Warning: Permanently added '[localhost]:61244' (ECDSA) to the list of known hosts. 2022/10/05 11:44:53 fuzzer started 2022/10/05 11:44:53 dialing manager at localhost:37193 syzkaller login: [ 36.357763] cgroup: Unknown subsys name 'net' [ 36.458886] cgroup: Unknown subsys name 'rlimit' 2022/10/05 11:45:08 syscalls: 2215 2022/10/05 11:45:08 code coverage: enabled 2022/10/05 11:45:08 comparison tracing: enabled 2022/10/05 11:45:08 extra coverage: enabled 2022/10/05 11:45:08 setuid sandbox: enabled 2022/10/05 11:45:08 namespace sandbox: enabled 2022/10/05 11:45:08 Android sandbox: enabled 2022/10/05 11:45:08 fault injection: enabled 2022/10/05 11:45:08 leak checking: enabled 2022/10/05 11:45:08 net packet injection: enabled 2022/10/05 11:45:08 net device setup: enabled 2022/10/05 11:45:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/05 11:45:08 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/05 11:45:08 USB emulation: enabled 2022/10/05 11:45:08 hci packet injection: enabled 2022/10/05 11:45:08 wifi device emulation: failed to parse kernel version (6.0.0-next-20221005) 2022/10/05 11:45:08 802.15.4 emulation: enabled 2022/10/05 11:45:08 fetching corpus: 0, signal 0/2000 (executing program) 2022/10/05 11:45:08 fetching corpus: 50, signal 30701/33956 (executing program) 2022/10/05 11:45:08 fetching corpus: 100, signal 41783/46272 (executing program) 2022/10/05 11:45:08 fetching corpus: 150, signal 49051/54725 (executing program) 2022/10/05 11:45:08 fetching corpus: 200, signal 53196/60026 (executing program) 2022/10/05 11:45:08 fetching corpus: 250, signal 58866/66662 (executing program) 2022/10/05 11:45:09 fetching corpus: 300, signal 63807/72480 (executing program) 2022/10/05 11:45:09 fetching corpus: 350, signal 67931/77453 (executing program) 2022/10/05 11:45:09 fetching corpus: 400, signal 70363/80831 (executing program) 2022/10/05 11:45:09 fetching corpus: 450, signal 72591/83949 (executing program) 2022/10/05 11:45:09 fetching corpus: 500, signal 74680/86846 (executing program) 2022/10/05 11:45:09 fetching corpus: 550, signal 77786/90646 (executing program) 2022/10/05 11:45:09 fetching corpus: 600, signal 80244/93717 (executing program) 2022/10/05 11:45:09 fetching corpus: 650, signal 81803/96037 (executing program) 2022/10/05 11:45:09 fetching corpus: 700, signal 83405/98324 (executing program) 2022/10/05 11:45:10 fetching corpus: 750, signal 86538/101836 (executing program) 2022/10/05 11:45:10 fetching corpus: 800, signal 88870/104664 (executing program) 2022/10/05 11:45:10 fetching corpus: 850, signal 90186/106660 (executing program) 2022/10/05 11:45:10 fetching corpus: 900, signal 93142/109896 (executing program) 2022/10/05 11:45:10 fetching corpus: 950, signal 95118/112156 (executing program) 2022/10/05 11:45:10 fetching corpus: 1000, signal 97089/114455 (executing program) 2022/10/05 11:45:10 fetching corpus: 1050, signal 98605/116330 (executing program) 2022/10/05 11:45:10 fetching corpus: 1100, signal 99604/117774 (executing program) 2022/10/05 11:45:10 fetching corpus: 1150, signal 101144/119638 (executing program) 2022/10/05 11:45:11 fetching corpus: 1200, signal 102440/121295 (executing program) 2022/10/05 11:45:11 fetching corpus: 1250, signal 104442/123399 (executing program) 2022/10/05 11:45:11 fetching corpus: 1300, signal 105835/124993 (executing program) 2022/10/05 11:45:11 fetching corpus: 1350, signal 107583/126795 (executing program) 2022/10/05 11:45:11 fetching corpus: 1400, signal 108903/128293 (executing program) 2022/10/05 11:45:11 fetching corpus: 1450, signal 110738/130108 (executing program) 2022/10/05 11:45:11 fetching corpus: 1500, signal 111792/131438 (executing program) 2022/10/05 11:45:11 fetching corpus: 1550, signal 114074/133487 (executing program) 2022/10/05 11:45:11 fetching corpus: 1600, signal 114742/134486 (executing program) 2022/10/05 11:45:12 fetching corpus: 1650, signal 117391/136718 (executing program) 2022/10/05 11:45:12 fetching corpus: 1700, signal 118384/137851 (executing program) 2022/10/05 11:45:12 fetching corpus: 1750, signal 119761/139173 (executing program) 2022/10/05 11:45:12 fetching corpus: 1800, signal 121021/140423 (executing program) 2022/10/05 11:45:12 fetching corpus: 1850, signal 123141/142088 (executing program) 2022/10/05 11:45:12 fetching corpus: 1900, signal 124398/143267 (executing program) 2022/10/05 11:45:12 fetching corpus: 1950, signal 125347/144221 (executing program) 2022/10/05 11:45:12 fetching corpus: 2000, signal 126898/145472 (executing program) 2022/10/05 11:45:12 fetching corpus: 2050, signal 129013/146933 (executing program) 2022/10/05 11:45:12 fetching corpus: 2100, signal 129821/147684 (executing program) 2022/10/05 11:45:13 fetching corpus: 2150, signal 131132/148670 (executing program) 2022/10/05 11:45:13 fetching corpus: 2200, signal 131747/149340 (executing program) 2022/10/05 11:45:13 fetching corpus: 