syzkaller login: [ 43.276229] sshd (252) used greatest stack depth: 24768 bytes left Warning: Permanently added '[localhost]:26850' (ECDSA) to the list of known hosts. 2022/09/14 12:38:04 fuzzer started 2022/09/14 12:38:04 dialing manager at localhost:33849 [ 46.211554] cgroup: Unknown subsys name 'net' [ 46.287035] cgroup: Unknown subsys name 'rlimit' 2022/09/14 12:38:20 syscalls: 2215 2022/09/14 12:38:20 code coverage: enabled 2022/09/14 12:38:20 comparison tracing: enabled 2022/09/14 12:38:20 extra coverage: enabled 2022/09/14 12:38:20 setuid sandbox: enabled 2022/09/14 12:38:20 namespace sandbox: enabled 2022/09/14 12:38:20 Android sandbox: enabled 2022/09/14 12:38:20 fault injection: enabled 2022/09/14 12:38:20 leak checking: enabled 2022/09/14 12:38:20 net packet injection: enabled 2022/09/14 12:38:20 net device setup: enabled 2022/09/14 12:38:20 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/14 12:38:20 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/14 12:38:20 USB emulation: enabled 2022/09/14 12:38:20 hci packet injection: enabled 2022/09/14 12:38:20 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220914) 2022/09/14 12:38:20 802.15.4 emulation: enabled 2022/09/14 12:38:20 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/14 12:38:20 fetching corpus: 50, signal 35091/38493 (executing program) 2022/09/14 12:38:20 fetching corpus: 100, signal 48281/52980 (executing program) 2022/09/14 12:38:20 fetching corpus: 150, signal 56091/62118 (executing program) 2022/09/14 12:38:20 fetching corpus: 200, signal 63299/70553 (executing program) 2022/09/14 12:38:21 fetching corpus: 250, signal 69372/77716 (executing program) 2022/09/14 12:38:21 fetching corpus: 300, signal 77456/86705 (executing program) 2022/09/14 12:38:21 fetching corpus: 350, signal 83694/93752 (executing program) 2022/09/14 12:38:21 fetching corpus: 400, signal 87382/98366 (executing program) 2022/09/14 12:38:21 fetching corpus: 450, signal 93564/105182 (executing program) 2022/09/14 12:38:21 fetching corpus: 500, signal 96449/108870 (executing program) 2022/09/14 12:38:22 fetching corpus: 550, signal 100133/113249 (executing program) 2022/09/14 12:38:22 fetching corpus: 600, signal 103566/117392 (executing program) 2022/09/14 12:38:22 fetching corpus: 650, signal 105553/120219 (executing program) 2022/09/14 12:38:22 fetching corpus: 700, signal 109222/124365 (executing program) 2022/09/14 12:38:22 fetching corpus: 750, signal 112476/128097 (executing program) 2022/09/14 12:38:22 fetching corpus: 800, signal 114986/131231 (executing program) 2022/09/14 12:38:22 fetching corpus: 850, signal 117331/134145 (executing program) 2022/09/14 12:38:23 fetching corpus: 900, signal 119329/136693 (executing program) 2022/09/14 12:38:23 fetching corpus: 950, signal 120935/138916 (executing program) 2022/09/14 12:38:23 fetching corpus: 1000, signal 122705/141243 (executing program) 2022/09/14 12:38:23 fetching corpus: 1050, signal 124222/143317 (executing program) 2022/09/14 12:38:23 fetching corpus: 1100, signal 126514/145996 (executing program) 2022/09/14 12:38:23 fetching corpus: 1150, signal 128074/148040 (executing program) 2022/09/14 12:38:23 fetching corpus: 1200, signal 130277/150564 (executing program) 2022/09/14 12:38:23 fetching corpus: 1250, signal 131865/152566 (executing program) 2022/09/14 12:38:24 fetching corpus: 1300, signal 134531/155454 (executing program) 2022/09/14 12:38:24 fetching corpus: 1350, signal 136586/157778 (executing program) 2022/09/14 12:38:24 fetching corpus: 1400, signal 137881/159462 (executing program) 2022/09/14 12:38:24 fetching corpus: 1450, signal 138771/160916 (executing program) 2022/09/14 12:38:24 fetching corpus: 1500, signal 140759/163083 (executing program) 2022/09/14 12:38:24 fetching corpus: 1550, signal 141840/164543 (executing program) 2022/09/14 12:38:24 fetching corpus: 1600, signal 143517/166443 (executing program) 2022/09/14 12:38:25 fetching corpus: 1650, signal 146257/169014 (executing program) 2022/09/14 12:38:25 fetching corpus: 1700, signal 147645/170566 (executing program) 2022/09/14 12:38:25 fetching corpus: 1750, signal 148816/171939 (executing program) 2022/09/14 12:38:25 fetching corpus: 1800, signal 150051/173398 (executing program) 2022/09/14 12:38:25 fetching corpus: 1850, signal 151218/174740 (executing program) 2022/09/14 12:38:25 fetching corpus: 1900, signal 153115/176519 (executing program) 2022/09/14 12:38:25 fetching corpus: 1950, signal 155177/178387 (executing program) 2022/09/14 12:38:26 fetching corpus: 2000, signal 157747/180443 (executing program) 2022/09/14 12:38:26 fetching corpus: 2050, signal 159728/182182 (executing program) 2022/09/14 12:38:26 fetching corpus: 2100, signal 161127/183564 (executing program) 2022/09/14 12:38:26 fetching corpus: 2150, signal 162670/184943 (executing program) 2022/09/14 12:38:26 fetching corpus: 2200, signal 164674/186582 (executing program) 2022/09/14 12:38:26 fetching corpus: 2250, signal 166209/187885 (executing program) 2022/09/14 12:38:27 fetching corpus: 2300, signal 167641/189162 (executing program) 2022/09/14 12:38:27 fetching corpus: 2350, signal 169099/190412 (executing program) 2022/09/14 12:38:27 fetching corpus: 2400, signal 169986/191315 (executing program) 2022/09/14 12:38:27 fetching corpus: 2450, signal 170787/192120 (executing program) 2022/09/14 12:38:27 fetching corpus: 2500, signal 171701/193036 (executing program) 2022/09/14 12:38:27 fetching corpus: 2550, signal 172400/193801 (executing program) 2022/09/14 12:38:27 fetching corpus: 2600, signal 173104/194611 (executing program) 2022/09/14 12:38:27 fetching corpus: 2650, signal 174511/195680 (executing program) 2022/09/14 12:38:28 fetching corpus: 2700, signal 175926/196727 (executing program) 2022/09/14 12:38:28 fetching corpus: 2750, signal 176970/197562 (executing program) 2022/09/14 12:38:28 fetching corpus: 2800, signal 177882/198373 (executing program) 2022/09/14 12:38:28 fetching corpus: 2850, signal 179145/199248 (executing program) 2022/09/14 12:38:28 fetching corpus: 2900, signal 180008/199974 (executing program) 2022/09/14 12:38:28 fetching corpus: 2950, signal 181028/200747 (executing program) 2022/09/14 12:38:28 fetching corpus: 3000, signal 181925/201428 (executing program) 2022/09/14 12:38:29 fetching corpus: 3050, signal 183117/202349 (executing program) 2022/09/14 12:38:29 fetching corpus: 3100, signal 184381/203153 (executing program) 2022/09/14 12:38:29 fetching corpus: 3150, signal 185159/203728 (executing program) 