x7f0000001b40), 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4042, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
03:29:02 executing program 1:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup(0x3791, &(0x7f00000001c0)={0x0, 0xef91, 0xf})
03:29:02 executing program 2:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000001440)={'veth0_to_batadv\x00'})
03:29:02 executing program 6:
r0 = syz_io_uring_setup(0x5cf9, &(0x7f00000025c0)={0x0, 0xdafd}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000002640), &(0x7f0000002680))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)
03:29:02 executing program 4:
r0 = syz_open_dev$vcsa(&(0x7f0000001b40), 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4042, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
03:29:02 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000040)={@mcast1}, 0x14)
03:29:02 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0)
03:29:02 executing program 5:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0xc0800, 0x0)
ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0)
03:29:02 executing program 1:
prctl$PR_SET_MM_MAP_SIZE(0x22, 0xf, 0x0)
03:29:02 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0)
syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000600), 0x208048, &(0x7f0000000800)={[{@fat=@allow_utime}, {@fat=@umask}, {@fat=@uid}, {@fat=@flush}], [{@euid_gt}]})
[ 124.117671] =======================================================
[ 124.117671] WARNING: The mand mount option has been deprecated and
[ 124.117671] and is ignored by this kernel. Remove the mand
[ 124.117671] option from the mount to silence this warning.
[ 124.117671] =======================================================
03:29:02 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000000))
03:29:02 executing program 2:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000001440)={'veth0_to_batadv\x00'})
03:29:02 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0)
syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000600), 0x208048, &(0x7f0000000800)={[{@fat=@allow_utime}, {@fat=@umask}, {@fat=@uid}, {@fat=@flush}], [{@euid_gt}]})
03:29:02 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getresuid(&(0x7f0000000040), &(0x7f0000000000), &(0x7f0000001a40))
03:29:02 executing program 6:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0xb, 0x0, 0x0)
03:29:02 executing program 4:
r0 = getpgrp(0x0)
process_vm_readv(r0, &(0x7f0000001bc0)=[{&(0x7f0000000840)=""/99, 0x63}, {&(0x7f00000008c0)=""/145, 0x91}, {&(0x7f0000000980)=""/176, 0xb0}], 0x3, &(0x7f0000002e80)=[{&(0x7f0000001c40)=""/175, 0xaf}, {0x0}, {&(0x7f0000001e00)=""/4096, 0x1000}, {0x0}], 0x4, 0x0)
03:29:02 executing program 3:
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000580))
clock_adjtime(0x0, &(0x7f0000000100)={0x8003})
03:29:02 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x2}}, 0x101000)
03:29:02 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0))
[ 124.231814] audit: type=1400 audit(1664594942.907:7): avc: denied { open } for pid=4029 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 124.233166] audit: type=1400 audit(1664594942.907:8): avc: denied { kernel } for pid=4029 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
03:29:02 executing program 4:
r0 = getpgrp(0x0)
process_vm_readv(r0, &(0x7f0000001bc0)=[{&(0x7f0000000840)=""/99, 0x63}, {&(0x7f00000008c0)=""/145, 0x91}, {&(0x7f0000000980)=""/176, 0xb0}], 0x3, &(0x7f0000002e80)=[{&(0x7f0000001c40)=""/175, 0xaf}, {0x0}, {&(0x7f0000001e00)=""/4096, 0x1000}, {0x0}], 0x4, 0x0)
03:29:03 executing program 0:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
poll(&(0x7f0000000380)=[{r0}], 0x1, 0x2)
03:29:03 executing program 5:
r0 = socket(0xa, 0x3, 0x1)
sendmmsg$sock(r0, &(0x7f0000004300)=[{{&(0x7f0000001f00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, 0x0, 0x0, &(0x7f0000002140)=[@timestamping={{0x14}}], 0x18}}], 0x1, 0x0)
03:29:03 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0)
syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000600), 0x208048, &(0x7f0000000800)={[{@fat=@allow_utime}, {@fat=@umask}, {@fat=@uid}, {@fat=@flush}], [{@euid_gt}]})
03:29:03 executing program 6:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x400448cc, 0x0)
03:29:03 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00')
pread64(r0, &(0x7f0000003680)=""/237, 0xed, 0x0)
03:29:03 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x2}}, 0x101000)
03:29:03 executing program 4:
r0 = getpgrp(0x0)
process_vm_readv(r0, &(0x7f0000001bc0)=[{&(0x7f0000000840)=""/99, 0x63}, {&(0x7f00000008c0)=""/145, 0x91}, {&(0x7f0000000980)=""/176, 0xb0}], 0x3, &(0x7f0000002e80)=[{&(0x7f0000001c40)=""/175, 0xaf}, {0x0}, {&(0x7f0000001e00)=""/4096, 0x1000}, {0x0}], 0x4, 0x0)
[ 124.444568] ------------[ cut here ]------------
[ 124.444599]
[ 124.444603] ======================================================
[ 124.444606] WARNING: possible circular locking dependency detected
[ 124.444610] 6.0.0-rc7-next-20220930 #1 Not tainted
[ 124.444617] ------------------------------------------------------
[ 124.444620] syz-executor.3/4057 is trying to acquire lock:
[ 124.444627] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70
[ 124.444667]
[ 124.444667] but task is already holding lock:
[ 124.444670] ffff88800ed77020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[ 124.444697]
[ 124.444697] which lock already depends on the new lock.
[ 124.444697]
[ 124.444700]
[ 124.444700] the existing dependency chain (in reverse order) is:
[ 124.444704]
[ 124.444704] -> #3 (&ctx->lock){....}-{2:2}:
[ 124.444718] _raw_spin_lock+0x2a/0x40
[ 124.444729] __perf_event_task_sched_out+0x53b/0x18d0
[ 124.444741] __schedule+0xedd/0x2470
[ 124.444754] schedule+0xda/0x1b0
[ 124.444768] exit_to_user_mode_prepare+0x114/0x1a0
[ 124.444781] syscall_exit_to_user_mode+0x19/0x40
[ 124.444793] do_syscall_64+0x48/0x90
[ 124.444811] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 124.444823]
[ 124.444823] -> #2 (&rq->__lock){-.-.}-{2:2}:
[ 124.444837] _raw_spin_lock_nested+0x30/0x40
[ 124.444847] raw_spin_rq_lock_nested+0x1e/0x30
[ 124.444861] task_fork_fair+0x63/0x4d0
[ 124.444878] sched_cgroup_fork+0x3d0/0x540
[ 124.444892] copy_process+0x4183/0x6e20
[ 124.444903] kernel_clone+0xe7/0x890
[ 124.444912] user_mode_thread+0xad/0xf0
[ 124.444922] rest_init+0x24/0x250
[ 124.444934] arch_call_rest_init+0xf/0x14
[ 124.444951] start_kernel+0x4c6/0x4eb
[ 124.444966] secondary_startup_64_no_verify+0xe0/0xeb
[ 124.444980]
[ 124.444980] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[ 124.444994] _raw_spin_lock_irqsave+0x39/0x60
[ 124.445004] try_to_wake_up+0xab/0x1930
[ 124.445017] up+0x75/0xb0
[ 124.445031] __up_console_sem+0x6e/0x80
[ 124.445047] console_unlock+0x46a/0x590
[ 124.445063] do_con_write+0xc05/0x1d50
[ 124.445074] con_write+0x21/0x40
[ 124.445083] n_tty_write+0x4d4/0xfe0
[ 124.445095] file_tty_write.constprop.0+0x455/0x8a0
[ 124.445106] vfs_write+0x9c3/0xd90
[ 124.445123] ksys_write+0x127/0x250
[ 124.445138] do_syscall_64+0x3b/0x90
[ 124.445154] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 124.445167]
[ 124.445167] -> #0 ((console_sem).lock){....}-{2:2}:
[ 124.445180] __lock_acquire+0x2a02/0x5e70
[ 124.445197] lock_acquire+0x1a2/0x530
[ 124.445213] _raw_spin_lock_irqsave+0x39/0x60
[ 124.445223] down_trylock+0xe/0x70
[ 124.445238] __down_trylock_console_sem+0x3b/0xd0
[ 124.445254] vprintk_emit+0x16b/0x560
[ 124.445270] vprintk+0x84/0xa0
[ 124.445285] _printk+0xba/0xf1
[ 124.445297] report_bug.cold+0x72/0xab
[ 124.445313] handle_bug+0x3c/0x70
[ 124.445329] exc_invalid_op+0x14/0x50
[ 124.445345] asm_exc_invalid_op+0x16/0x20
[ 124.445357] group_sched_out.part.0+0x2c7/0x460
[ 124.445375] ctx_sched_out+0x8f1/0xc10
[ 124.445392] __perf_event_task_sched_out+0x6d0/0x18d0
[ 124.445402] __schedule+0xedd/0x2470
[ 124.445416] schedule+0xda/0x1b0
[ 124.445429] exit_to_user_mode_prepare+0x114/0x1a0
[ 124.445440] syscall_exit_to_user_mode+0x19/0x40
[ 124.445452] do_syscall_64+0x48/0x90
[ 124.445468] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 124.445481]
[ 124.445481] other info that might help us debug this:
[ 124.445481]
[ 124.445483] Chain exists of:
[ 124.445483] (console_sem).lock --> &rq->__lock --> &ctx->lock
[ 124.445483]
[ 124.445498] Possible unsafe locking scenario:
[ 124.445498]
[ 124.445500] CPU0 CPU1
[ 124.445503] ---- ----
[ 124.445505] lock(&ctx->lock);
[ 124.445511] lock(&rq->__lock);
[ 124.445517] lock(&ctx->lock);