2250, signal 132615/150091 (executing program) 2022/10/05 11:45:13 fetching corpus: 2300, signal 133515/150829 (executing program) 2022/10/05 11:45:13 fetching corpus: 2350, signal 135231/151891 (executing program) 2022/10/05 11:45:13 fetching corpus: 2400, signal 135807/152414 (executing program) 2022/10/05 11:45:13 fetching corpus: 2450, signal 136652/153072 (executing program) 2022/10/05 11:45:13 fetching corpus: 2500, signal 138317/154012 (executing program) 2022/10/05 11:45:13 fetching corpus: 2550, signal 139521/154777 (executing program) 2022/10/05 11:45:13 fetching corpus: 2600, signal 140900/155578 (executing program) 2022/10/05 11:45:14 fetching corpus: 2650, signal 142017/156250 (executing program) 2022/10/05 11:45:14 fetching corpus: 2700, signal 142670/156715 (executing program) 2022/10/05 11:45:14 fetching corpus: 2750, signal 143629/157282 (executing program) 2022/10/05 11:45:14 fetching corpus: 2800, signal 144788/157891 (executing program) 2022/10/05 11:45:14 fetching corpus: 2850, signal 145780/158377 (executing program) 2022/10/05 11:45:14 fetching corpus: 2900, signal 147559/159081 (executing program) 2022/10/05 11:45:14 fetching corpus: 2950, signal 148496/159553 (executing program) 2022/10/05 11:45:14 fetching corpus: 3000, signal 149320/159941 (executing program) 2022/10/05 11:45:14 fetching corpus: 3050, signal 149857/160263 (executing program) 2022/10/05 11:45:14 fetching corpus: 3100, signal 150443/160579 (executing program) 2022/10/05 11:45:15 fetching corpus: 3150, signal 151052/160875 (executing program) 2022/10/05 11:45:15 fetching corpus: 3200, signal 151532/161115 (executing program) 2022/10/05 11:45:15 fetching corpus: 3250, signal 152046/161390 (executing program) 2022/10/05 11:45:15 fetching corpus: 3300, signal 152886/161840 (executing program) 2022/10/05 11:45:15 fetching corpus: 3350, signal 153749/162111 (executing program) 2022/10/05 11:45:15 fetching corpus: 3400, signal 154640/162352 (executing program) 2022/10/05 11:45:15 fetching corpus: 3450, signal 155119/162534 (executing program) 2022/10/05 11:45:15 fetching corpus: 3500, signal 155769/162714 (executing program) 2022/10/05 11:45:15 fetching corpus: 3550, signal 156629/162906 (executing program) 2022/10/05 11:45:16 fetching corpus: 3600, signal 157976/163138 (executing program) 2022/10/05 11:45:16 fetching corpus: 3650, signal 158932/163329 (executing program) 2022/10/05 11:45:16 fetching corpus: 3700, signal 159555/163424 (executing program) 2022/10/05 11:45:16 fetching corpus: 3747, signal 159959/163599 (executing program) 2022/10/05 11:45:16 fetching corpus: 3747, signal 159959/163644 (executing program) 2022/10/05 11:45:16 fetching corpus: 3747, signal 159959/163701 (executing program) 2022/10/05 11:45:16 fetching corpus: 3747, signal 159959/163750 (executing program) 2022/10/05 11:45:16 fetching corpus: 3747, signal 159959/163797 (executing program) 2022/10/05 11:45:16 fetching corpus: 3747, signal 159959/163838 (executing program) 2022/10/05 11:45:16 fetching corpus: 3747, signal 159959/163844 (executing program) 2022/10/05 11:45:16 fetching corpus: 3747, signal 159959/163844 (executing program) 2022/10/05 11:45:18 starting 8 fuzzer processes 11:45:18 executing program 0: syz_io_uring_setup(0xeaf, &(0x7f0000000140), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}}, 0x0) sigaltstack(&(0x7f0000ffe000/0x2000)=nil, 0x0) 11:45:18 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c) 11:45:18 executing program 2: ustat(0x2, &(0x7f0000000040)) sysfs$2(0x2, 0x4, &(0x7f00000000c0)=""/29) 11:45:18 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) [ 61.389113] audit: type=1400 audit(1664970318.852:6): avc: denied { execmem } for pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:45:18 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0) 11:45:18 executing program 5: socket$unix(0x1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 11:45:18 executing program 7: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000580)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r0, 0x560a, 0x0) 11:45:18 executing program 6: msgctl$IPC_RMID(0x0, 0xffffff7f) [ 62.565183] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.567724] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.570304] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.574650] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.577337] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 62.578841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.586086] Bluetooth: hci0: HCI_REQ-0x0c1a [ 62.618829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.620345] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.626872] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.628546] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.630501] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.632060] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.642077] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.644990] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.646811] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 