2022/09/14 12:38:29 fetching corpus: 3200, signal 186738/204536 (executing program) 2022/09/14 12:38:29 fetching corpus: 3250, signal 187388/205013 (executing program) 2022/09/14 12:38:29 fetching corpus: 3300, signal 188286/205555 (executing program) 2022/09/14 12:38:29 fetching corpus: 3350, signal 189136/206138 (executing program) 2022/09/14 12:38:30 fetching corpus: 3400, signal 190222/206681 (executing program) 2022/09/14 12:38:30 fetching corpus: 3450, signal 191106/207179 (executing program) 2022/09/14 12:38:30 fetching corpus: 3500, signal 191934/207696 (executing program) 2022/09/14 12:38:30 fetching corpus: 3550, signal 192659/208158 (executing program) 2022/09/14 12:38:30 fetching corpus: 3600, signal 193375/208611 (executing program) 2022/09/14 12:38:30 fetching corpus: 3650, signal 194070/208999 (executing program) 2022/09/14 12:38:30 fetching corpus: 3700, signal 195203/209483 (executing program) 2022/09/14 12:38:31 fetching corpus: 3750, signal 196330/210115 (executing program) 2022/09/14 12:38:31 fetching corpus: 3800, signal 197048/210466 (executing program) 2022/09/14 12:38:31 fetching corpus: 3850, signal 197747/210774 (executing program) 2022/09/14 12:38:31 fetching corpus: 3900, signal 198724/211250 (executing program) 2022/09/14 12:38:31 fetching corpus: 3950, signal 199272/211517 (executing program) 2022/09/14 12:38:31 fetching corpus: 4000, signal 200538/211895 (executing program) 2022/09/14 12:38:31 fetching corpus: 4050, signal 201218/212294 (executing program) 2022/09/14 12:38:32 fetching corpus: 4100, signal 202028/212673 (executing program) 2022/09/14 12:38:32 fetching corpus: 4150, signal 202834/212946 (executing program) 2022/09/14 12:38:32 fetching corpus: 4200, signal 203754/213238 (executing program) 2022/09/14 12:38:32 fetching corpus: 4250, signal 204928/213631 (executing program) 2022/09/14 12:38:32 fetching corpus: 4300, signal 205676/213822 (executing program) 2022/09/14 12:38:32 fetching corpus: 4350, signal 206522/214025 (executing program) 2022/09/14 12:38:33 fetching corpus: 4400, signal 207431/214461 (executing program) 2022/09/14 12:38:33 fetching corpus: 4450, signal 208064/214687 (executing program) 2022/09/14 12:38:33 fetching corpus: 4464, signal 208214/214777 (executing program) 2022/09/14 12:38:33 fetching corpus: 4464, signal 208214/214844 (executing program) 2022/09/14 12:38:33 fetching corpus: 4464, signal 208214/214901 (executing program) 2022/09/14 12:38:33 fetching corpus: 4464, signal 208214/214964 (executing program) 2022/09/14 12:38:33 fetching corpus: 4464, signal 208214/215055 (executing program) 2022/09/14 12:38:33 fetching corpus: 4464, signal 208214/215126 (executing program) 2022/09/14 12:38:33 fetching corpus: 4464, signal 208214/215198 (executing program) 2022/09/14 12:38:33 fetching corpus: 4464, signal 208214/215269 (executing program) 2022/09/14 12:38:33 fetching corpus: 4464, signal 208214/215337 (executing program) 2022/09/14 12:38:33 fetching corpus: 4464, signal 208214/215347 (executing program) 2022/09/14 12:38:33 fetching corpus: 4464, signal 208214/215347 (executing program) 2022/09/14 12:38:35 starting 8 fuzzer processes 12:38:35 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) 12:38:35 executing program 6: msgrcv(0x0, 0x0, 0x0, 0x0, 0x17619eeb39436941) 12:38:35 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) write$binfmt_aout(r0, &(0x7f00000000c0), 0x20) 12:38:35 executing program 1: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='autofs\x00', 0x0, 0x0) 12:38:35 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="a2221503f72541b941ded3c56a109c9f2e0ef17c35fe", 0x16}, {0x0, 0x0, 0xffffffffffff1a96}], 0x0, &(0x7f0000000380)) 12:38:35 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYRES32=0x0, @ANYBLOB]) write$P9_RSTATu(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYRES32, @ANYRES32=0xee00], 0x59) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = creat(&(0x7f0000000040)='./file1\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0x0, 0x4}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) getpid() syncfs(r4) [ 76.721217] audit: type=1400 audit(1663159115.603:6): avc: denied { execmem } for pid=287 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:38:35 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x10000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) inotify_rm_watch(r0, r1) 12:38:35 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x1a) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf959}) [ 77.900671] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.903033] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.904628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.908404] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.912992] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.914612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.921601] Bluetooth: hci0: HCI_REQ-0x0c1a [ 77.963430] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.965481] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.966710] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.970197] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.971698] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.973229] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.978200] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.988691] Bluetooth: hci1: HCI_REQ-0x0c1a [ 77.991439] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.997523] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.002682] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.006341] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.007531] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.018161] Bluetooth: hci2: HCI_REQ-0x0c1a [ 78.068175] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.096779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.098978] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 78.100525] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.105058] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.106517] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 78.108720] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.111706] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.113922] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 78.119975] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.121456] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.127805] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 