Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:46062' (ECDSA) to the list of known hosts. 2022/09/12 13:53:38 fuzzer started 2022/09/12 13:53:38 dialing manager at localhost:38027 syzkaller login: [ 36.504328] cgroup: Unknown subsys name 'net' [ 36.611310] cgroup: Unknown subsys name 'rlimit' 2022/09/12 13:53:53 syscalls: 2215 2022/09/12 13:53:53 code coverage: enabled 2022/09/12 13:53:53 comparison tracing: enabled 2022/09/12 13:53:53 extra coverage: enabled 2022/09/12 13:53:53 setuid sandbox: enabled 2022/09/12 13:53:53 namespace sandbox: enabled 2022/09/12 13:53:53 Android sandbox: enabled 2022/09/12 13:53:53 fault injection: enabled 2022/09/12 13:53:53 leak checking: enabled 2022/09/12 13:53:53 net packet injection: enabled 2022/09/12 13:53:53 net device setup: enabled 2022/09/12 13:53:53 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/12 13:53:53 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/12 13:53:53 USB emulation: enabled 2022/09/12 13:53:53 hci packet injection: enabled 2022/09/12 13:53:53 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220912) 2022/09/12 13:53:53 802.15.4 emulation: enabled 2022/09/12 13:53:53 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/12 13:53:53 fetching corpus: 50, signal 36390/39444 (executing program) 2022/09/12 13:53:54 fetching corpus: 100, signal 51180/55194 (executing program) 2022/09/12 13:53:54 fetching corpus: 150, signal 59081/64072 (executing program) 2022/09/12 13:53:54 fetching corpus: 200, signal 64530/70493 (executing program) 2022/09/12 13:53:54 fetching corpus: 250, signal 73667/80134 (executing program) 2022/09/12 13:53:54 fetching corpus: 300, signal 78214/85358 (executing program) 2022/09/12 13:53:55 fetching corpus: 350, signal 82035/89784 (executing program) 2022/09/12 13:53:55 fetching corpus: 400, signal 86881/95053 (executing program) 2022/09/12 13:53:55 fetching corpus: 450, signal 90702/99289 (executing program) 2022/09/12 13:53:55 fetching corpus: 500, signal 93628/102660 (executing program) 2022/09/12 13:53:55 fetching corpus: 550, signal 97284/106609 (executing program) 2022/09/12 13:53:55 fetching corpus: 600, signal 100755/110323 (executing program) 2022/09/12 13:53:56 fetching corpus: 650, signal 103090/113081 (executing program) 2022/09/12 13:53:56 fetching corpus: 700, signal 104461/114923 (executing program) 2022/09/12 13:53:56 fetching corpus: 750, signal 106552/117327 (executing program) 2022/09/12 13:53:56 fetching corpus: 800, signal 109517/120353 (executing program) 2022/09/12 13:53:56 fetching corpus: 850, signal 111902/122822 (executing program) 2022/09/12 13:53:56 fetching corpus: 900, signal 114457/125372 (executing program) 2022/09/12 13:53:57 fetching corpus: 950, signal 116839/127852 (executing program) 2022/09/12 13:53:57 fetching corpus: 1000, signal 118068/129333 (executing program) 2022/09/12 13:53:57 fetching corpus: 1050, signal 120619/131782 (executing program) 2022/09/12 13:53:57 fetching corpus: 1100, signal 123522/134339 (executing program) 2022/09/12 13:53:57 fetching corpus: 1150, signal 126043/136602 (executing program) 2022/09/12 13:53:57 fetching corpus: 1200, signal 128178/138504 (executing program) 2022/09/12 13:53:58 fetching corpus: 1250, signal 130308/140346 (executing program) 2022/09/12 13:53:58 fetching corpus: 1300, signal 131964/141752 (executing program) 2022/09/12 13:53:58 fetching corpus: 1350, signal 134253/143572 (executing program) 2022/09/12 13:53:58 fetching corpus: 1400, signal 136074/145089 (executing program) 2022/09/12 13:53:58 fetching corpus: 1450, signal 137464/146352 (executing program) 2022/09/12 13:53:58 fetching corpus: 1500, signal 138846/147504 (executing program) 2022/09/12 13:53:59 fetching corpus: 1550, signal 140660/148857 (executing program) 2022/09/12 13:53:59 fetching corpus: 1600, signal 142832/150524 (executing program) 2022/09/12 13:53:59 fetching corpus: 1650, signal 144288/151604 (executing program) 2022/09/12 13:53:59 fetching corpus: 1700, signal 145733/152641 (executing program) 2022/09/12 13:53:59 fetching corpus: 1750, signal 147224/153675 (executing program) 2022/09/12 13:53:59 fetching corpus: 1800, signal 148319/154466 (executing program) 2022/09/12 13:54:00 fetching corpus: 1850, signal 149882/155438 (executing program) 2022/09/12 