62.648965] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 62.650852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.659860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.664601] Bluetooth: hci2: HCI_REQ-0x0c1a [ 62.692427] Bluetooth: hci1: HCI_REQ-0x0c1a [ 62.736140] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 62.740562] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 62.743117] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 62.746634] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 62.752233] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 62.753897] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 62.771482] Bluetooth: hci5: HCI_REQ-0x0c1a [ 62.798016] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 62.806566] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 62.808445] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 62.842280] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 62.848638] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 62.851491] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 62.853840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 62.901625] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 62.904077] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 62.910141] Bluetooth: hci6: HCI_REQ-0x0c1a [ 62.916001] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 62.922828] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 62.924253] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 62.940692] Bluetooth: hci7: HCI_REQ-0x0c1a [ 64.653638] Bluetooth: hci0: command 0x0409 tx timeout [ 64.716033] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 64.716056] Bluetooth: hci2: command 0x0409 tx timeout [ 64.717680] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 64.718148] Bluetooth: hci1: command 0x0409 tx timeout [ 64.844104] Bluetooth: hci5: command 0x0409 tx timeout [ 64.972073] Bluetooth: hci6: command 0x0409 tx timeout [ 64.973117] Bluetooth: hci7: command 0x0409 tx timeout [ 66.700970] Bluetooth: hci0: command 0x041b tx timeout [ 66.764011] Bluetooth: hci1: command 0x041b tx timeout [ 66.764974] Bluetooth: hci2: command 0x041b tx timeout [ 66.891991] Bluetooth: hci5: command 0x041b tx timeout [ 67.020005] Bluetooth: hci7: command 0x041b tx timeout [ 67.020518] Bluetooth: hci6: command 0x041b tx timeout [ 68.747998] Bluetooth: hci0: command 0x040f tx timeout [ 68.812024] Bluetooth: hci2: command 0x040f tx timeout [ 68.812062] Bluetooth: hci1: command 0x040f tx timeout [ 68.940031] Bluetooth: hci5: command 0x040f tx timeout [ 69.068015] Bluetooth: hci6: command 0x040f tx timeout [ 69.068093] Bluetooth: hci7: command 0x040f tx timeout [ 70.028005] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 70.028900] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 70.796002] Bluetooth: hci0: command 0x0419 tx timeout [ 70.859994] Bluetooth: hci1: command 0x0419 tx timeout [ 70.860409] Bluetooth: hci2: command 0x0419 tx timeout [ 70.988023] Bluetooth: hci5: command 0x0419 tx timeout [ 71.115987] Bluetooth: hci6: command 0x0419 tx timeout [ 71.116404] Bluetooth: hci7: command 0x0419 tx timeout [ 72.636839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.639587] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.643291] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.650072] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.651054] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.652504] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.657585] Bluetooth: hci3: HCI_REQ-0x0c1a [ 74.700038] Bluetooth: hci3: command 0x0409 tx timeout [ 74.763983] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 76.748014] Bluetooth: hci3: command 0x041b tx timeout [ 78.796042] Bluetooth: hci3: command 0x040f tx timeout [ 79.436069] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 80.844077] Bluetooth: hci3: command 0x0419 tx timeout [ 82.071233] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.083091] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.084323] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.088133] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.089637] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 82.090857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.095404] Bluetooth: hci4: HCI_REQ-0x0c1a [ 84.108042] Bluetooth: hci4: command 0x0409 tx timeout [ 86.156025] Bluetooth: hci4: command 0x041b tx timeout [ 88.204018] Bluetooth: hci4: command 0x040f tx timeout [ 90.252276] Bluetooth: hci4: command 0x0419 tx timeout 11:46:09 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d72f5eeb6a088740740c2c066fd0ebaab3ea8a9756759834f09d6cea49a3ea6808f64e52ef148f7860777597486b340af70f6982a60"]) [ 