[ 124.445523] lock((console_sem).lock);
[ 124.445529]
[ 124.445529] *** DEADLOCK ***
[ 124.445529]
[ 124.445531] 2 locks held by syz-executor.3/4057:
[ 124.445537] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[ 124.445566] #1: ffff88800ed77020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[ 124.445592]
[ 124.445592] stack backtrace:
[ 124.445595] CPU: 0 PID: 4057 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220930 #1
[ 124.445608] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 124.445616] Call Trace:
[ 124.445619]
[ 124.445623] dump_stack_lvl+0x8b/0xb3
[ 124.445641] check_noncircular+0x263/0x2e0
[ 124.445658] ? format_decode+0x26c/0xb50
[ 124.445674] ? print_circular_bug+0x450/0x450
[ 124.445691] ? simple_strtoul+0x30/0x30
[ 124.445706] ? format_decode+0x26c/0xb50
[ 124.445723] ? alloc_chain_hlocks+0x1ec/0x5a0
[ 124.445741] __lock_acquire+0x2a02/0x5e70
[ 124.445762] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 124.445784] lock_acquire+0x1a2/0x530
[ 124.445801] ? down_trylock+0xe/0x70
[ 124.445817] ? lock_release+0x750/0x750
[ 124.445836] ? __lock_acquire+0x164d/0x5e70
[ 124.445854] ? vprintk+0x84/0xa0
[ 124.445871] _raw_spin_lock_irqsave+0x39/0x60
[ 124.445882] ? down_trylock+0xe/0x70
[ 124.445898] down_trylock+0xe/0x70
[ 124.445914] ? vprintk+0x84/0xa0
[ 124.445930] __down_trylock_console_sem+0x3b/0xd0
[ 124.445947] vprintk_emit+0x16b/0x560
[ 124.445966] vprintk+0x84/0xa0
[ 124.445983] _printk+0xba/0xf1
[ 124.445994] ? record_print_text.cold+0x16/0x16
[ 124.446010] ? report_bug.cold+0x66/0xab
[ 124.446028] ? group_sched_out.part.0+0x2c7/0x460
[ 124.446046] report_bug.cold+0x72/0xab
[ 124.446064] handle_bug+0x3c/0x70
[ 124.446081] exc_invalid_op+0x14/0x50
[ 124.446099] asm_exc_invalid_op+0x16/0x20
[ 124.446112] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[ 124.446132] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00
[ 124.446143] RSP: 0018:ffff88803f817c48 EFLAGS: 00010006
[ 124.446152] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[ 124.446160] RDX: ffff88801f22b580 RSI: ffffffff81565dc7 RDI: 0000000000000005
[ 124.446167] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001
[ 124.446174] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800ed77000
[ 124.446182] R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002
[ 124.446193] ? group_sched_out.part.0+0x2c7/0x460
[ 124.446213] ? group_sched_out.part.0+0x2c7/0x460
[ 124.446232] ctx_sched_out+0x8f1/0xc10
[ 124.446251] __perf_event_task_sched_out+0x6d0/0x18d0
[ 124.446266] ? lock_is_held_type+0xd7/0x130
[ 124.446281] ? __perf_cgroup_move+0x160/0x160
[ 124.446293] ? set_next_entity+0x304/0x550
[ 124.446312] ? update_curr+0x267/0x740
[ 124.446330] ? lock_is_held_type+0xd7/0x130
[ 124.446344] __schedule+0xedd/0x2470
[ 124.446361] ? io_schedule_timeout+0x150/0x150
[ 124.446378] ? rcu_read_lock_sched_held+0x3e/0x80
[ 124.446398] schedule+0xda/0x1b0
[ 124.446413] exit_to_user_mode_prepare+0x114/0x1a0
[ 124.446425] syscall_exit_to_user_mode+0x19/0x40
[ 124.446438] do_syscall_64+0x48/0x90
[ 124.446456] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 124.446469] RIP: 0033:0x7f96f8e3ab19
[ 124.446477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 124.446488] RSP: 002b:00007f96f63b0218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 124.446498] RAX: 0000000000000001 RBX: 00007f96f8f4df68 RCX: 00007f96f8e3ab19
[ 124.446506] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f96f8f4df6c
[ 124.446513] RBP: 00007f96f8f4df60 R08: 000000000000000e R09: 0000000000000000
[ 124.446520] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f96f8f4df6c
[ 124.446527] R13: 00007ffecf7c067f R14: 00007f96f63b0300 R15: 0000000000022000
[ 124.446540]
[ 124.502024] WARNING: CPU: 0 PID: 4057 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[ 124.502709] Modules linked in:
[ 124.502960] CPU: 0 PID: 4057 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220930 #1
[ 124.503581] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 124.504403] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[ 124.504822] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00
[ 124.506138] RSP: 0018:ffff88803f817c48 EFLAGS: 00010006
[ 124.506529] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[ 124.507045] RDX: ffff88801f22b580 RSI: ffffffff81565dc7 RDI: 0000000000000005
[ 124.507567] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001
[ 124.508068] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800ed77000
[ 124.508583] R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002
[ 124.509087] FS: 00007f96f63b0700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[ 124.509663] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 124.510082] CR2: 00007f96f8f4e018 CR3: 000000000f414000 CR4: 0000000000350ef0
[ 124.510598] Call Trace:
[ 124.510790]
[ 124.510969] ctx_sched_out+0x8f1/0xc10
[ 124.511272] __perf_event_task_sched_out+0x6d0/0x18d0
[ 124.511657] ? lock_is_held_type+0xd7/0x130
[ 124.511976] ? __perf_cgroup_move+0x160/0x160
[ 124.512307] ? set_next_entity+0x304/0x550
[ 124.512628] ? update_curr+0x267/0x740
[ 124.512924] ? lock_is_held_type+0xd7/0x130
[ 124.513244] __schedule+0xedd/0x2470
[ 124.513530] ? io_schedule_timeout+0x150/0x150
[ 124.513872] ? rcu_read_lock_sched_held+0x3e/0x80
[ 124.514241] schedule+0xda/0x1b0
[ 124.514502] exit_to_user_mode_prepare+0x114/0x1a0
[ 124.514863] syscall_exit_to_user_mode+0x19/0x40
[ 124.515220] do_syscall_64+0x48/0x90
[ 124.515507] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 124.515893] RIP: 0033:0x7f96f8e3ab19
[ 124.516168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 124.517482] RSP: 002b:00007f96f63b0218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 124.518034] RAX: 0000000000000001 RBX: 00007f96f8f4df68 RCX: 00007f96f8e3ab19
[ 124.518557] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f96f8f4df6c
[ 124.519076] RBP: 00007f96f8f4df60 R08: 000000000000000e R09: 0000000000000000
[ 124.519600] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f96f8f4df6c
[ 124.520116] R13: 00007ffecf7c067f R14: 00007f96f63b0300 R15: 0000000000022000
[ 124.520637]
[ 124.520815] irq event stamp: 246
[ 124.521059] hardirqs last enabled at (245): [] exit_to_user_mode_prepare+0x109/0x1a0
[ 124.521748] hardirqs last disabled at (246): [] __schedule+0x1225/0x2470
[ 124.522351] softirqs last enabled at (198): [] __irq_exit_rcu+0x11b/0x180
[ 124.522977] softirqs last disabled at (189): [] __irq_exit_rcu+0x11b/0x180
[ 124.523595] ---[ end trace 0000000000000000 ]---
03:29:03 executing program 4:
r0 = getpgrp(0x0)
process_vm_readv(r0, &(0x7f0000001bc0)=[{&(0x7f0000000840)=""/99, 0x63}, {&(0x7f00000008c0)=""/145, 0x91}, {&(0x7f0000000980)=""/176, 0xb0}], 0x3, &(0x7f0000002e80)=[{&(0x7f0000001c40)=""/175, 0xaf}, {0x0}, {&(0x7f0000001e00)=""/4096, 0x1000}, {0x0}], 0x4, 0x0)
03:29:03 executing program 5:
r0 = socket(0xa, 0x3, 0x1)
sendmmsg$sock(r0, &(0x7f0000004300)=[{{&(0x7f0000001f00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, 0x0, 0x0, &(0x7f0000002140)=[@timestamping={{0x14}}], 0x18}}], 0x1, 0x0)
03:29:03 executing program 6:
clock_nanosleep(0xe177c82e9469a081, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0)
03:29:03 executing program 2:
syz_emit_ethernet(0x42, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote, {[@lsrr={0x83, 0x3, 0xc1}]}}, @source_quench={0x8, 0x5c, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}}}}, 0x0)
03:29:03 executing program 0:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
poll(&(0x7f0000000380)=[{r0}], 0x1, 0x2)
03:29:03 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
03:29:03 executing program 2:
syz_emit_ethernet(0x42, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote, {[@lsrr={0x83, 0x3, 0xc1}]}}, @source_quench={0x8, 0x5c, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}}}}, 0x0)
03:29:03 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x2}}, 0x101000)
03:29:03 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0)
syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000600), 0x208048, &(0x7f0000000800)={[{@fat=@allow_utime}, {@fat=@umask}, {@fat=@uid}, {@fat=@flush}], [{@euid_gt}]})
03:29:03 executing program 6:
clock_nanosleep(0xe177c82e9469a081, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0)
03:29:03 executing program 5:
r0 = socket(0xa, 0x3, 0x1)
sendmmsg$sock(r0, &(0x7f0000004300)=[{{&(0x7f0000001f00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, 0x0, 0x0, &(0x7f0000002140)=[@timestamping={{0x14}}], 0x18}}], 0x1, 0x0)