13:54:00 fetching corpus: 1900, signal 151145/156181 (executing program) 2022/09/12 13:54:00 fetching corpus: 1950, signal 152859/157218 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/157986 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/158076 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/158150 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/158239 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/158328 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/158428 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/158505 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/158596 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/158682 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/158791 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/158863 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/158956 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/159039 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/159123 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/159192 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/159269 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/159364 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/159465 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/159568 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/159662 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/159769 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/159864 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/159941 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/160026 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/160123 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/160238 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/160321 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/160403 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/160481 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/160584 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/160682 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/160771 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/160858 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/160937 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/161017 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/161116 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/161196 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/161297 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/161345 (executing program) 2022/09/12 13:54:00 fetching corpus: 2000, signal 154218/161345 (executing program) 2022/09/12 13:54:03 starting 8 fuzzer processes 13:54:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x7) 13:54:03 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) 13:54:03 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0xa406]}}) 13:54:03 executing program 3: r0 = epoll_create1(0x0) r1 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000000240), 0x8) 13:54:03 executing program 4: syz_emit_ethernet(0xfffffdef, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "f2e2a6", 0x0, 0x0, 0x0, @private2, @remote, [], "52168a0f02b79fbf"}}}}}}}, 0x0) 13:54:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x18292}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000480)=""/156, 0x9c}, {&(0x7f00000003c0)=""/41, 0x29}, {&(0x7f0000000540)=""/253, 0xfd}], 0x3, 0x7706170c, 0x4) 13:54:03 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) [ 61.156507] audit: type=1400 audit(1662990843.449:6): avc: denied { execmem } for pid=292 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:54:03 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) [ 62.399172] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.403337] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.405071] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.407879] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.409661] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.412087] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 62.413553] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.414936] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.417322] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.425386] Bluetooth: hci0: HCI_REQ-0x0c1a [ 