78.131160] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.132697] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 78.134661] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 78.140019] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.141398] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 78.143764] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.145484] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 78.147431] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.156274] Bluetooth: hci3: HCI_REQ-0x0c1a [ 78.162035] Bluetooth: hci5: HCI_REQ-0x0c1a [ 78.163516] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 78.169409] Bluetooth: hci4: HCI_REQ-0x0c1a [ 78.190097] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 78.198098] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 78.199295] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 78.204594] Bluetooth: hci7: HCI_REQ-0x0c1a [ 79.991284] Bluetooth: hci0: command 0x0409 tx timeout [ 80.053902] Bluetooth: hci2: command 0x0409 tx timeout [ 80.054001] Bluetooth: hci1: command 0x0409 tx timeout [ 80.118003] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 80.181925] Bluetooth: hci5: command 0x0409 tx timeout [ 80.182662] Bluetooth: hci3: command 0x0409 tx timeout [ 80.245972] Bluetooth: hci4: command 0x0409 tx timeout [ 80.246638] Bluetooth: hci7: command 0x0409 tx timeout [ 82.037922] Bluetooth: hci0: command 0x041b tx timeout [ 82.101936] Bluetooth: hci1: command 0x041b tx timeout [ 82.102022] Bluetooth: hci2: command 0x041b tx timeout [ 82.229948] Bluetooth: hci3: command 0x041b tx timeout [ 82.230811] Bluetooth: hci5: command 0x041b tx timeout [ 82.293978] Bluetooth: hci7: command 0x041b tx timeout [ 82.297550] Bluetooth: hci4: command 0x041b tx timeout [ 84.085922] Bluetooth: hci0: command 0x040f tx timeout [ 84.149979] Bluetooth: hci2: command 0x040f tx timeout [ 84.150511] Bluetooth: hci1: command 0x040f tx timeout [ 84.277906] Bluetooth: hci5: command 0x040f tx timeout [ 84.278436] Bluetooth: hci3: command 0x040f tx timeout [ 84.341922] Bluetooth: hci4: command 0x040f tx timeout [ 84.342392] Bluetooth: hci7: command 0x040f tx timeout [ 85.109954] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 86.133876] Bluetooth: hci0: command 0x0419 tx timeout [ 86.197890] Bluetooth: hci1: command 0x0419 tx timeout [ 86.198345] Bluetooth: hci2: command 0x0419 tx timeout [ 86.325928] Bluetooth: hci3: command 0x0419 tx timeout [ 86.326400] Bluetooth: hci5: command 0x0419 tx timeout [ 86.389955] Bluetooth: hci7: command 0x0419 tx timeout [ 86.390609] Bluetooth: hci4: command 0x0419 tx timeout [ 87.693272] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 87.694777] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 87.697582] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 87.700094] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 87.702284] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 87.703521] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 87.733927] Bluetooth: hci6: HCI_REQ-0x0c1a [ 89.781885] Bluetooth: hci6: command 0x0409 tx timeout [ 91.829939] Bluetooth: hci6: command 0x041b tx timeout [ 93.877877] Bluetooth: hci6: command 0x040f tx timeout [ 95.925931] Bluetooth: hci6: command 0x0419 tx timeout [ 128.211816] audit: type=1400 audit(1663159167.093:7): avc: denied { open } for pid=3614 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 128.213602] audit: type=1400 audit(1663159167.093:8): avc: denied { kernel } for pid=3614 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 128.237397] ------------[ cut here ]------------ [ 128.237424] [ 128.237428] ====================================================== [ 128.237431] WARNING: possible circular locking dependency detected [ 128.237436] 6.0.0-rc5-next-20220914 #1 Not tainted [ 128.237442] ------------------------------------------------------ [ 128.237445] syz-executor.0/3616 is trying to acquire lock: [ 128.237451] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 128.237487] [ 128.237487] but task is already holding lock: [ 128.237490] ffff88802075d020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 128.237516] [ 128.237516] which lock already depends on the new lock. [ 128.237516] [ 128.237519] [ 128.237519] the existing dependency chain (in reverse order) is: [ 128.237522] [ 128.237522] -> #3 (&ctx->lock){....}-{2:2}: [ 128.237536] _raw_spin_lock+0x2a/0x40 [ 128.237553] __perf_event_task_sched_out+0x53b/0x18d0 [ 128.237565] __schedule+0xedd/0x2470 [ 128.237575] schedule+0xda/0x1b0 [ 128.237585] exit_to_user_mode_prepare+0x114/0x1a0 [ 128.237604] syscall_exit_to_user_mode+0x19/0x40 [ 128.237621] do_syscall_64+0x48/0x90 [ 128.237634] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.237651] [ 128.237651] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 128.237665] _raw_spin_lock_nested+0x30/0x40 [ 128.237679] raw_spin_rq_lock_nested+0x1e/0x30 [ 128.237692] task_fork_fair+0x63/0x4d0 [ 128.237708] sched_cgroup_fork+0x3d0/0x540 [ 128.237721] copy_process+0x4183/0x6e20 [ 128.237731] kernel_clone+0xe7/0x890 [ 128.237741] user_mode_thread+0xad/0xf0 [ 128.237751] rest_init+0x24/0x250 [ 128.237767] arch_call_rest_init+0xf/0x14 [ 128.237779] start_kernel+0x4c1/0x4e6 [ 128.237788] secondary_startup_64_no_verify+0xe0/0xeb [ 128.237802] [ 128.237802] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 128.237815] _raw_spin_lock_irqsave+0x39/0x60 [ 128.237834] try_to_wake_up+0xab/0x1920 [ 128.237846] up+0x75/0xb0 [ 128.237857] __up_console_sem+0x6e/0x80 [ 128.237872] console_unlock+0x46a/0x590 [ 128.237888] do_con_write+0xc05/0x1d50 [ 128.237899] con_write+0x21/0x40 [ 128.237923] n_tty_write+0x4d4/0xfe0 [ 128.237935] file_tty_write.constprop.0+0x49c/0x8f0 [ 128.237946] vfs_write+0x9c3/0xd90 [ 128.237964] ksys_write+0x127/0x250 [ 128.237980] do_syscall_64+0x3b/0x90 [ 128.237993] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.238009] [ 128.238009] -> #0 ((console_sem).lock){....