03:29:03 executing program 0:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
poll(&(0x7f0000000380)=[{r0}], 0x1, 0x2)
03:29:03 executing program 2:
syz_emit_ethernet(0x42, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote, {[@lsrr={0x83, 0x3, 0xc1}]}}, @source_quench={0x8, 0x5c, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}}}}, 0x0)
03:29:03 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x2}}, 0x101000)
03:29:03 executing program 6:
clock_nanosleep(0xe177c82e9469a081, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0)
03:29:03 executing program 0:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
poll(&(0x7f0000000380)=[{r0}], 0x1, 0x2)
03:29:03 executing program 5:
r0 = socket(0xa, 0x3, 0x1)
sendmmsg$sock(r0, &(0x7f0000004300)=[{{&(0x7f0000001f00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, 0x0, 0x0, &(0x7f0000002140)=[@timestamping={{0x14}}], 0x18}}], 0x1, 0x0)
03:29:03 executing program 4:
r0 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0xc, 0x0, &(0x7f0000000100))
03:29:03 executing program 2:
syz_emit_ethernet(0x42, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote, {[@lsrr={0x83, 0x3, 0xc1}]}}, @source_quench={0x8, 0x5c, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}}}}, 0x0)
03:29:03 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00')
pread64(r0, &(0x7f0000003680)=""/237, 0xed, 0x0)
03:29:03 executing program 7:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000000)={'rose0\x00'})
03:29:03 executing program 6:
clock_nanosleep(0xe177c82e9469a081, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0)
03:29:03 executing program 7:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000000)={'rose0\x00'})
03:29:03 executing program 2:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340))
lsetxattr$trusted_overlay_redirect(&(0x7f0000003ec0)='./file0\x00', &(0x7f0000003f00), 0x0, 0x0, 0x0)
03:29:03 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0)
03:29:03 executing program 4:
r0 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0xc, 0x0, &(0x7f0000000100))
03:29:03 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00')
pread64(r0, &(0x7f0000003680)=""/237, 0xed, 0x0)
03:29:03 executing program 6:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5, 0x0)
pread64(r0, &(0x7f0000000580)=""/91, 0x5b, 0x3725)
03:29:03 executing program 1:
statx(0xffffffffffffffff, &(0x7f0000000180)='.\x00', 0x0, 0x7ff, &(0x7f0000000480))
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x5024, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x2, 0x309}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000380), 0x2, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0)
accept4$inet6(r2, 0x0, &(0x7f0000000140), 0x800)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000400)={0xfffffffc, 0x1, 0x8, {0x2, 0x10001}, 0x401, 0xc00000})
sendfile(r0, r1, &(0x7f0000000000)=0xffffffff, 0x2)
r3 = getpgid(0x0)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x3, 0x2, 0x7, 0x6, 0x0, 0xdcc0, 0x80038, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10001, 0x4, @perf_bp={&(0x7f00000001c0), 0xc}, 0x8000, 0x1f, 0xfff, 0x9, 0x9, 0xfffffe42, 0x3, 0x0, 0x5, 0x0, 0x4618}, r3, 0x1, r0, 0xb)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
03:29:03 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0)
pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0)
sendfile(r1, r2, 0x0, 0xffff)
fallocate(r2, 0x3, 0xff7f, 0x4000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r4, 0x0, 0xffff)
03:29:03 executing program 7:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000000)={'rose0\x00'})
03:29:03 executing program 2:
statx(0xffffffffffffffff, &(0x7f0000000180)='.\x00', 0x0, 0x7ff, &(0x7f0000000480))
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x5024, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x2, 0x309}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000380), 0x2, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0)
accept4$inet6(r2, 0x0, &(0x7f0000000140), 0x800)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000400)={0xfffffffc, 0x1, 0x8, {0x2, 0x10001}, 0x401, 0xc00000})
sendfile(r0, r1, &(0x7f0000000000)=0xffffffff, 0x2)
r3 = getpgid(0x0)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x3, 0x2, 0x7, 0x6, 0x0, 0xdcc0, 0x80038, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10001, 0x4, @perf_bp={&(0x7f00000001c0), 0xc}, 0x8000, 0x1f, 0xfff, 0x9, 0x9, 0xfffffe42, 0x3, 0x0, 0x5, 0x0, 0x4618}, r3, 0x1, r0, 0xb)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
03:29:03 executing program 0:
syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001ac0)=[{0x0, 0x0, 0xfffffffffffffffd}], 0x0, 0x0)
syz_mount_image$nfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000002280), 0x0, 0x0)
03:29:03 executing program 5:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x2, 0x0)
write$P9_RGETATTR(r0, 0x0, 0x0)
03:29:03 executing program 4:
r0 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0xc, 0x0, &(0x7f0000000100))
03:29:03 executing program 7:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000000)={'rose0\x00'})
03:29:03 executing program 1:
statx(0xffffffffffffffff, &(0x7f0000000180)='.\x00', 0x0, 0x7ff, &(0x7f0000000480))
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x5024, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x2, 0x309}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000380), 0x2, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0)
accept4$inet6(r2, 0x0, &(0x7f0000000140), 0x800)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000400)={0xfffffffc, 0x1, 0x8, {0x2, 0x10001}, 0x401, 0xc00000})
sendfile(r0, r1, &(0x7f0000000000)=0xffffffff, 0x2)
r3 = getpgid(0x0)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x3, 0x2, 0x7, 0x6, 0x0, 0xdcc0, 0x80038, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10001, 0x4, @perf_bp={&(0x7f00000001c0), 0xc}, 0x8000, 0x1f, 0xfff, 0x9, 0x9, 0xfffffe42, 0x3, 0x0, 0x5, 0x0, 0x4618}, r3, 0x1, r0, 0xb)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
03:29:03 executing program 6:
statx(0xffffffffffffffff, &(0x7f0000000180)='.\x00', 0x0, 0x7ff, &(0x7f0000000480))
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x5024, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x2, 0x309}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000380), 0x2, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0)
accept4$inet6(r2, 0x0, &(0x7f0000000140), 0x800)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000400)={0xfffffffc, 0x1, 0x8, {0x2, 0x10001}, 0x401, 0xc00000})
sendfile(r0, r1, &(0x7f0000000000)=0xffffffff, 0x2)
r3 = getpgid(0x0)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x3, 0x2, 0x7, 0x6, 0x0, 0xdcc0, 0x80038, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10001, 0x4, @perf_bp={&(0x7f00000001c0), 0xc}, 0x8000, 0x1f, 0xfff, 0x9, 0x9, 0xfffffe42, 0x3, 0x0, 0x5, 0x0, 0x4618}, r3, 0x1, r0, 0xb)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
03:29:03 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00')
pread64(r0, &(0x7f0000003680)=""/237, 0xed, 0x0)
[ 125.040170] loop0: detected capacity change from 0 to 16383
[ 125.050775] loop0: detected capacity change from 0 to 16383
03:29:03 executing program 5:
statx(0xffffffffffffffff, &(0x7f0000000180)='.\x00', 0x0, 0x7ff, &(0x7f0000000480))
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x5024, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x2, 0x309}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000380), 0x2, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0)
accept4$inet6(r2, 0x0, &(0x7f0000000140), 0x800)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000400)={0xfffffffc, 0x1, 0x8, {0x2, 0x10001}, 0x401, 0xc00000})
sendfile(r0, r1, &(0x7f0000000000)=0xffffffff, 0x2)
r3 = getpgid(0x0)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x3, 0x2, 0x7, 0x6, 0x0, 0xdcc0, 0x80038, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10001, 0x4, @perf_bp={&(0x7f00000001c0), 0xc}, 0x8000, 0x1f, 0xfff, 0x9, 0x9, 0xfffffe42, 0x3, 0x0, 0x5, 0x0, 0x4618}, r3, 0x1, r0, 0xb)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
03:29:03 executing program 0:
statx(0xffffffffffffffff, &(0x7f0000000180)='.\x00', 0x0, 0x7ff, &(0x7f0000000480))
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x5024, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x2, 0x309}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000380), 0x2, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0)