62.428527] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.429859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.437259] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.453767] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 62.455271] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.458022] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.459683] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.461291] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.462668] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.464421] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.465536] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.467181] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.470180] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.471979] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 62.473714] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.475008] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 62.476178] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 62.477702] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.479120] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 62.480284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 62.483098] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.485369] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.487218] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 62.489547] Bluetooth: hci4: HCI_REQ-0x0c1a [ 62.491468] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.499661] Bluetooth: hci3: HCI_REQ-0x0c1a [ 62.510309] Bluetooth: hci1: HCI_REQ-0x0c1a [ 62.511515] Bluetooth: hci2: HCI_REQ-0x0c1a [ 62.521296] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 62.531076] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 62.532429] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 62.544012] Bluetooth: hci5: HCI_REQ-0x0c1a [ 62.560482] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 62.563653] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 62.566442] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 62.567811] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 62.569397] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 62.571996] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 62.575576] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 62.580269] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 62.581842] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 62.586637] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 62.586644] Bluetooth: hci6: HCI_REQ-0x0c1a [ 62.598167] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 62.603091] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 62.625113] Bluetooth: hci7: HCI_REQ-0x0c1a [ 64.476372] Bluetooth: hci0: command 0x0409 tx timeout [ 64.539836] Bluetooth: hci2: command 0x0409 tx timeout [ 64.540361] Bluetooth: hci3: command 0x0409 tx timeout [ 64.541372] Bluetooth: hci1: command 0x0409 tx timeout [ 64.541903] Bluetooth: hci4: command 0x0409 tx timeout [ 64.603882] Bluetooth: hci6: command 0x0409 tx timeout [ 64.605062] Bluetooth: hci5: command 0x0409 tx timeout [ 64.667858] Bluetooth: hci7: command 0x0409 tx timeout [ 66.524301] Bluetooth: hci0: command 0x041b tx timeout [ 66.587873] Bluetooth: hci4: command 0x041b tx timeout [ 66.588442] Bluetooth: hci1: command 0x041b tx timeout [ 66.589001] Bluetooth: hci3: command 0x041b tx timeout [ 66.589536] Bluetooth: hci2: command 0x041b tx timeout [ 66.652212] Bluetooth: hci5: command 0x041b tx timeout [ 66.652736] Bluetooth: hci6: command 0x041b tx timeout [ 66.716020] Bluetooth: hci7: command 0x041b tx timeout [ 68.571970] Bluetooth: hci0: command 0x040f tx timeout [ 68.635905] Bluetooth: hci2: command 0x040f tx timeout [ 68.636672] Bluetooth: hci3: command 0x040f tx timeout [ 68.637531] Bluetooth: hci1: command 0x040f tx timeout [ 68.638298] Bluetooth: hci4: command 0x040f tx timeout [ 68.699936] Bluetooth: hci6: command 0x040f tx timeout [ 68.700966] Bluetooth: hci5: command 0x040f tx timeout [ 68.763902] Bluetooth: hci7: command 0x040f tx timeout [ 70.619943] Bluetooth: hci0: command 0x0419 tx timeout [ 70.684539] Bluetooth: hci4: command 0x0419 tx timeout [ 70.685911] Bluetooth: hci1: command 0x0419 tx timeout [ 70.686581] Bluetooth: hci3: command 0x0419 tx timeout [ 70.687378] Bluetooth: hci2: command 0x0419 tx timeout [ 70.747932] Bluetooth: hci5: command 0x0419 tx timeout [ 70.749071] Bluetooth: hci6: command 0x0419 tx timeout [ 70.812520] Bluetooth: hci7: command 0x0419 tx timeout 13:54:56 executing program 3: r0 = epoll_create1(0x0) r1 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000000240), 0x8) 13:54:57 executing program 3: r0 = epoll_create1(0x0) r1 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000000240), 0x8) 13:54:57 executing program 3: r0 = epoll_create1(0x0) r1 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000000240), 0x8) 13:54:57 executing program 3: r0 = epoll_create1(0x0) r1 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000000240), 0x8) 13:54:57 executing program 3: r0 = epoll_create1(0x0) r1 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000000240), 0x8) 13:54:57 executing program 3: r0 = epoll_create1(0x0) r1 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000000240), 0x8) 13:54:57 executing program 3: keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000180)=""/4076, 0xfec) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000001280)=""/70) 13:54:57 executing program 3: keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000180)=""/4076, 0xfec) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000001280)=""/70) [ 115.798148] audit: type=1400 audit(1662990898.091:7): avc: denied { open } for pid=3804 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 115.800539] audit: type=1400 audit(1662990898.091:8): avc: denied { kernel } for pid=3804 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 118.762810] ------------[ cut here ]------------ [ 118.762841] [ 118.762845] ====================================================== [ 118.762849] WARNING: possible circular locking dependency detected [ 118.762853] 6.0.0-rc5-next-20220912 #1 Not tainted [ 118.762859] ------------------------------------------------------ [ 118.762863] syz-executor.5/3959 is trying to acquire lock: [ 118.762869] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 118.762907] [ 118.762907] but task is already holding lock: [ 118.762910] ffff88800ec2c020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 118.762938] [ 118.762938] which lock already depends on the new lock. [ 118.762938] [ 118.762941] [ 118.762941] the existing dependency chain (in reverse order) is: [ 118.762944] [ 118.762944] -> #3 (&ctx->lock){....}-{2:2}: [ 118.762959] _raw_spin_lock+0x2a/0x40 [ 118.762977] __perf_event_task_sched_out+0x53b/0x18d0 [ 118.762990] __schedule+0xedd/0x2470 [ 118.763000] schedule+0xda/0x1b0 [ 118.763009] exit_to_user_mode_prepare+0x114/0x1a0 [ 118.763031] syscall_exit_to_user_mode+0x19/0x40 [ 118.763049] do_syscall_64+0x48/0x90 [ 118.763062] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 118.763080] [ 118.763080] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 118.763095] _raw_spin_lock_nested+0x30/0x40 [ 118.763110] raw_spin_rq_lock_nested+0x1e/0x30 [ 118.763124] task_fork_fair+0x63/0x4d0 [ 118.763141] sched_cgroup_fork+0x3d0/0x540 [ 118.763156] copy_process+0x3f9e/0x6df0 [ 118.763167] kernel_clone+0xe7/0x890 [ 118.763177] user_mode_thread+0xad/0xf0 [ 118.763187] rest_init+0x24/0x250 [ 118.763204] arch_call_rest_init+0xf/0x14 [ 118.763224] start_kernel+0x4c1/0x4e6 [ 118.763242] secondary_startup_64_no_verify+0xe0/0xeb [ 118.763257] [ 118.763257] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 118.763271] _raw_spin_lock_irqsave+0x39/0x60 [ 118.763286] try_to_wake_up+0xab/0x1920 [ 118.763300] up+0x75/0xb0 [ 118.763312] __up_console_sem+0x6e/0x80 [ 118.763329] console_unlock+0x46a/0x590 [ 118.763346] vt_ioctl+0x2822/0x2ca0 [ 118.763359] tty_ioctl+0x7c4/0x1700 [ 118.763371] __x64_sys_ioctl+0x19a/0x210 [ 118.763386] do_syscall_64+0x3b/0x90 [ 118.763400] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 118.763417] [ 118.763417] -> #0 ((console_sem).lock){....