112.422180] 9pnet: Could not find request transport: rt@f>ugYO Τ>d.HwYt@p*` 11:46:09 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d72f5eeb6a088740740c2c066fd0ebaab3ea8a9756759834f09d6cea49a3ea6808f64e52ef148f7860777597486b340af70f6982a60"]) [ 112.528701] 9pnet: Could not find request transport: rt@f>ugYO Τ>d.HwYt@p*` 11:46:10 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d72f5eeb6a088740740c2c066fd0ebaab3ea8a9756759834f09d6cea49a3ea6808f64e52ef148f7860777597486b340af70f6982a60"]) [ 112.651673] 9pnet: Could not find request transport: rt@f>ugYO Τ>d.HwYt@p*` 11:46:10 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d72f5eeb6a088740740c2c066fd0ebaab3ea8a9756759834f09d6cea49a3ea6808f64e52ef148f7860777597486b340af70f6982a60"]) [ 112.771576] 9pnet: Could not find request transport: rt@f>ugYO Τ>d.HwYt@p*` 11:46:10 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="b6", 0x1}], 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRES64, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRES32, @ANYRESOCT]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r5}}, {@measure}]}}) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @local}, {0x0, @dev}, 0x2a, {0x2, 0x0, @empty}}) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) [ 112.910115] audit: type=1400 audit(1664970370.373:7): avc: denied { open } for pid=3521 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 112.911607] audit: type=1400 audit(1664970370.373:8): avc: denied { kernel } for pid=3521 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 112.925484] ------------[ cut here ]------------ [ 112.925503] [ 112.925506] ====================================================== [ 112.925509] WARNING: possible circular locking dependency detected [ 112.925513] 6.0.0-next-20221005 #1 Not tainted [ 112.925520] ------------------------------------------------------ [ 112.925523] syz-executor.5/3523 is trying to acquire lock: [ 112.925529] ffffffff853faaf8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 112.925569] [ 112.925569] but task is already holding lock: [ 112.925572] ffff88803da6a420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 112.925599] [ 112.925599] which lock already depends on the new lock. [ 112.925599] [ 112.925602] [ 112.925602] the existing dependency chain (in reverse order) is: [ 112.925605] [ 112.925605] -> #3 (&ctx->lock){....}-{2:2}: [ 112.925619] _raw_spin_lock+0x2a/0x40 [ 112.925631] __perf_event_task_sched_out+0x53b/0x18d0 [ 112.925643] __schedule+0xedd/0x2470 [ 112.925657] preempt_schedule_common+0x45/0xc0 [ 112.925673] __cond_resched+0x17/0x30 [ 112.925688] __mutex_lock+0xa3/0x14d0 [ 112.925704] __do_sys_perf_event_open+0x1eec/0x32c0 [ 112.925716] do_syscall_64+0x3b/0x90 [ 112.925726] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 112.925740] [ 112.925740] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 112.925753] _raw_spin_lock_nested+0x30/0x40 [ 112.925764] raw_spin_rq_lock_nested+0x1e/0x30 [ 112.925778] task_fork_fair+0x63/0x4d0 [ 112.925796] sched_cgroup_fork+0x3d0/0x540 [ 112.925810] copy_process+0x4183/0x6e20 [ 112.925822] kernel_clone+0xe7/0x890 [ 112.925832] user_mode_thread+0xad/0xf0 [ 112.925842] rest_init+0x24/0x250 [ 112.925854] arch_call_rest_init+0xf/0x14 [ 112.925874] start_kernel+0x4c6/0x4eb [ 112.925891] secondary_startup_64_no_verify+0xe0/0xeb [ 112.925905] [ 112.925905] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 112.925921] _raw_spin_lock_irqsave+0x39/0x60 [ 112.925940] try_to_wake_up+0xab/0x1930 [ 112.925953] up+0x75/0xb0 [ 112.925968] __up_console_sem+0x6e/0x80 [ 112.925985] console_unlock+0x46a/0x590 [ 112.926001] do_con_write+0xc05/0x1d50 [ 112.926012] con_write+0x21/0x40 [ 112.926022] n_tty_write+0x4d4/0xfe0 [ 112.926034] file_tty_write.constprop.0+0x455/0x8a0 [ 112.926046] vfs_write+0x9c3/0xd90 [ 112.926063] ksys_write+0x127/0x250 [ 112.926079] do_syscall_64+0x3b/0x90 [ 112.926088] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 112.926102] [ 112.926102] -> #0 ((console_sem).lock){....}-{2:2}: [ 112.926115] __lock_acquire+0x2a02/0x5e70 [ 112.926133] lock_acquire+0x1a2/0x530 [ 112.926149] _raw_spin_lock_irqsave+0x39/0x60 [ 112.926160] down_trylock+0xe/0x70 [ 112.926176] __down_trylock_console_sem+0x3b/0xd0 [ 112.926192] vprintk_emit+0x16b/0x560 [ 112.926208] vprintk+0x84/0xa0 [ 112.926224] _printk+0xba/0xf1 [ 112.926237] report_bug.cold+0x72/0xab [ 112.926254] handle_bug+0x3c/0x70 [ 112.926263] exc_invalid_op+0x14/0x50 [ 112.926273] asm_exc_invalid_op+0x16/0x20 [ 112.926286] group_sched_out.part.0+0x2c7/0x460 [ 112.926304] ctx_sched_out+0x8f1/0xc10 [ 112.926321] __perf_event_task_sched_out+0x6d0/0x18d0 [ 112.926331] __schedule+0xedd/0x2470 [ 112.926346] preempt_schedule_common+0x45/0xc0 [ 112.926361] __cond_resched+0x17/0x30 [ 112.926376] __mutex_lock+0xa3/0x14d0 [ 112.926392] __do_sys_perf_event_open+0x1eec/0x32c0 [ 112.926403] do_syscall_64+0x3b/0x90 [ 112.926413] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 112.926426] [ 112.926426] other info that might help us debug this: [ 112.926426] [ 112.926428] Chain exists of: [ 112.926428] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 112.926428] [ 112.926443] Possible unsafe locking scenario: [ 112.926443] [ 112.926446] CPU0 CPU1 [ 112.926448] ---- ---- [ 112.926450] lock(&ctx->lock); [ 112.926456] lock(&rq->__lock); [ 112.926462] lock(&ctx->lock); [ 112.926468] lock((console_sem).lock); [ 112.926474] [ 112.926474] *** DEADLOCK *** [ 112.926474] [ 112.926476] 2 locks held by syz-executor.5/3523: [ 112.926483] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 112.926512] #1: ffff88803da6a420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 112.926539] [ 112.926539] stack backtrace: [ 112.926541] CPU: 1 PID: 3523 Comm: syz-executor.5 Not tainted 6.0.0-next-20221005 #1 [ 112.926554] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 112.926561] Call Trace: [ 112.926565] [ 112.926569] dump_stack_lvl+0x8b/0xb3 [ 112.926588] check_noncircular+0x263/0x2e0 [ 112.926605] ? format_decode+0x26c/0xb50 [ 112.926622] ? print_circular_bug+0x450/0x450 [ 112.926640] ? simple_strtoul+0x30/0x30 [ 112.926655] ? __lockdep_reset_lock+0x180/0x180 [ 112.926673] ? format_decode+0x26c/0xb50 [ 112.926691] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 112.926709] __lock_acquire+0x2a02/0x5e70 [ 112.926731] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 112.926753] lock_acquire+0x1a2/0x530 [ 112.926770] ? down_trylock+0xe/0x70 [ 112.926789] ? lock_release+0x750/0x750 [ 112.926806] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 112.926827] ? vprintk+0x84/0xa0 [ 112.926846] _raw_spin_lock_irqsave+0x39/0x60 [ 112.926858] ? down_trylock+0xe/0x70 [ 112.926875] down_trylock+0xe/0x70 [ 112.926892] ? vprintk+0x84/0xa0 [ 112.926909] __down_trylock_console_sem+0x3b/0xd0 [ 112.926927] vprintk_emit+0x16b/0x560 [ 112.926944] ? lock_downgrade+0x6d0/0x6d0 [ 112.926963] vprintk+0x84/0xa0 [ 112.926981] _printk+0xba/0xf1 [ 112.926993] ? record_print_text.cold+0x16/0x16 [ 112.927008] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 112.927023] ? lock_downgrade+0x6d0/0x6d0 [ 112.927041] ? report_bug.cold+0x66/0xab [ 112.927060] ? group_sched_out.part.0+0x2c7/0x460 [ 112.927079] report_bug.cold+0x72/0xab [ 112.927099] handle_bug+0x3c/0x70 [ 112.927109] exc_invalid_op+0x14/0x50 [ 112.927120] asm_exc_invalid_op+0x16/0x20 [ 112.927133] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 112.927154] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 2b 08 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 112.927166] RSP: 0018:ffff88803e33f978 EFLAGS: 00010006 [ 112.927175] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 112.927182] RDX: ffff888017f4b580 RSI: ffffffff81566da7 RDI: 0000000000000005 [ 112.927190] RBP: ffff88803e808000 R08: 0000000000000005 R09: 0000000000000001 [ 112.927197] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88803da6a400 [ 112.927205] R13: ffff88806cf3d2c0 R14: ffffffff8547c9a0 R15: 0000000000000002 [ 112.927216] ? group_sched_out.part.0+0x2c7/0x460 [ 112.927236] ? group_sched_out.part.0+0x2c7/0x460 [ 112.927256] ctx_sched_out+0x8f1/0xc10 [ 112.927276] __perf_event_task_sched_out+0x6d0/0x18d0 [ 112.927290] ? lock_is_held_type+0xd7/0x130 [ 112.927305] ? __perf_cgroup_move+0x160/0x160 [ 112.927316] ? set_next_entity+0x304/0x550 [ 112.927334] ? update_curr+0x267/0x740 [ 112.927352] ? lock_is_held_type+0xd7/0x130 [ 112.927367] __schedule+0xedd/0x2470 [ 112.927385] ? io_schedule_timeout+0x150/0x150 [ 112.927402] ? find_held_lock+0x2c/0x110 [ 112.927418] ? lock_is_held_type+0xd7/0x130 [ 112.927432] ? __cond_resched+0x17/0x30 [ 112.927449] preempt_schedule_common+0x45/0xc0 [ 112.927466] __cond_resched+0x17/0x30 [ 112.927482] __mutex_lock+0xa3/0x14d0 [ 112.927500] ? lock_is_held_type+0xd7/0x130 [ 112.927513] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 112.927527] ? mutex_lock_io_nested+0x1310/0x1310 [ 112.927544] ? lock_release+0x3b2/0x750 [ 112.927562] ? __up_read+0x192/0x730 [ 112.927577] ? up_write+0x520/0x520 [ 112.927594] __do_sys_perf_event_open+0x1eec/0x32c0 [ 112.927610] ? perf_compat_ioctl+0x130/0x130 [ 112.927621] ? xfd_validate_state+0x59/0x180 [ 112.927645] ? syscall_enter_from_user_mode+0x1d/0x50 [ 112.927660] ? syscall_enter_from_user_mode+0x1d/0x50 [ 112.927676] do_syscall_64+0x3b/0x90 [ 112.927687] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 112.927701] RIP: 0033:0x7f515e4f3b19 [ 112.927709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 112.927720] RSP: 002b:00007f515ba69188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 112.927730] RAX: ffffffffffffffda RBX: 00007f515e606f60 RCX: 00007f515e4f3b19 [ 112.927738] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 [ 112.927746] RBP: 