}-{2:2}: [ 128.238023] __lock_acquire+0x2a02/0x5e70 [ 128.238039] lock_acquire+0x1a2/0x530 [ 128.238054] _raw_spin_lock_irqsave+0x39/0x60 [ 128.238069] down_trylock+0xe/0x70 [ 128.238081] __down_trylock_console_sem+0x3b/0xd0 [ 128.238096] vprintk_emit+0x16b/0x560 [ 128.238112] vprintk+0x84/0xa0 [ 128.238128] _printk+0xba/0xf1 [ 128.238145] report_bug.cold+0x72/0xab [ 128.238157] handle_bug+0x3c/0x70 [ 128.238169] exc_invalid_op+0x14/0x50 [ 128.238182] asm_exc_invalid_op+0x16/0x20 [ 128.238198] group_sched_out.part.0+0x2c7/0x460 [ 128.238208] ctx_sched_out+0x8f1/0xc10 [ 128.238218] __perf_event_task_sched_out+0x6d0/0x18d0 [ 128.238230] __schedule+0xedd/0x2470 [ 128.238239] schedule+0xda/0x1b0 [ 128.238248] exit_to_user_mode_prepare+0x114/0x1a0 [ 128.238267] syscall_exit_to_user_mode+0x19/0x40 [ 128.238283] do_syscall_64+0x48/0x90 [ 128.238296] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.238312] [ 128.238312] other info that might help us debug this: [ 128.238312] [ 128.238315] Chain exists of: [ 128.238315] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 128.238315] [ 128.238330] Possible unsafe locking scenario: [ 128.238330] [ 128.238332] CPU0 CPU1 [ 128.238334] ---- ---- [ 128.238336] lock(&ctx->lock); [ 128.238342] lock(&rq->__lock); [ 128.238348] lock(&ctx->lock); [ 128.238354] lock((console_sem).lock); [ 128.238360] [ 128.238360] *** DEADLOCK *** [ 128.238360] [ 128.238362] 2 locks held by syz-executor.0/3616: [ 128.238369] #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 128.238394] #1: ffff88802075d020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 128.238422] [ 128.238422] stack backtrace: [ 128.238425] CPU: 0 PID: 3616 Comm: syz-executor.0 Not tainted 6.0.0-rc5-next-20220914 #1 [ 128.238437] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 128.238445] Call Trace: [ 128.238448] [ 128.238453] dump_stack_lvl+0x8b/0xb3 [ 128.238467] check_noncircular+0x263/0x2e0 [ 128.238483] ? format_decode+0x26c/0xb50 [ 128.238498] ? print_circular_bug+0x450/0x450 [ 128.238515] ? enable_ptr_key_workfn+0x20/0x20 [ 128.238530] ? format_decode+0x26c/0xb50 [ 128.238545] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 128.238562] __lock_acquire+0x2a02/0x5e70 [ 128.238584] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 128.238606] lock_acquire+0x1a2/0x530 [ 128.238622] ? down_trylock+0xe/0x70 [ 128.238636] ? rcu_read_unlock+0x40/0x40 [ 128.238657] ? vprintk+0x84/0xa0 [ 128.238674] _raw_spin_lock_irqsave+0x39/0x60 [ 128.238689] ? down_trylock+0xe/0x70 [ 128.238703] down_trylock+0xe/0x70 [ 128.238716] ? vprintk+0x84/0xa0 [ 128.238732] __down_trylock_console_sem+0x3b/0xd0 [ 128.238749] vprintk_emit+0x16b/0x560 [ 128.238768] vprintk+0x84/0xa0 [ 128.238785] _printk+0xba/0xf1 [ 128.238802] ? record_print_text.cold+0x16/0x16 [ 128.238824] ? report_bug.cold+0x66/0xab [ 128.238838] ? group_sched_out.part.0+0x2c7/0x460 [ 128.238849] report_bug.cold+0x72/0xab [ 128.238864] handle_bug+0x3c/0x70 [ 128.238878] exc_invalid_op+0x14/0x50 [ 128.238892] asm_exc_invalid_op+0x16/0x20 [ 128.238909] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 128.238922] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 128.238933] RSP: 0018:ffff88801838fc48 EFLAGS: 00010006 [ 128.238942] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 128.238950] RDX: ffff88801775d040 RSI: ffffffff81566027 RDI: 0000000000000005 [ 128.238957] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 128.238965] R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff88802075d000 [ 128.238972] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 128.238983] ? group_sched_out.part.0+0x2c7/0x460 [ 128.238996] ? group_sched_out.part.0+0x2c7/0x460 [ 128.239009] ctx_sched_out+0x8f1/0xc10 [ 128.239021] __perf_event_task_sched_out+0x6d0/0x18d0 [ 128.239036] ? lock_is_held_type+0xd7/0x130 [ 128.239054] ? __perf_cgroup_move+0x160/0x160 [ 128.239066] ? set_next_entity+0x304/0x550 [ 128.239083] ? update_curr+0x267/0x740 [ 128.239101] ? lock_is_held_type+0xd7/0x130 [ 128.239119] __schedule+0xedd/0x2470 [ 128.239132] ? io_schedule_timeout+0x150/0x150 [ 128.239145] ? rcu_read_lock_sched_held+0x3e/0x80 [ 128.239165] schedule+0xda/0x1b0 [ 128.239176] exit_to_user_mode_prepare+0x114/0x1a0 [ 128.239195] syscall_exit_to_user_mode+0x19/0x40 [ 128.239213] do_syscall_64+0x48/0x90 [ 128.239227] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.239244] RIP: 0033:0x7f4f62412b19 [ 128.239253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 128.239263] RSP: 002b:00007f4f5f988218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 128.239274] RAX: 0000000000000001 RBX: 00007f4f62525f68 RCX: 00007f4f62412b19 [ 128.239281] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4f62525f6c [ 128.239289] RBP: 00007f4f62525f60 R08: 000000000000000e R09: 0000000000000000 [ 128.239296] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f4f62525f6c [ 128.239303] R13: 00007ffc527d3d1f R14: 00007f4f5f988300 R15: 0000000000022000 [ 128.239316] [ 128.295102] WARNING: CPU: 0 PID: 3616 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 128.295762] Modules linked in: [ 128.296001] CPU: 0 PID: 3616 Comm: syz-executor.0 Not tainted 6.0.0-rc5-next-20220914 #1 [ 128.296579] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 128.297391] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 128.297786] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 128.299093] RSP: 0018:ffff88801838fc48 EFLAGS: 00010006 [ 128.299476] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 128.299999] RDX: ffff88801775d040 RSI: ffffffff81566027 RDI: 0000000000000005 [ 128.300513] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 128.301027] R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff88802075d000 [ 128.301541] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 128.302067] FS: 00007f4f5f988700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 128.302646] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.303074] CR2: 00007fe87e5bf368 CR3: 00000000207f0000 CR4: 0000000000350ef0 [ 128.303592] Call Trace: [ 128.303780] [ 128.303951] ctx_sched_out+0x8f1/0xc10 [ 128.304245] __perf_event_task_sched_out+0x6d0/0x18d0 [ 128.304628] ? lock_is_held_type+0xd7/0x130 [ 128.304951] ? __perf_cgroup_move+0x160/0x160 [ 128.305280] ? set_next_entity+0x304/0x550 [ 128.305598] ? update_curr+0x267/0x740 [ 128.305896] ? lock_is_held_type+0xd7/0x130 [ 128.306239] __schedule+0xedd/0x2470 [ 128.306514] ? io_schedule_timeout+0x150/0x150 [ 128.306857] ? rcu_read_lock_sched_held+0x3e/0x80 [ 128.307218] schedule+0xda/0x1b0 [ 128.307474] exit_to_user_mode_prepare+0x114/0x1a0 [ 128.307846] syscall_exit_to_user_mode+0x19/0x40 [ 128.308200] do_syscall_64+0x48/0x90 [ 128.308481] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.308865] RIP: 0033:0x7f4f62412b19 [ 128.309139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 128.310450] RSP: 002b:00007f4f5f988218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 128.310995] RAX: 0000000000000001 RBX: 00007f4f62525f68 RCX: 00007f4f62412b19 [ 128.311508] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4f62525f6c [ 128.312022] RBP: 00007f4f62525f60 R08: 000000000000000e R09: 0000000000000000 [ 128.312543] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f4f62525f6c [ 128.313064] R13: 00007ffc527d3d1f R14: 00007f4f5f988300 R15: 0000000000022000 [ 128.313581] [ 128.313752] irq event stamp: 958 [ 128.314003] hardirqs last enabled at (957): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 128.314683] hardirqs last disabled at (958): [] __schedule+0x1225/0x2470 [ 128.315284] softirqs last enabled at (952): [] __irq_exit_rcu+0x11b/0x180 [ 128.315910] softirqs last disabled at (649): [] __irq_exit_rcu+0x11b/0x180 [ 128.316533] ---[ end trace 0000000000000000 ]--- [ 128.744491] random: crng reseeded on system resumption [ 128.794262] random: crng reseeded on system resumption [ 131.006420] autofs4:pid:3885:autofs_fill_super: called with bogus options [ 131.084182] loop2: detected capacity change from 0 to 16154 [ 131.089858] FAT-fs (loop2): bogus logical sector size 27333 [ 131.090295] FAT-fs (loop2): Can't find a valid FAT filesystem [ 131.095684] I/O error, dev loop2, sector 16000 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 131.098019] loop2: detected capacity change from 0 to 16154 [ 131.099525] FAT-fs (loop2): bogus logical sector size 27333 [ 131.100234] FAT-fs (loop2): Can't find a valid FAT filesystem [ 132.934467] EXT4-fs warning (device sda): verify_group_input:150: Cannot add at group 63833 (only 16 groups) 12:39:31 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) 12:39:31 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x10000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) inotify_rm_watch(r0, r1) 12:39:31 executing program 6: msgrcv(0x0, 0x0, 0x0, 0x0, 0x17619eeb39436941) 12:39:31 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYRES32=0x0, @ANYBLOB]) write$P9_RSTATu(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYRES32, @ANYRES32=0xee00], 0x59) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = creat(&(0x7f0000000040)='./file1\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0x0, 0x4}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) getpid() syncfs(r4) 12:39:31 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x1a) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf959}) 12:39:31 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) write$binfmt_aout(r0, &(0x7f00000000c0), 0x20) 12:39:31 executing program 1: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='autofs\x00', 0x0, 0x0) 12:39:31 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="a2221503f72541b941ded3c56a109c9f2e0ef17c35fe", 0x16}, {0x0, 0x0, 0xffffffffffff1a96}], 0x0, &(0x7f0000000380)) [ 132.968676] loop2: detected capacity change from 0 to 16154 [ 132.980359] EXT4-fs warning (device sda): verify_group_input:150: Cannot add at group 63833 (only 16 groups) [ 132.981133] FAT-fs (loop2): bogus logical sector size 27333 [ 132.981739] FAT-fs (loop2): Can't find a valid FAT filesystem [ 132.992718] random: crng reseeded on system resumption [ 132.996796] autofs4:pid:3974:autofs_fill_super: called with bogus options 12:39:31 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x1a) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf959}) 12:39:31 executing program 6: msgrcv(0x0, 0x0, 0x0, 0x0, 0x17619eeb39436941) 12:39:31 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x10000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) inotify_rm_watch(r0, r1) 12:39:31 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) [ 133.071808] EXT4-fs warning (device sda): verify_group_input:150: Cannot add at group 63833 (only 16 groups) 12:39:31 executing program 1: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='autofs\x00', 0x0, 0x0) 12:39:31 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="a2221503f72541b941ded3c56a109c9f2e0ef17c35fe", 0x16}, {0x0, 0x0, 0xffffffffffff1a96}], 0x0, &(0x7f0000000380)) [ 133.103427] random: crng reseeded on system resumption [ 133.121337] autofs4:pid:3990:autofs_fill_super: called with bogus options [ 133.122236] loop2: detected capacity change from 0 to 16154 12:39:32 executing program 6: msgrcv(0x0, 0x0, 0x0, 0x0, 0x17619eeb39436941) [ 133.124859] FAT-fs (loop2): bogus logical sector size 27333 [ 133.125466] FAT-fs (loop2): Can't find a valid FAT filesystem 12:39:32 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x1a) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf959}) 12:39:32 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYRES32=0x0, @ANYBLOB]) write$P9_RSTATu(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYRES32, @ANYRES32=0xee00], 0x59) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = creat(&(0x7f0000000040)='./file1\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0x0, 0x4}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) getpid() syncfs(r4) 12:39:32 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000080)="a2221503f72541b941ded3c56a109c9f2e0ef17c35fe", 0x16}, {0x0, 0x0, 0xffffffffffff1a96}], 0x0, &(0x7f0000000380)) 12:39:32 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) 12:39:32 executing program 1: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='autofs\x00', 0x0, 0x0) 12:39:32 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x10000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) inotify_rm_watch(r0, r1) 12:39:32 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) write$binfmt_aout(r0, &(0x7f00000000c0), 0x20) 12:39:32 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) [ 133.879795] autofs4:pid:4001:autofs_fill_super: called with bogus options [ 133.889336] loop2: detected capacity change from 0 to 16154 [ 133.900887] FAT-fs (loop2): bogus logical sector size 27333 [ 133.901523] FAT-fs (loop2): Can't find a valid FAT filesystem [ 133.933342] EXT4-fs warning (device sda): verify_group_input:150: Cannot add at group 63833 (only 16 groups) [ 133.970322] random: crng reseeded on system resumption 12:39:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x1a) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf959}) 12:39:32 executing program 2: r0 = eventfd2(0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) write$binfmt_aout(r0, &(0x7f00000000c0), 0x20) 12:39:32 executing program 