}-{2:2}: [ 118.763431] __lock_acquire+0x2a02/0x5e70 [ 118.763449] lock_acquire+0x1a2/0x530 [ 118.763466] _raw_spin_lock_irqsave+0x39/0x60 [ 118.763481] down_trylock+0xe/0x70 [ 118.763494] __down_trylock_console_sem+0x3b/0xd0 [ 118.763511] vprintk_emit+0x16b/0x560 [ 118.763529] vprintk+0x84/0xa0 [ 118.763546] _printk+0xba/0xf1 [ 118.763565] report_bug.cold+0x72/0xab [ 118.763577] handle_bug+0x3c/0x70 [ 118.763590] exc_invalid_op+0x14/0x50 [ 118.763604] asm_exc_invalid_op+0x16/0x20 [ 118.763621] group_sched_out.part.0+0x2c7/0x460 [ 118.763631] ctx_sched_out+0x8f1/0xc10 [ 118.763641] __perf_event_task_sched_out+0x6d0/0x18d0 [ 118.763654] __schedule+0xedd/0x2470 [ 118.763664] schedule+0xda/0x1b0 [ 118.763673] exit_to_user_mode_prepare+0x114/0x1a0 [ 118.763694] syscall_exit_to_user_mode+0x19/0x40 [ 118.763711] do_syscall_64+0x48/0x90 [ 118.763725] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 118.763742] [ 118.763742] other info that might help us debug this: [ 118.763742] [ 118.763745] Chain exists of: [ 118.763745] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 118.763745] [ 118.763760] Possible unsafe locking scenario: [ 118.763760] [ 118.763763] CPU0 CPU1 [ 118.763765] ---- ---- [ 118.763767] lock(&ctx->lock); [ 118.763773] lock(&rq->__lock); [ 118.763779] lock(&ctx->lock); [ 118.763786] lock((console_sem).lock); [ 118.763792] [ 118.763792] *** DEADLOCK *** [ 118.763792] [ 118.763794] 2 locks held by syz-executor.5/3959: [ 118.763801] #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 118.763827] #1: ffff88800ec2c020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 118.763856] [ 118.763856] stack backtrace: [ 118.763859] CPU: 0 PID: 3959 Comm: syz-executor.5 Not tainted 6.0.0-rc5-next-20220912 #1 [ 118.763872] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 118.763881] Call Trace: [ 118.763884] [ 118.763889] dump_stack_lvl+0x8b/0xb3 [ 118.763904] check_noncircular+0x263/0x2e0 [ 118.763922] ? format_decode+0x26c/0xb50 [ 118.763937] ? print_circular_bug+0x450/0x450 [ 118.763955] ? enable_ptr_key_workfn+0x20/0x20 [ 118.763971] ? format_decode+0x26c/0xb50 [ 118.763987] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 118.764006] __lock_acquire+0x2a02/0x5e70 [ 118.764029] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 118.764053] lock_acquire+0x1a2/0x530 [ 118.764071] ? down_trylock+0xe/0x70 [ 118.764086] ? rcu_read_unlock+0x40/0x40 [ 118.764106] ? __lock_acquire+0x164d/0x5e70 [ 118.764126] ? vprintk+0x84/0xa0 [ 118.764145] _raw_spin_lock_irqsave+0x39/0x60 [ 118.764161] ? down_trylock+0xe/0x70 [ 118.764175] down_trylock+0xe/0x70 [ 118.764190] ? vprintk+0x84/0xa0 [ 118.764208] __down_trylock_console_sem+0x3b/0xd0 [ 118.764226] vprintk_emit+0x16b/0x560 [ 118.764247] vprintk+0x84/0xa0 [ 118.764266] _printk+0xba/0xf1 [ 118.764284] ? record_print_text.cold+0x16/0x16 [ 118.764307] ? report_bug.cold+0x66/0xab [ 118.764322] ? group_sched_out.part.0+0x2c7/0x460 [ 118.764334] report_bug.cold+0x72/0xab [ 118.764349] handle_bug+0x3c/0x70 [ 118.764363] exc_invalid_op+0x14/0x50 [ 118.764378] asm_exc_invalid_op+0x16/0x20 [ 118.764396] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 118.764410] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 118.764422] RSP: 0018:ffff88803f4b7c48 EFLAGS: 00010006 [ 118.764431] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 118.764439] RDX: ffff888017d91ac0 RSI: ffffffff81566027 RDI: 0000000000000005 [ 118.764448] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 118.764455] R10: 0000000000000000 R11: ffffffff865aa01b R12: ffff88800ec2c000 [ 118.764463] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 118.764475] ? group_sched_out.part.0+0x2c7/0x460 [ 118.764489] ? group_sched_out.part.0+0x2c7/0x460 [ 118.764502] ctx_sched_out+0x8f1/0xc10 [ 118.764515] __perf_event_task_sched_out+0x6d0/0x18d0 [ 118.764531] ? lock_is_held_type+0xd7/0x130 [ 118.764550] ? __perf_cgroup_move+0x160/0x160 [ 118.764563] ? set_next_entity+0x304/0x550 [ 118.764582] ? update_curr+0x267/0x740 [ 118.764601] ? lock_is_held_type+0xd7/0x130 [ 118.764621] __schedule+0xedd/0x2470 [ 118.764634] ? io_schedule_timeout+0x150/0x150 [ 118.764647] ? rcu_read_lock_sched_held+0x3e/0x80 [ 118.764668] schedule+0xda/0x1b0 [ 118.764680] exit_to_user_mode_prepare+0x114/0x1a0 [ 118.764702] syscall_exit_to_user_mode+0x19/0x40 [ 118.764720] do_syscall_64+0x48/0x90 [ 118.764735] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 118.764753] RIP: 0033:0x7f61506acb19 [ 118.764762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 118.764773] RSP: 002b:00007f614dc22218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 