accept4$inet6(r2, 0x0, &(0x7f0000000140), 0x800)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000400)={0xfffffffc, 0x1, 0x8, {0x2, 0x10001}, 0x401, 0xc00000})
sendfile(r0, r1, &(0x7f0000000000)=0xffffffff, 0x2)
r3 = getpgid(0x0)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x3, 0x2, 0x7, 0x6, 0x0, 0xdcc0, 0x80038, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10001, 0x4, @perf_bp={&(0x7f00000001c0), 0xc}, 0x8000, 0x1f, 0xfff, 0x9, 0x9, 0xfffffe42, 0x3, 0x0, 0x5, 0x0, 0x4618}, r3, 0x1, r0, 0xb)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
03:29:03 executing program 6:
statx(0xffffffffffffffff, &(0x7f0000000180)='.\x00', 0x0, 0x7ff, &(0x7f0000000480))
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x5024, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x2, 0x309}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000380), 0x2, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0)
accept4$inet6(r2, 0x0, &(0x7f0000000140), 0x800)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000400)={0xfffffffc, 0x1, 0x8, {0x2, 0x10001}, 0x401, 0xc00000})
sendfile(r0, r1, &(0x7f0000000000)=0xffffffff, 0x2)
r3 = getpgid(0x0)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x3, 0x2, 0x7, 0x6, 0x0, 0xdcc0, 0x80038, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10001, 0x4, @perf_bp={&(0x7f00000001c0), 0xc}, 0x8000, 0x1f, 0xfff, 0x9, 0x9, 0xfffffe42, 0x3, 0x0, 0x5, 0x0, 0x4618}, r3, 0x1, r0, 0xb)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
03:29:03 executing program 2:
statx(0xffffffffffffffff, &(0x7f0000000180)='.\x00', 0x0, 0x7ff, &(0x7f0000000480))
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x5024, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x2, 0x309}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000380), 0x2, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0)
accept4$inet6(r2, 0x0, &(0x7f0000000140), 0x800)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000400)={0xfffffffc, 0x1, 0x8, {0x2, 0x10001}, 0x401, 0xc00000})
sendfile(r0, r1, &(0x7f0000000000)=0xffffffff, 0x2)
r3 = getpgid(0x0)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x3, 0x2, 0x7, 0x6, 0x0, 0xdcc0, 0x80038, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10001, 0x4, @perf_bp={&(0x7f00000001c0), 0xc}, 0x8000, 0x1f, 0xfff, 0x9, 0x9, 0xfffffe42, 0x3, 0x0, 0x5, 0x0, 0x4618}, r3, 0x1, r0, 0xb)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
03:29:03 executing program 4:
r0 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0xc, 0x0, &(0x7f0000000100))
03:29:03 executing program 7:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x201, 0x1}, 0x6)
03:29:03 executing program 0:
statx(0xffffffffffffffff, &(0x7f0000000180)='.\x00', 0x0, 0x7ff, &(0x7f0000000480))
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x5024, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x2, 0x309}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000380), 0x2, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0)
accept4$inet6(r2, 0x0, &(0x7f0000000140), 0x800)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000400)={0xfffffffc, 0x1, 0x8, {0x2, 0x10001}, 0x401, 0xc00000})
sendfile(r0, r1, &(0x7f0000000000)=0xffffffff, 0x2)
r3 = getpgid(0x0)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x3, 0x2, 0x7, 0x6, 0x0, 0xdcc0, 0x80038, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10001, 0x4, @perf_bp={&(0x7f00000001c0), 0xc}, 0x8000, 0x1f, 0xfff, 0x9, 0x9, 0xfffffe42, 0x3, 0x0, 0x5, 0x0, 0x4618}, r3, 0x1, r0, 0xb)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
03:29:03 executing program 7:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@loopback}, {@in=@multicast1, 0x0, 0x6c}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)
03:29:03 executing program 2:
statx(0xffffffffffffffff, &(0x7f0000000180)='.\x00', 0x0, 0x7ff, &(0x7f0000000480))
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x5024, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x2, 0x309}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000380), 0x2, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0)
accept4$inet6(r2, 0x0, &(0x7f0000000140), 0x800)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000400)={0xfffffffc, 0x1, 0x8, {0x2, 0x10001}, 0x401, 0xc00000})
sendfile(r0, r1, &(0x7f0000000000)=0xffffffff, 0x2)
r3 = getpgid(0x0)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x3, 0x2, 0x7, 0x6, 0x0, 0xdcc0, 0x80038, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10001, 0x4, @perf_bp={&(0x7f00000001c0), 0xc}, 0x8000, 0x1f, 0xfff, 0x9, 0x9, 0xfffffe42, 0x3, 0x0, 0x5, 0x0, 0x4618}, r3, 0x1, r0, 0xb)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
03:29:03 executing program 3:
clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, &(0x7f0000000140)=""/242, 0x0}, 0x58)
03:29:03 executing program 4:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
r1 = socket$inet6(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)
03:29:03 executing program 7:
syz_open_dev$ttys(0xc, 0x2, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000006a40), 0x2000, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$sr(0xffffffffffffff9c, &(0x7f0000006b40), 0x8000, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000006d00)={&(0x7f0000006ac0), 0xc, &(0x7f0000006cc0)={&(0x7f0000006c00)={0x18, 0x0, 0x0, 0x0, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}}, 0x800)
r1 = memfd_create(&(0x7f0000006d40)=')){#}/:[\x00', 0x3)
fcntl$lock(r1, 0x5, &(0x7f0000006d80)={0x1, 0x0, 0xffffffffffffff37})
03:29:03 executing program 1:
statx(0xffffffffffffffff, &(0x7f0000000180)='.\x00', 0x0, 0x7ff, &(0x7f0000000480))
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x5024, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x2, 0x309}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000380), 0x2, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0)
accept4$inet6(r2, 0x0, &(0x7f0000000140), 0x800)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000400)={0xfffffffc, 0x1, 0x8, {0x2, 0x10001}, 0x401, 0xc00000})
sendfile(r0, r1, &(0x7f0000000000)=0xffffffff, 0x2)
r3 = getpgid(0x0)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x3, 0x2, 0x7, 0x6, 0x0, 0xdcc0, 0x80038, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10001, 0x4, @perf_bp={&(0x7f00000001c0), 0xc}, 0x8000, 0x1f, 0xfff, 0x9, 0x9, 0xfffffe42, 0x3, 0x0, 0x5, 0x0, 0x4618}, r3, 0x1, r0, 0xb)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
03:29:03 executing program 0:
statx(0xffffffffffffffff, &(0x7f0000000180)='.\x00', 0x0, 0x7ff, &(0x7f0000000480))
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x5024, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x2, 0x309}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000380), 0x2, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0)
accept4$inet6(r2, 0x0, &(0x7f0000000140), 0x800)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000400)={0xfffffffc, 0x1, 0x8, {0x2, 0x10001}, 0x401, 0xc00000})
sendfile(r0, r1, &(0x7f0000000000)=0xffffffff, 0x2)
r3 = getpgid(0x0)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x3, 0x2, 0x7, 0x6, 0x0, 0xdcc0, 0x80038, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10001, 0x4, @perf_bp={&(0x7f00000001c0), 0xc}, 0x8000, 0x1f, 0xfff, 0x9, 0x9, 0xfffffe42, 0x3, 0x0, 0x5, 0x0, 0x4618}, r3, 0x1, r0, 0xb)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
[ 125.384391] hrtimer: interrupt took 15519 ns
03:29:04 executing program 5:
statx(0xffffffffffffffff, &(0x7f0000000180)='.\x00', 0x0, 0x7ff, &(0x7f0000000480))
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x5024, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x2, 0x309}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000380), 0x2, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0)
accept4$inet6(r2, 0x0, &(0x7f0000000140), 0x800)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000400)={0xfffffffc, 0x1, 0x8, {0x2, 0x10001}, 0x401, 0xc00000})
sendfile(r0, r1, &(0x7f0000000000)=0xffffffff, 0x2)
r3 = getpgid(0x0)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x3, 0x2, 0x7, 0x6, 0x0, 0xdcc0, 0x80038, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10001, 0x4, @perf_bp={&(0x7f00000001c0), 0xc}, 0x8000, 0x1f, 0xfff, 0x9, 0x9, 0xfffffe42, 0x3, 0x0, 0x5, 0x0, 0x4618}, r3, 0x1, r0, 0xb)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
03:29:04 executing program 4:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