5: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYRES32=0x0, @ANYBLOB]) write$P9_RSTATu(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="590004007d0200000040000100010000000000000000060000000000000000000404fd97801a01000100010000000000000002002d2306000202020202020700257d25403a000004003a27402a0b331bbd258a50c11a10f56f01745a05f05b0bf14fa7e69ced90ad0ab282e7efd6d6c84afbce9bc5363c52ea440a98f816600dba5781a550d0c707c857f381623c21a6ae7203d5606ea3e81cdef1793274e0b5fe442ec49c8e50c7934a7f121f7012cb08000000d185256007989befeb1a9e2e72976152bd9ffc8a87513215be9b1239f4c466501303f56e0a9cce4bdb7044dd9b7e064097861948eae2d7da530dd73f25bf262e6e52200b0bdfdc7e6ca13ee257904af253758a44ca22b347d034fa7cf8976cf82005efbe47b2198009800a2bb988e6f65779f871f34b1018e8f3a60f593060c88cc608e707cc938ca547a316acf59b81a9fe2e2481512831abd1b5d05f7cd39a3566ddd8c08bcb4dbf1af35cc8020070f01823f0fdb80375024df82950e1af310b3e315d276cb5f7af68e03762384a044dc70751cad87e52c3436b48967b7d3d66c228410c7f0379e2fdd0f9773cccb1dbc6dabaef5522a1927b5293e55a39a7aac73f44bf67723459a340afc0ffacabbce0059b2058c6330b0fd2a7e7abd9ffaeffbdd930ed01ae7cfa7198d972500b3c9f87c02b3b635a4573951c7f8806ff7f794a4892c344c6144d91169f2d3fa8cfbdba244036d627554eb84b000000", @ANYRES32=0xee01, @ANYRES32, @ANYRES32=0xee00], 0x59) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = creat(&(0x7f0000000040)='./file1\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0x0, 0x4}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) getpid() syncfs(r4) [ 134.040842] hrtimer: interrupt took 17673 ns [ 134.084689] random: crng reseeded on system resumption [ 134.265890] EXT4-fs warning (device sda): verify_group_input:150: Cannot add at group 63833 (only 16 groups) 12:39:33 executing program 4: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYRES32=0x0, @ANYBLOB]) write$P9_RSTATu(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYRES32, @ANYRES32=0xee00], 0x59) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = creat(&(0x7f0000000040)='./file1\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0x0, 0x4}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) getpid() syncfs(r4) 12:39:33 executing program 5: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYRES32=0x0, @ANYBLOB]) write$P9_RSTATu(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYRES32, @ANYRES32=0xee00], 0x59) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = creat(&(0x7f0000000040)='./file1\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0x0, 0x4}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) getpid() syncfs(r4) 12:39:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x1a) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf959}) 12:39:33 executing program 0: futex(0x0, 0x3, 0x0, 0x0, 0x0, 0x0) 12:39:33 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20400400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') pread64(r1, &(0x7f0000003680)=""/237, 0xed, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000000), 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000002c0)={0x0, 0x700000000}) [ 134.391756] EXT4-fs warning (device sda): verify_group_input:150: Cannot add at group 63833 (only 16 groups) 12:39:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x1a) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xf959}) 12:39:33 executing program 0: futex(0x0, 0x3, 0x0, 0x0, 0x0, 0x0) [ 134.474647] EXT4-fs warning (device sda): verify_group_input:150: Cannot add at group 63833 (only 16 groups) 12:39:33 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) [ 134.607070] random: crng reseeded on system resumption [ 134.633601] audit: type=1400 audit(1663159173.515:9): avc: denied { write } for pid=4032 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 12:39:33 executing program 0: futex(0x0, 0x3, 0x0, 0x0, 0x0, 0x0) 12:39:33 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) 12:39:33 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20400400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') pread64(r1, &(0x7f0000003680)=""/237, 0xed, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000000), 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000002c0)={0x0, 0x700000000}) [ 134.708169] random: crng reseeded on system resumption 12:39:33 executing program 3: r0 = eventfd2(0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) write$binfmt_aout(r0, &(0x7f00000000c0), 0x20) 12:39:33 executing program 0: futex(0x0, 0x3, 0x0, 0x0, 0x0, 0x0) 12:39:33 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20400400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') pread64(r1, &(0x7f0000003680)=""/237, 0xed, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000000), 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000002c0)={0x0, 0x700000000}) 12:39:34 executing program 2: r0 = eventfd2(0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) write$binfmt_aout(r0, &(0x7f00000000c0), 0x20) 12:39:34 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20400400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') pread64(r1, &(0x7f0000003680)=""/237, 0xed, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000000), 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000002c0)={0x0, 0x700000000}) 12:39:34 executing program 5: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYRES32=0x0, @ANYBLOB]) write$P9_RSTATu(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYRES32, @ANYRES32=0xee00], 0x59) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r3 = creat(&(0x7f0000000040)='./file1\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0x0, 0x4}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) getpid() syncfs(r4) 12:39:34 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20400400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') pread64(r1, &(0x7f0000003680)=""/237, 0xed, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000000), 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000002c0)={0x0, 0x700000000}) 12:39:34 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='mounts\x00') preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000240)=""/122, 0x7a}], 0x1, 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/185, 0xb9, 0x0) 12:39:34 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) getpid() stat(&(0x7f0000001800)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) stat(&(0x7f0000000180)='./cgroup/cgroup.procs/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fork() ioprio_get$pid(0x2, 0x0) 12:39:34 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20400400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') pread64(r1, &(0x7f0000003680)=""/237, 0xed, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000000), 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000002c0)={0x0, 