118.764785] RAX: 0000000000000001 RBX: 00007f61507bff68 RCX: 00007f61506acb19 [ 118.764793] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f61507bff6c [ 118.764800] RBP: 00007f61507bff60 R08: 000000000000000e R09: 0000000000000000 [ 118.764808] R10: 0000000000000004 R11: 0000000000000246 R12: 00007f61507bff6c [ 118.764816] R13: 00007ffdc57e97af R14: 00007f614dc22300 R15: 0000000000022000 [ 118.764829] [ 118.821396] WARNING: CPU: 0 PID: 3959 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 118.822068] Modules linked in: [ 118.822305] CPU: 0 PID: 3959 Comm: syz-executor.5 Not tainted 6.0.0-rc5-next-20220912 #1 [ 118.822888] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 118.823745] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 118.824133] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 118.825495] RSP: 0018:ffff88803f4b7c48 EFLAGS: 00010006 [ 118.825901] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 118.826429] RDX: ffff888017d91ac0 RSI: ffffffff81566027 RDI: 0000000000000005 [ 118.826954] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 118.827479] R10: 0000000000000000 R11: ffffffff865aa01b R12: ffff88800ec2c000 [ 118.828007] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 118.828541] FS: 00007f614dc22700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 118.829145] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.829600] CR2: 0000001b2e522000 CR3: 000000001b880000 CR4: 0000000000350ef0 [ 118.830145] Call Trace: [ 118.830336] [ 118.830513] ctx_sched_out+0x8f1/0xc10 [ 118.830810] __perf_event_task_sched_out+0x6d0/0x18d0 [ 118.831203] ? lock_is_held_type+0xd7/0x130 [ 118.831528] ? __perf_cgroup_move+0x160/0x160 [ 118.831874] ? set_next_entity+0x304/0x550 [ 118.832203] ? update_curr+0x267/0x740 [ 118.832508] ? lock_is_held_type+0xd7/0x130 [ 118.832833] __schedule+0xedd/0x2470 [ 118.833112] ? io_schedule_timeout+0x150/0x150 [ 118.833456] ? rcu_read_lock_sched_held+0x3e/0x80 [ 118.833821] schedule+0xda/0x1b0 [ 118.834077] exit_to_user_mode_prepare+0x114/0x1a0 [ 118.834458] syscall_exit_to_user_mode+0x19/0x40 [ 118.834815] do_syscall_64+0x48/0x90 [ 118.835099] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 118.835492] RIP: 0033:0x7f61506acb19 [ 118.835776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 118.837141] RSP: 002b:00007f614dc22218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 118.837733] RAX: 0000000000000001 RBX: 00007f61507bff68 RCX: 00007f61506acb19 [ 118.838275] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f61507bff6c [ 118.838796] RBP: 00007f61507bff60 R08: 000000000000000e R09: 0000000000000000 [ 118.839346] R10: 0000000000000004 R11: 0000000000000246 R12: 00007f61507bff6c [ 118.839884] R13: 00007ffdc57e97af R14: 00007f614dc22300 R15: 0000000000022000 [ 118.840414] [ 118.840591] irq event stamp: 692 [ 118.840841] hardirqs last enabled at (691): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 118.841553] hardirqs last disabled at (692): [] __schedule+0x1225/0x2470 [ 118.842167] softirqs last enabled at (360): [] mac80211_hwsim_netlink_notify+0x253/0xa00 [ 118.842914] softirqs last disabled at (358): [] mac80211_hwsim_netlink_notify+0x140/0xa00 [ 118.843633] ---[ end trace 0000000000000000 ]--- [ 118.852655] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 118.865587] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 118.874326] syz-executor.5 (3959) used greatest stack depth: 23000 bytes left 13:55:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x7) 13:55:02 executing program 3: keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000180)=""/4076, 0xfec) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000001280)=""/70) 13:55:02 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) 13:55:02 executing program 4: syz_emit_ethernet(0xfffffdef, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "f2e2a6", 0x0, 0x0, 0x0, @private2, @remote, [], "52168a0f02b79fbf"}}}}}}}, 0x0) 13:55:02 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 13:55:02 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) 13:55:02 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0xa406]}}) 13:55:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x18292}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000480)=""/156, 