r1 = socket$inet6(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)
03:29:04 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
r1 = socket$inet6(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)
03:29:04 executing program 1:
statx(0xffffffffffffffff, &(0x7f0000000180)='.\x00', 0x0, 0x7ff, &(0x7f0000000480))
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x5024, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x2, 0x309}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000380), 0x2, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0)
accept4$inet6(r2, 0x0, &(0x7f0000000140), 0x800)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000400)={0xfffffffc, 0x1, 0x8, {0x2, 0x10001}, 0x401, 0xc00000})
sendfile(r0, r1, &(0x7f0000000000)=0xffffffff, 0x2)
r3 = getpgid(0x0)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x3, 0x2, 0x7, 0x6, 0x0, 0xdcc0, 0x80038, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10001, 0x4, @perf_bp={&(0x7f00000001c0), 0xc}, 0x8000, 0x1f, 0xfff, 0x9, 0x9, 0xfffffe42, 0x3, 0x0, 0x5, 0x0, 0x4618}, r3, 0x1, r0, 0xb)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
03:29:04 executing program 6:
statx(0xffffffffffffffff, &(0x7f0000000180)='.\x00', 0x0, 0x7ff, &(0x7f0000000480))
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x5024, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x2, 0x309}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000380), 0x2, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0)
accept4$inet6(r2, 0x0, &(0x7f0000000140), 0x800)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000400)={0xfffffffc, 0x1, 0x8, {0x2, 0x10001}, 0x401, 0xc00000})
sendfile(r0, r1, &(0x7f0000000000)=0xffffffff, 0x2)
r3 = getpgid(0x0)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x3, 0x2, 0x7, 0x6, 0x0, 0xdcc0, 0x80038, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10001, 0x4, @perf_bp={&(0x7f00000001c0), 0xc}, 0x8000, 0x1f, 0xfff, 0x9, 0x9, 0xfffffe42, 0x3, 0x0, 0x5, 0x0, 0x4618}, r3, 0x1, r0, 0xb)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
03:29:04 executing program 7:
syz_open_dev$ttys(0xc, 0x2, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000006a40), 0x2000, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$sr(0xffffffffffffff9c, &(0x7f0000006b40), 0x8000, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000006d00)={&(0x7f0000006ac0), 0xc, &(0x7f0000006cc0)={&(0x7f0000006c00)={0x18, 0x0, 0x0, 0x0, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}}, 0x800)
r1 = memfd_create(&(0x7f0000006d40)=')){#}/:[\x00', 0x3)
fcntl$lock(r1, 0x5, &(0x7f0000006d80)={0x1, 0x0, 0xffffffffffffff37})
03:29:04 executing program 2:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000003780)={{}, {0x8}})
03:29:04 executing program 0:
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil)
03:29:04 executing program 4:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
r1 = socket$inet6(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)
03:29:04 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000006a40), 0x2000, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$sr(0xffffffffffffff9c, &(0x7f0000006b40), 0x8000, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000006d00)={&(0x7f0000006ac0), 0xc, &(0x7f0000006cc0)={&(0x7f0000006c00)={0x18, 0x0, 0x0, 0x0, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}}, 0x800)
r1 = memfd_create(&(0x7f0000006d40)=')){#}/:[\x00', 0x3)
fcntl$lock(r1, 0x5, &(0x7f0000006d80)={0x1, 0x0, 0xffffffffffffff37})
03:29:04 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
03:29:04 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockname(r0, 0x0, &(0x7f0000000080))
03:29:04 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
r1 = socket$inet6(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)
03:29:04 executing program 4:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
r1 = socket$inet6(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)
03:29:04 executing program 7:
syz_open_dev$ttys(0xc, 0x2, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000006a40), 0x2000, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$sr(0xffffffffffffff9c, &(0x7f0000006b40), 0x8000, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000006d00)={&(0x7f0000006ac0), 0xc, &(0x7f0000006cc0)={&(0x7f0000006c00)={0x18, 0x0, 0x0, 0x0, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}}, 0x800)
r1 = memfd_create(&(0x7f0000006d40)=')){#}/:[\x00', 0x3)
fcntl$lock(r1, 0x5, &(0x7f0000006d80)={0x1, 0x0, 0xffffffffffffff37})
03:29:04 executing program 5:
statx(0xffffffffffffffff, &(0x7f0000000180)='.\x00', 0x0, 0x7ff, &(0x7f0000000480))
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x5024, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x2, 0x309}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000380), 0x2, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0)
accept4$inet6(r2, 0x0, &(0x7f0000000140), 0x800)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000400)={0xfffffffc, 0x1, 0x8, {0x2, 0x10001}, 0x401, 0xc00000})
sendfile(r0, r1, &(0x7f0000000000)=0xffffffff, 0x2)
r3 = getpgid(0x0)
ptrace$setopts(0x4206, r3, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x3, 0x2, 0x7, 0x6, 0x0, 0xdcc0, 0x80038, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10001, 0x4, @perf_bp={&(0x7f00000001c0), 0xc}, 0x8000, 0x1f, 0xfff, 0x9, 0x9, 0xfffffe42, 0x3, 0x0, 0x5, 0x0, 0x4618}, r3, 0x1, r0, 0xb)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
03:29:04 executing program 6:
prctl$PR_SET_PDEATHSIG(0x34, 0x41)
03:29:04 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockname(r0, 0x0, &(0x7f0000000080))
03:29:04 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff)
03:29:04 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000006a40), 0x2000, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$sr(0xffffffffffffff9c, &(0x7f0000006b40), 0x8000, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000006d00)={&(0x7f0000006ac0), 0xc, &(0x7f0000006cc0)={&(0x7f0000006c00)={0x18, 0x0, 0x0, 0x0, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}}, 0x800)
r1 = memfd_create(&(0x7f0000006d40)=')){#}/:[\x00', 0x3)
fcntl$lock(r1, 0x5, &(0x7f0000006d80)={0x1, 0x0, 0xffffffffffffff37})
03:29:04 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
r1 = socket$inet6(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000540)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)
03:29:04 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockname(r0, 0x0, &(0x7f0000000080))
03:29:04 executing program 6:
prctl$PR_SET_PDEATHSIG(0x34, 0x41)
03:29:04 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockname(r0, 0x0, &(0x7f0000000080))
03:29:04 executing program 4:
getrusage(0xffffffffffffffff, &(0x7f00000000c0))
03:29:04 executing program 0:
syz_open_dev$ttys(0xc, 0x2, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000006a40), 0x2000, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$sr(0xffffffffffffff9c, &(0x7f0000006b40), 0x8000, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000006d00)={&(0x7f0000006ac0), 0xc, &(0x7f0000006cc0)={&(0x7f0000006c00)={0x18, 0x0, 0x0, 0x0, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}}, 0x800)
r1 = memfd_create(&(0x7f0000006d40)=')){#}/:[\x00', 0x3)
fcntl$lock(r1, 0x5, &(0x7f0000006d80)={0x1, 0x0, 0xffffffffffffff37})
03:29:04 executing program 7:
syz_open_dev$ttys(0xc, 0x2, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000006a40), 0x2000, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$sr(0xffffffffffffff9c, &(0x7f0000006b40), 0x8000, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000006d00)={&(0x7f0000006ac0), 0xc, &(0x7f0000006cc0)={&(0x7f0000006c00)={0x18, 0x0, 0x0, 0x0, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}}, 0x800)
r1 = memfd_create(&(0x7f0000006d40)=')){#}/:[\x00', 0x3)
fcntl$lock(r1, 0x5, &(0x7f0000006d80)={0x1, 0x0, 0xffffffffffffff37})
03:29:04 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, &(0x7f0000000040))
03:29:05 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20000000)
03:29:05 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000400)={0xa, 0x4e20, 0x0, @loopback, 0x3f5c}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x3}}, @dstopts_2292={{0x18}}, @rthdrdstopts={{0x18}}], 0x48}}], 0x1, 0x0)
03:29:05 executing program 0:
r0 = msgget$private(0x0, 0x0)
msgctl$IPC_RMID(r0, 0x0)
03:29:05 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, &(0x7f0000000040))