0x700000000}) 12:39:34 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) 12:39:34 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) 12:39:34 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) getpid() stat(&(0x7f0000001800)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) stat(&(0x7f0000000180)='./cgroup/cgroup.procs/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fork() ioprio_get$pid(0x2, 0x0) 12:39:34 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) 12:39:34 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20400400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') pread64(r1, &(0x7f0000003680)=""/237, 0xed, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000000), 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000002c0)={0x0, 0x700000000}) 12:39:34 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20400400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') pread64(r1, &(0x7f0000003680)=""/237, 0xed, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000000), 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000002c0)={0x0, 0x700000000}) 12:39:34 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='mounts\x00') preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000240)=""/122, 0x7a}], 0x1, 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/185, 0xb9, 0x0) 12:39:34 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20400400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') pread64(r1, &(0x7f0000003680)=""/237, 0xed, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000000), 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000002c0)={0x0, 0x700000000}) 12:39:34 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20400400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') pread64(r1, &(0x7f0000003680)=""/237, 0xed, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000000), 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000002c0)={0x0, 0x700000000}) 12:39:35 executing program 2: r0 = eventfd2(0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) write$binfmt_aout(r0, &(0x7f00000000c0), 0x20) 12:39:35 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='mounts\x00') preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000240)=""/122, 0x7a}], 0x1, 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/185, 0xb9, 0x0) 12:39:35 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) 12:39:35 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='mounts\x00') preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000240)=""/122, 0x7a}], 0x1, 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/185, 0xb9, 0x0) 12:39:35 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) getpid() stat(&(0x7f0000001800)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) stat(&(0x7f0000000180)='./cgroup/cgroup.procs/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fork() ioprio_get$pid(0x2, 0x0) 12:39:35 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) getpid() stat(&(0x7f0000001800)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) stat(&(0x7f0000000180)='./cgroup/cgroup.procs/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fork() ioprio_get$pid(0x2, 0x0) 12:39:35 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) getpid() stat(&(0x7f0000001800)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) stat(&(0x7f0000000180)='./cgroup/cgroup.procs/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fork() ioprio_get$pid(0x2, 0x0) 12:39:35 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) getpid() stat(&(0x7f0000001800)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) stat(&(0x7f0000000180)='./cgroup/cgroup.procs/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fork() ioprio_get$pid(0x2, 0x0) 12:39:35 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='mounts\x00') preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000240)=""/122, 0x7a}], 0x1, 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/185, 0xb9, 0x0) 12:39:35 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='mounts\x00') preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000240)=""/122, 0x7a}], 0x1, 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/185, 0xb9, 0x0) 12:39:35 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) getpid() stat(&(0x7f0000001800)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) stat(&(0x7f0000000180)='./cgroup/cgroup.procs/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fork() ioprio_get$pid(0x2, 0x0) 12:39:35 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) getpid() stat(&(0x7f0000001800)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) stat(&(0x7f0000000180)='./cgroup/cgroup.procs/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fork() ioprio_get$pid(0x2, 0x0) 12:39:35 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) getpid() stat(&(0x7f0000001800)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) stat(&(0x7f0000000180)='./cgroup/cgroup.procs/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fork() ioprio_get$pid(0x2, 0x0) 12:39:35 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) getpid() stat(&(0x7f0000001800)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) stat(&(0x7f0000000180)='./cgroup/cgroup.procs/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fork() ioprio_get$pid(0x2, 0x0) 12:39:35 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) getpid() stat(&(0x7f0000001800)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) stat(&(0x7f0000000180)='./cgroup/cgroup.procs/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fork() ioprio_get$pid(0x2, 0x0) 12:39:35 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='mounts\x00') preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000240)=""/122, 0x7a}], 0x1, 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/185, 0xb9, 0x0) 12:39:36 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) getpid() stat(&(0x7f0000001800)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) stat(&(0x7f0000000180)='./cgroup/cgroup.procs/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fork() ioprio_get$pid(0x2, 0x0) 12:39:36 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) getpid() stat(&(0x7f0000001800)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) stat(&(0x7f0000000180)='./cgroup/cgroup.procs/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fork() ioprio_get$pid(0x2, 0x0) 