00007f515e54df6d R08: 0000000000000000 R09: 0000000000000000 [ 112.927753] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 112.927760] R13: 00007fffd55d1c9f R14: 00007f515ba69300 R15: 0000000000022000 [ 112.927773] [ 112.989059] WARNING: CPU: 1 PID: 3523 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 112.989650] Modules linked in: [ 112.989862] CPU: 1 PID: 3523 Comm: syz-executor.5 Not tainted 6.0.0-next-20221005 #1 [ 112.990389] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 112.990935] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 112.991316] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 2b 08 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 112.992520] RSP: 0018:ffff88803e33f978 EFLAGS: 00010006 [ 112.992887] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 112.993368] RDX: ffff888017f4b580 RSI: ffffffff81566da7 RDI: 0000000000000005 [ 112.993851] RBP: ffff88803e808000 R08: 0000000000000005 R09: 0000000000000001 [ 112.994356] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88803da6a400 [ 112.994828] R13: ffff88806cf3d2c0 R14: ffffffff8547c9a0 R15: 0000000000000002 [ 112.995314] FS: 00007f515ba69700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 112.995860] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.996256] CR2: 00007fbeec39d060 CR3: 000000001e02e000 CR4: 0000000000350ee0 [ 112.996747] Call Trace: [ 112.996926] [ 112.997088] ctx_sched_out+0x8f1/0xc10 [ 112.997368] __perf_event_task_sched_out+0x6d0/0x18d0 [ 112.997724] ? lock_is_held_type+0xd7/0x130 [ 112.998024] ? __perf_cgroup_move+0x160/0x160 [ 112.998336] ? set_next_entity+0x304/0x550 [ 112.998632] ? update_curr+0x267/0x740 [ 112.998914] ? lock_is_held_type+0xd7/0x130 [ 112.999213] __schedule+0xedd/0x2470 [ 112.999485] ? io_schedule_timeout+0x150/0x150 [ 112.999808] ? find_held_lock+0x2c/0x110 [ 113.000094] ? lock_is_held_type+0xd7/0x130 [ 113.000392] ? __cond_resched+0x17/0x30 [ 113.000673] preempt_schedule_common+0x45/0xc0 [ 113.000996] __cond_resched+0x17/0x30 [ 113.001270] __mutex_lock+0xa3/0x14d0 [ 113.001547] ? lock_is_held_type+0xd7/0x130 [ 113.001844] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 113.002213] ? mutex_lock_io_nested+0x1310/0x1310 [ 113.002557] ? lock_release+0x3b2/0x750 [ 113.002835] ? __up_read+0x192/0x730 [ 113.003100] ? up_write+0x520/0x520 [ 113.003362] __do_sys_perf_event_open+0x1eec/0x32c0 [ 113.003713] ? perf_compat_ioctl+0x130/0x130 [ 113.004022] ? xfd_validate_state+0x59/0x180 [ 113.004343] ? syscall_enter_from_user_mode+0x1d/0x50 [ 113.004706] ? syscall_enter_from_user_mode+0x1d/0x50 [ 113.005073] do_syscall_64+0x3b/0x90 [ 113.005338] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 113.005697] RIP: 0033:0x7f515e4f3b19 [ 113.005970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 113.007198] RSP: 002b:00007f515ba69188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 113.007702] RAX: ffffffffffffffda RBX: 00007f515e606f60 RCX: 00007f515e4f3b19 [ 113.008194] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 [ 113.008679] RBP: 00007f515e54df6d R08: 0000000000000000 R09: 0000000000000000 [ 113.009170] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 113.009654] R13: 00007fffd55d1c9f R14: 00007f515ba69300 R15: 0000000000022000 [ 113.010146] [ 113.010310] irq event stamp: 1020 [ 113.010553] hardirqs last enabled at (1019): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 113.011216] hardirqs last disabled at (1020): [] __schedule+0x1225/0x2470 [ 113.011781] softirqs last enabled at (1010): [] __irq_exit_rcu+0x11b/0x180 [ 113.012365] softirqs last disabled at (985): [] __irq_exit_rcu+0x11b/0x180 [ 113.012936] ---[ end trace 0000000000000000 ]--- [ 113.042847] syz-executor.5 uses obsolete (PF_INET,SOCK_PACKET) [ 113.080922] hrtimer: interrupt took 8897 ns 11:46:10 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="b6", 0x1}], 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRES64, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRES32, @ANYRESOCT]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r5}}, {@measure}]}}) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @local}, {0x0, @dev}, 0x2a, {0x2, 0x0, @empty}}) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) 11:46:10 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="b6", 0x1}], 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRES64, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRES32, @ANYRESOCT]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r5}}, {@measure}]}}) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @local}, {0x0, @dev}, 0x2a, {0x2, 0x0, @empty}}) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) 11:46:11 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="b6", 0x1}], 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRES64, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRES32, @ANYRESOCT]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r5}}, {@measure}]}}) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @local}, {0x0, @dev}, 