03:29:05 executing program 5:
semctl$IPC_SET(0x0, 0x0, 0x1, 0x0)
03:29:05 executing program 6:
prctl$PR_SET_PDEATHSIG(0x34, 0x41)
03:29:05 executing program 3:
syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "f2e2a6", 0x0, 0x0, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @loopback}, [@hopopts={0x3b}]}}}}}}}, 0x0)
03:29:05 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000040)={0xd, 0x65, 0xffff, 0x0, 0x1, '9P2000.L'}, 0x15)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
03:29:05 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, &(0x7f0000000040))
03:29:05 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000270008000f8010020004000000000000000000080002943a05df153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8fffffff0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/96, 0x60, 0x1e0}, {&(0x7f0000010200)="f8fffffff0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x400}, {&(0x7f0000010300)="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", 0x120, 0x600}, {&(0x7f0000010500)="2e2020202020202020202010003ae970325132510000e97032510300000000002e2e20202020202020202010003ae970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202020003ae970325132510000e970325104001a040000", 0x80, 0x1600}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x1800}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x1e00}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x4400}], 0x0, &(0x7f0000010d00))
[ 126.589926] loop5: detected capacity change from 0 to 128
03:29:05 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000040)={0xd, 0x65, 0xffff, 0x0, 0x1, '9P2000.L'}, 0x15)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
03:29:05 executing program 6:
prctl$PR_SET_PDEATHSIG(0x34, 0x41)
03:29:05 executing program 0:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff})
sendmmsg$inet(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000840)="a7", 0x1}, {&(0x7f00000008c0)='\b:', 0x2}], 0x2}}], 0x1, 0x1)
03:29:05 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, &(0x7f0000000040))
03:29:05 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCSFF(r0, 0x40304580, 0x0)
03:29:05 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {0x14}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}}, 0x0)
03:29:05 executing program 5:
r0 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)='}\x00', &(0x7f0000000080), 0x0)
03:29:05 executing program 3:
syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "f2e2a6", 0x0, 0x0, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @loopback}, [@hopopts={0x3b}]}}}}}}}, 0x0)
03:29:05 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5}, 0x0)
syz_io_uring_setup(0x16e0, &(0x7f0000001400), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001480), &(0x7f00000014c0)=0x0)
syz_io_uring_submit(r1, r3, &(0x7f0000000300)=@IORING_OP_FSYNC, 0x0)
io_uring_enter(r0, 0x100008, 0x0, 0x0, 0x0, 0x0)
03:29:05 executing program 0:
quotactl(0x0, &(0x7f0000000600)='./file0\x00', 0xee00, 0x0)
03:29:05 executing program 4:
r0 = timerfd_create(0x1, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0})
timerfd_settime(r0, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x0, r1+60000000}}, &(0x7f0000000200))
03:29:05 executing program 3:
syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "f2e2a6", 0x0, 0x0, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @loopback}, [@hopopts={0x3b}]}}}}}}}, 0x0)
03:29:05 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0)
03:29:05 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {0x14}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}}, 0x0)
03:29:05 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000040)={0xd, 0x65, 0xffff, 0x0, 0x1, '9P2000.L'}, 0x15)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
03:29:05 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
03:29:05 executing program 0:
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf0ff7f)
03:29:05 executing program 3:
syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "f2e2a6", 0x0, 0x0, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @loopback}, [@hopopts={0x3b}]}}}}}}}, 0x0)
03:29:05 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
lseek(r0, 0x0, 0x4)
03:29:05 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5}, 0x0)
syz_io_uring_setup(0x16e0, &(0x7f0000001400), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001480), &(0x7f00000014c0)=0x0)
syz_io_uring_submit(r1, r3, &(0x7f0000000300)=@IORING_OP_FSYNC, 0x0)
io_uring_enter(r0, 0x100008, 0x0, 0x0, 0x0, 0x0)
03:29:05 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {0x14}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}}, 0x0)
03:29:05 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000040)={0xd, 0x65, 0xffff, 0x0, 0x1, '9P2000.L'}, 0x15)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
03:29:05 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
lseek(r0, 0x0, 0x4)
03:29:05 executing program 0:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
io_destroy(0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff)
03:29:05 executing program 5:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)=ANY=[])
03:29:05 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
lseek(r0, 0x0, 0x4)
03:29:05 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5}, 0x0)
syz_io_uring_setup(0x16e0, &(0x7f0000001400), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001480), &(0x7f00000014c0)=0x0)
syz_io_uring_submit(r1, r3, &(0x7f0000000300)=@IORING_OP_FSYNC, 0x0)
io_uring_enter(r0, 0x100008, 0x0, 0x0, 0x0, 0x0)
03:29:05 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {0x14}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}}, 0x0)
03:29:05 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/179, 0xb3}], 0x1)
[ 126.981865] audit: type=1400 audit(1664594945.657:9): avc: denied { read } for pid=4333 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
03:29:05 executing program 5:
timer_create(0x0, 0x0, &(0x7f00000012c0))
clock_gettime(0x0, &(0x7f0000001300)={0x0, 0x0})
timer_settime(0x0, 0x1, &(0x7f0000001340)={{0x0, 0x989680}, {r0, r1+10000000}}, 0x0)
timer_gettime(0x0, &(0x7f0000001480))
03:29:05 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
lseek(r0, 0x0, 0x4)
03:29:05 executing program 1:
r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5}, 0x0)
syz_io_uring_setup(0x16e0, &(0x7f0000001400), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001480), &(0x7f00000014c0)=0x0)
syz_io_uring_submit(r1, r3, &(0x7f0000000300)=@IORING_OP_FSYNC, 0x0)
io_uring_enter(r0, 0x100008, 0x0, 0x0, 0x0, 0x0)
03:29:05 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/179, 0xb3}], 0x1)
03:29:05 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
lseek(r0, 0x0, 0x4)
03:29:05 executing program 2:
syz_mount_image$nfs4(&(0x7f00000009c0), &(0x7f0000000a00)='./file1\x00', 0x0, 0x1, &(0x7f0000001a80)=[{0x0}], 0x1040, &(0x7f0000001ac0))
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, 0x0, 0x0)
03:29:05 executing program 7:
r0 = shmget$private(0x0, 0x3000, 0x54001b05, &(0x7f0000ff9000/0x3000)=nil)
shmctl$IPC_RMID(r0, 0x0)
03:29:05 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000040))
03:29:05 executing program 5:
timer_create(0x0, 0x0, &(0x7f00000012c0))
clock_gettime(0x0, &(0x7f0000001300)={0x0, 0x0})
timer_settime(0x0, 0x1, &(0x7f0000001340)={{0x0, 0x989680}, {r0, r1+10000000}}, 0x0)
timer_gettime(0x0, &(0x7f0000001480))
03:29:05 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
lseek(r0, 0x0, 0x4)
03:29:05 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mtu(r0, 0x29, 0x31, &(0x7f0000000000), 0x4)
03:29:05 executing program 7:
process_madvise(0xffffffffffffffff, &(0x7f0000008100)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0)
03:29:05 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/179, 0xb3}], 0x1)
03:29:05 executing program 1:
shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil)
r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil)
shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil)
r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil)
shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000)
openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa)
03:29:05 executing program 5:
timer_create(0x0, 0x0, &(0x7f00000012c0))
clock_gettime(0x0, &(0x7f0000001300)={0x0, 0x0})
timer_settime(0x0, 0x1, &(0x7f0000001340)={{0x0, 0x989680}, {r0, r1+10000000}}, 0x0)
timer_gettime(0x0, &(0x7f0000001480))
03:29:05 executing program 0:
r0 = syz_io_uring_setup(0x2b2, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x2, 0x184}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x2175, &(0x7f0000000680)={0x0, 0x1df2, 0x4, 0x102, 0x285}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800, 0x0, {0x0, r6}}, 0x3)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0)
r8 = syz_open_dev$tty20(0xc, 0x4, 0x1)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000800)=[r7, r8], 0x2)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r9, 0x0, 0x0, 0x87ffffc)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000540), &(0x7f0000000580)=0x4)
getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000640)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000480)=0x10)
syz_io_uring_submit(r1, r5, &(0x7f0000000180)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x4}, 0x101)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x7d65, &(0x7f00000001c0)={0x0, 0xf798, 0x4, 0x1, 0x60, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240))
03:29:05 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0)
lseek(r0, 0x0, 0x4)
03:29:05 executing program 2:
syz_mount_image$nfs4(&(0x7f00000009c0), &(0x7f0000000a00)='./file1\x00', 0x0, 0x1, &(0x7f0000001a80)=[{0x0}], 0x1040, &(0x7f0000001ac0))
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, 0x0, 0x0)
03:29:05 executing program 5:
timer_create(0x0, 0x0, &(0x7f00000012c0))
clock_gettime(0x0, &(0x7f0000001300)={0x0, 0x0})
timer_settime(0x0, 0x1, &(0x7f0000001340)={{0x0, 0x989680}, {r0, r1+10000000}}, 0x0)
timer_gettime(0x0, &(0x7f0000001480))
03:29:05 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/179, 0xb3}], 0x1)
03:29:05 executing program 2:
syz_mount_image$nfs4(&(0x7f00000009c0), &(0x7f0000000a00)='./file1\x00', 0x0, 0x1, &(0x7f0000001a80)=[{0x0}], 0x1040, &(0x7f0000001ac0))
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, 0x0, 0x0)
03:29:06 executing program 7:
process_madvise(0xffffffffffffffff, &(0x7f0000008100)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0)
03:29:06 executing program 2:
syz_mount_image$nfs4(&(0x7f00000009c0), &(0x7f0000000a00)='./file1\x00', 0x0, 0x1, &(0x7f0000001a80)=[{0x0}], 0x1040, &(0x7f0000001ac0))
sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, 0x0, 0x0)
03:29:06 executing program 1:
shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil)
r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil)
shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil)
r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil)
shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000)
openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa)
03:29:06 executing program 7:
process_madvise(0xffffffffffffffff, &(0x7f0000008100)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0)
03:29:06 executing program 7:
process_madvise(0xffffffffffffffff, &(0x7f0000008100)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0)
03:29:06 executing program 1:
shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil)
r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil)
shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil)
r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil)
shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000)
openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa)
03:29:06 executing program 5:
shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil)
r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil)
shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil)
r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil)
shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000)
openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa)
03:29:06 executing program 6:
shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil)
r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil)
shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil)
r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil)
shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000)
openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa)
03:29:06 executing program 1:
shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil)
r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil)
shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil)
r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil)
shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000)
openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa)
03:29:06 executing program 0:
r0 = syz_io_uring_setup(0x2b2, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x2, 0x184}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x2175, &(0x7f0000000680)={0x0, 0x1df2, 0x4, 0x102, 0x285}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800, 0x0, {0x0, r6}}, 0x3)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0)
r8 = syz_open_dev$tty20(0xc, 0x4, 0x1)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000800)=[r7, r8], 0x2)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r9, 0x0, 0x0, 0x87ffffc)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000540), &(0x7f0000000580)=0x4)
getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000640)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000480)=0x10)
syz_io_uring_submit(r1, r5, &(0x7f0000000180)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x4}, 0x101)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x7d65, &(0x7f00000001c0)={0x0, 0xf798, 0x4, 0x1, 0x60, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240))
03:29:06 executing program 3:
shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil)
r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil)
shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil)
r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil)
shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000)
openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa)
03:29:06 executing program 4:
shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil)
r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil)
shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil)
r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil)
shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000)
openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa)
03:29:06 executing program 7:
ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f00000002c0))
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000300), 0x10dc00, 0x0)
ioctl$CDROMREADMODE1(r0, 0x530d, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x81, 0x6})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
03:29:06 executing program 6:
shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil)
r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil)
shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil)
r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil)
shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000)
openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa)
03:29:06 executing program 5:
shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil)
r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil)
shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil)
r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil)
shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000)
openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa)
03:29:06 executing program 2:
r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00')
readlinkat(r1, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000440)=""/187, 0xbb)
03:29:06 executing program 2:
r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00')
readlinkat(r1, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000440)=""/187, 0xbb)
03:29:06 executing program 7:
r0 = syz_io_uring_setup(0x2b2, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x2, 0x184}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x2175, &(0x7f0000000680)={0x0, 0x1df2, 0x4, 0x102, 0x285}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800, 0x0, {0x0, r6}}, 0x3)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0)
r8 = syz_open_dev$tty20(0xc, 0x4, 0x1)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000800)=[r7, r8], 0x2)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r9, 0x0, 0x0, 0x87ffffc)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000540), &(0x7f0000000580)=0x4)
getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000640)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000480)=0x10)