12:39:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) getpid() stat(&(0x7f0000001800)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) stat(&(0x7f0000000180)='./cgroup/cgroup.procs/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fork() ioprio_get$pid(0x2, 0x0) 12:39:36 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) getpid() stat(&(0x7f0000001800)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) stat(&(0x7f0000000180)='./cgroup/cgroup.procs/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fork() ioprio_get$pid(0x2, 0x0) 12:39:36 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) getpid() stat(&(0x7f0000001800)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) stat(&(0x7f0000000180)='./cgroup/cgroup.procs/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fork() ioprio_get$pid(0x2, 0x0) 12:39:36 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) getpid() stat(&(0x7f0000001800)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) stat(&(0x7f0000000180)='./cgroup/cgroup.procs/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fork() ioprio_get$pid(0x2, 0x0) 12:39:36 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) getpid() stat(&(0x7f0000001800)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) stat(&(0x7f0000000180)='./cgroup/cgroup.procs/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fork() ioprio_get$pid(0x2, 0x0) 12:39:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@loopback}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 12:39:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@loopback}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 12:39:36 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) getpid() stat(&(0x7f0000001800)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) stat(&(0x7f0000000180)='./cgroup/cgroup.procs/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fork() ioprio_get$pid(0x2, 0x0) 12:39:36 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) getpid() stat(&(0x7f0000001800)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) stat(&(0x7f0000000180)='./cgroup/cgroup.procs/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fork() ioprio_get$pid(0x2, 0x0) 12:39:36 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) getpid() stat(&(0x7f0000001800)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) stat(&(0x7f0000000180)='./cgroup/cgroup.procs/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fork() ioprio_get$pid(0x2, 0x0) 12:39:36 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) getpid() stat(&(0x7f0000001800)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) stat(&(0x7f0000000180)='./cgroup/cgroup.procs/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fork() ioprio_get$pid(0x2, 0x0) 12:39:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@loopback}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 12:39:36 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 12:39:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}}, 0x0) 12:39:36 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) getpid() stat(&(0x7f0000001800)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) stat(&(0x7f0000000180)='./cgroup/cgroup.procs/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fork() ioprio_get$pid(0x2, 0x0) 12:39:36 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) getpid() stat(&(0x7f0000001800)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) stat(&(0x7f0000000180)='./cgroup/cgroup.procs/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fork() ioprio_get$pid(0x2, 0x0) 12:39:36 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0xe20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0cb0fae138cd1f2e03243f93be39f2c6d2a536c1f5f8d74a43b4c0bc27497234", "c04746ec5b12cf97d11a8bb546b56bcb9d3d359d9d4acaff8add614d1e90e4eab444f4e0c00eae0446225ae1436cfdf0", "ea96db76c1999c1a572451cf464ab9976bb3f922008ab90918dd869e", {"fba05ec01197a4559adff2fa54ac3691", "c0244d2350165cdb4de9cebb63137649"}}}}}}}, 0x0) 12:39:36 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 12:39:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@loopback}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 12:39:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}}, 0x0) 12:39:37 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0xe20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0cb0fae138cd1f2e03243f93be39f2c6d2a536c1f5f8d74a43b4c0bc27497234", "c04746ec5b12cf97d11a8bb546b56bcb9d3d359d9d4acaff8add614d1e90e4eab444f4e0c00eae0446225ae1436cfdf0", "ea96db76c1999c1a572451cf464ab9976bb3f922008ab90918dd869e", {"fba05ec01197a4559adff2fa54ac3691", "c0244d2350165cdb4de9cebb63137649"}}}}}}}, 0x0) 12:39:37 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) getpid() stat(&(0x7f0000001800)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) stat(&(0x7f0000000180)='./cgroup/cgroup.procs/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fork() ioprio_get$pid(0x2, 0x0) 12:39:37 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x4c, &(0x7f0000000180), 0x4) VM DIAGNOSIS: 12:39:27 Registers: info registers vcpu 0 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b24f1 RDI=ffffffff87641b60 RBP=ffffffff87641b20 RSP=ffff88801838f698 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000061 R11=0000000000000001 R12=0000000000000061 R13=ffffffff87641b20 R14=0000000000000010 R15=ffffffff822b24e0 RIP=ffffffff822b2549 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f4f5f988700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe87e5bf368 CR3=00000000207f0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f4f624f97c0 00007f4f624f97c8 YMM02=0000000000000000 0000000000000000 00007f4f624f97e0 00007f4f624f97c0 YMM03=0000000000000000 0000000000000000 00007f4f624f97c8 00007f4f624f97c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88806ce3eda0 RCX=0000000000000000 RDX=ffff888020700000 RSI=ffffffff813bccdb RDI=0000000000000005 RBP=0000000000000003 RSP=ffff8880183c7960 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffed100d9c7db5 R13=ffff88806ce3eda8 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff813bccdd RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555556568400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4f6251b6dc CR3=00000000207f0000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f4f624f97c0 00007f4f624f97c8 YMM02=0000000000000000 0000000000000000 00007f4f624f97e0 00007f4f624f97c0 YMM03=0000000000000000 0000000000000000 00007f4f624f97c8 00007f4f624f97c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000