0x2a, {0x2, 0x0, @empty}}) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) 11:46:18 executing program 0: syz_io_uring_setup(0xeaf, &(0x7f0000000140), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}}, 0x0) sigaltstack(&(0x7f0000ffe000/0x2000)=nil, 0x0) 11:46:18 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="b6", 0x1}], 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRES64, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRES32, @ANYRESOCT]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r5}}, {@measure}]}}) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @local}, {0x0, @dev}, 0x2a, {0x2, 0x0, @empty}}) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) 11:46:18 executing program 6: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="b6", 0x1}], 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRES64, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRES32, @ANYRESOCT]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r5}}, {@measure}]}}) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @local}, {0x0, @dev}, 0x2a, {0x2, 0x0, @empty}}) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) 11:46:18 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c) 11:46:18 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="b6", 0x1}], 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRES64, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRES32, @ANYRESOCT]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r5}}, {@measure}]}}) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @local}, {0x0, @dev}, 0x2a, {0x2, 0x0, @empty}}) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) 11:46:18 executing program 2: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="b6", 0x1}], 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRES64, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRES32, @ANYRESOCT]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r5}}, {@measure}]}}) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @local}, {0x0, @dev}, 0x2a, {0x2, 0x0, @empty}}) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) 11:46:18 executing program 7: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000580)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r0, 0x560a, 0x0) 11:46:18 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="b6", 0x1}], 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRES64, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRES32, @ANYRESOCT]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r5}}, {@measure}]}}) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @local}, {0x0, @dev}, 0x2a, {0x2, 0x0, @empty}}) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) 11:46:18 executing program 7: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000580)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r0, 0x560a, 0x0) 11:46:19 executing program 0: syz_io_uring_setup(0xeaf, &(0x7f0000000140), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}}, 0x0) sigaltstack(&(0x7f0000ffe000/0x2000)=nil, 0x0) 11:46:19 executing program 6: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="b6", 0x1}], 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRES64, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRES32, @ANYRESOCT]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r5}}, {@measure}]}}) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @local}, {0x0, @dev}, 0x2a, {0x2, 0x0, @empty}}) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) 11:46:19 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c) 11:46:19 executing program 7: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000580)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r0, 0x560a, 0x0) 11:46:19 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="b6", 0x1}], 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRES64, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRES32, @ANYRESOCT]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r5}}, {@measure}]}}) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @local}, {0x0, @dev}, 0x2a, {0x2, 0x0, @empty}}) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) 11:46:19 executing program 2: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="b6", 0x1}], 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRES64, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRES32, @ANYRESOCT]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r5}}, {@measure}]}}) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @local}, {0x0, @dev}, 0x2a, {0x2, 0x0, @empty}}) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) 11:46:19 executing program 3: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="b6", 0x1}], 