syz_io_uring_submit(r1, r5, &(0x7f0000000180)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x4}, 0x101)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x7d65, &(0x7f00000001c0)={0x0, 0xf798, 0x4, 0x1, 0x60, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240))
03:29:06 executing program 5:
shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil)
r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil)
shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil)
r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil)
shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000)
openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa)
03:29:06 executing program 4:
shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil)
r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil)
shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil)
r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil)
shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000)
openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa)
03:29:06 executing program 0:
r0 = syz_io_uring_setup(0x2b2, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x2, 0x184}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x2175, &(0x7f0000000680)={0x0, 0x1df2, 0x4, 0x102, 0x285}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800, 0x0, {0x0, r6}}, 0x3)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0)
r8 = syz_open_dev$tty20(0xc, 0x4, 0x1)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000800)=[r7, r8], 0x2)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r9, 0x0, 0x0, 0x87ffffc)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000540), &(0x7f0000000580)=0x4)
getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000640)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000480)=0x10)
syz_io_uring_submit(r1, r5, &(0x7f0000000180)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x4}, 0x101)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x7d65, &(0x7f00000001c0)={0x0, 0xf798, 0x4, 0x1, 0x60, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240))
03:29:06 executing program 3:
shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil)
r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil)
shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil)
r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil)
shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000)
openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa)
03:29:06 executing program 1:
r0 = syz_io_uring_setup(0x2b2, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x2, 0x184}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x2175, &(0x7f0000000680)={0x0, 0x1df2, 0x4, 0x102, 0x285}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800, 0x0, {0x0, r6}}, 0x3)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0)
r8 = syz_open_dev$tty20(0xc, 0x4, 0x1)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000800)=[r7, r8], 0x2)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r9, 0x0, 0x0, 0x87ffffc)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000540), &(0x7f0000000580)=0x4)
getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000640)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000480)=0x10)
syz_io_uring_submit(r1, r5, &(0x7f0000000180)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x4}, 0x101)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x7d65, &(0x7f00000001c0)={0x0, 0xf798, 0x4, 0x1, 0x60, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240))
03:29:06 executing program 4:
shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil)
r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil)
shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil)
r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil)
shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000)
openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa)
03:29:06 executing program 2:
r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00')
readlinkat(r1, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000440)=""/187, 0xbb)
03:29:06 executing program 6:
shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil)
r0 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil)
shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil)
r1 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil)
shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000)
openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x1000)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa)
03:29:06 executing program 0:
r0 = syz_io_uring_setup(0x2b2, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x2, 0x184}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x2175, &(0x7f0000000680)={0x0, 0x1df2, 0x4, 0x102, 0x285}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800, 0x0, {0x0, r6}}, 0x3)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0)
r8 = syz_open_dev$tty20(0xc, 0x4, 0x1)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000800)=[r7, r8], 0x2)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r9, 0x0, 0x0, 0x87ffffc)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000540), &(0x7f0000000580)=0x4)
getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000640)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000480)=0x10)
syz_io_uring_submit(r1, r5, &(0x7f0000000180)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x4}, 0x101)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x7d65, &(0x7f00000001c0)={0x0, 0xf798, 0x4, 0x1, 0x60, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240))
03:29:06 executing program 5:
getrandom(0x0, 0x0, 0x0)
03:29:06 executing program 7:
r0 = syz_io_uring_setup(0x2b2, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x2, 0x184}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x2175, &(0x7f0000000680)={0x0, 0x1df2, 0x4, 0x102, 0x285}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800, 0x0, {0x0, r6}}, 0x3)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0)
r8 = syz_open_dev$tty20(0xc, 0x4, 0x1)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000800)=[r7, r8], 0x2)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r9, 0x0, 0x0, 0x87ffffc)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000540), &(0x7f0000000580)=0x4)
getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000640)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000480)=0x10)
syz_io_uring_submit(r1, r5, &(0x7f0000000180)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x4}, 0x101)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x7d65, &(0x7f00000001c0)={0x0, 0xf798, 0x4, 0x1, 0x60, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240))
03:29:06 executing program 2:
r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00')
readlinkat(r1, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000440)=""/187, 0xbb)
03:29:06 executing program 5:
getrandom(0x0, 0x0, 0x0)
03:29:06 executing program 5:
getrandom(0x0, 0x0, 0x0)
03:29:06 executing program 7:
r0 = syz_io_uring_setup(0x2b2, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x2, 0x184}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x2175, &(0x7f0000000680)={0x0, 0x1df2, 0x4, 0x102, 0x285}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800, 0x0, {0x0, r6}}, 0x3)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdef)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0)
r8 = syz_open_dev$tty20(0xc, 0x4, 0x1)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000800)=[r7, r8], 0x2)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r9, 0x0, 0x0, 0x87ffffc)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000540), &(0x7f0000000580)=0x4)
getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000640)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000480)=0x10)
syz_io_uring_submit(r1, r5, &(0x7f0000000180)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x4}, 0x101)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r3, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0)
io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x7d65, &(0x7f00000001c0)={0x0, 0xf798, 0x4, 0x1, 0x60, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240))
03:29:06 executing program 1:
r0 = syz_io_uring_setup(0x2b2, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x2, 0x184}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x2175, &(0x7f0000000680)={0x0, 0x1df2, 0x4, 0x102, 0x285}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000380)=