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRES64, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRES32, @ANYRESOCT]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r5}}, {@measure}]}}) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @local}, {0x0, @dev}, 0x2a, {0x2, 0x0, @empty}}) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) 11:46:19 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="b6", 0x1}], 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRES64, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRES32, @ANYRESOCT]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r5}}, {@measure}]}}) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @local}, {0x0, @dev}, 0x2a, {0x2, 0x0, @empty}}) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) 11:46:19 executing program 7: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="b6", 0x1}], 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRES64, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRES32, @ANYRESOCT]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r5}}, {@measure}]}}) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @local}, {0x0, @dev}, 0x2a, {0x2, 0x0, @empty}}) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) 11:46:19 executing program 0: syz_io_uring_setup(0xeaf, &(0x7f0000000140), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}}, 0x0) sigaltstack(&(0x7f0000ffe000/0x2000)=nil, 0x0) 11:46:19 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c) 11:46:19 executing program 0: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="b6", 0x1}], 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRES64, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRES32, @ANYRESOCT]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r5}}, {@measure}]}}) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @local}, {0x0, @dev}, 0x2a, {0x2, 0x0, @empty}}) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) 11:46:19 executing program 2: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="b6", 0x1}], 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRES64, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRES32, @ANYRESOCT]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r5}}, {@measure}]}}) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @local}, {0x0, @dev}, 0x2a, {0x2, 0x0, @empty}}) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) 11:46:19 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="b6", 0x1}], 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRES64, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRES32, @ANYRESOCT]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r5}}, {@measure}]}}) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @local}, {0x0, @dev}, 0x2a, {0x2, 0x0, @empty}}) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) 11:46:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x1c, 0x1a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @binary="d8c9310200"}]}, 0x1c}], 0x1}, 0x0) 11:46:20 executing program 3: mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000), 0x81, 0x0) 11:46:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x73}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0x10, 0x1, 0x0, r1, &(0x7f00000001c0)="10", 0x1}]) [ 122.691208] loop1: detected capacity change from 0 to 256 [ 122.749802] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 122.930208] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) VM DIAGNOSIS: 11:46:10 Registers: info registers vcpu 0 RAX=fffffffffbbc96bb RBX=ffffffff85bbcfec RCX=ffffffff81786695 RDX=0000000000000000 RSI=ffffffff85ee0f4e RDI=ffffffff85bbcfd8 RBP=ffffffff85bbcfd8 RSP=ffff88803e3a72b8 R8 =ffffffff85ee0f4e R9 =ffffffff85ee1636 R10=ffffed1007c74e7d R11=000000000003603d R12=ffffffff85bbd000 R13=ffffffff85bbcfd8 R14=ffffffff85bbcfd8 R15=dffffc0000000000 RIP=ffffffff8111ab83 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffb4fae0028 CR3=000000001853e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000075 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bda91 RDI=ffffffff8765c9a0 RBP=ffffffff8765c960 RSP=ffff88803e33f3c0 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000075 R11=0000000000000001 R12=0000000000000075 R13=ffffffff8765c960 R14=0000000000000010 R15=ffffffff823bda80 RIP=ffffffff823bdae9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f515ba69700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbeec39d060 CR3=000000001e02e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=791bde9eeac968a3c04ab29cdb529a4f XMM02=70f743d79405406d00000000001112c8 XMM03=aabf2c55a4f4e763000000000012a520 XMM04=4815b224003d67e100000000000ae988 XMM05=c8a54713b07d5f7b0000000000136de8 XMM06=7f07bd0cf8fefc500000000000136ac8 XMM07=6d9cebfdd214621800000000001368c0 XMM08=d6ad57d02453f0d2000000000012a7c8 XMM09=00000000000000000000000000000000 XMM10=00200000000000000020000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000