0x9c}, {&(0x7f00000003c0)=""/41, 0x29}, {&(0x7f0000000540)=""/253, 0xfd}], 0x3, 0x7706170c, 0x4) [ 119.872152] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 13:55:02 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0xa406]}}) 13:55:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x18292}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000480)=""/156, 0x9c}, {&(0x7f00000003c0)=""/41, 0x29}, {&(0x7f0000000540)=""/253, 0xfd}], 0x3, 0x7706170c, 0x4) 13:55:02 executing program 4: syz_emit_ethernet(0xfffffdef, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "f2e2a6", 0x0, 0x0, 0x0, @private2, @remote, [], "52168a0f02b79fbf"}}}}}}}, 0x0) 13:55:02 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) 13:55:02 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 13:55:02 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0xa406]}}) [ 119.989731] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 13:55:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x7) 13:55:03 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 13:55:03 executing program 4: syz_emit_ethernet(0xfffffdef, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "f2e2a6", 0x0, 0x0, 0x0, @private2, @remote, [], "52168a0f02b79fbf"}}}}}}}, 0x0) 13:55:03 executing program 3: keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000180)=""/4076, 0xfec) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000001280)=""/70) 13:55:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x18292}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000480)=""/156, 0x9c}, {&(0x7f00000003c0)=""/41, 0x29}, {&(0x7f0000000540)=""/253, 0xfd}], 0x3, 0x7706170c, 0x4) 13:55:03 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) 13:55:03 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) 13:55:03 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) [ 120.901596] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 13:55:04 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f000000d480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x30}}], 0x1, 0x0) 13:55:04 executing program 7: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xffffff4c) 13:55:04 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 13:55:04 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x7) 13:55:04 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x4c, &(0x7f0000000040), 0x4) 13:55:04 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r0) socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894) 13:55:04 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) [ 121.770725] audit: type=1400 audit(1662990904.063:9): avc: denied { tracepoint } for pid=4020 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 13:55:04 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001b00)) [ 121.797802] hrtimer: interrupt took 27411 ns 13:55:04 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f000000d480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x30}}], 0x1, 0x0) 13:55:04 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 13:55:04 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x4c, &(0x7f0000000040), 0x4) 13:55:04 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000500000008"], 0x125) read(r1, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x40240, 0x0) close_range(r2, r2, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="01000100000018000000", @ANYRES32=r0, @ANYBLOB="03002300000000002e2f66696c653000"]) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f00000001c0), 0x4) openat$cgroup_type(r3, &(0x7f0000000200), 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x11) dup(0xffffffffffffffff) sendmsg$netlink(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a060bb866ba95c67d42331"]}, 0x24}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13:55:04 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f000000d480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x30}}], 0x1, 0x0) 13:55:04 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r0) socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894) 13:55:04 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f000000d480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x30}}], 0x1, 0x0) [ 122.075401] sg_write: data in/out 524252/251 bytes for SCSI command 0x0-- guessing data in; [ 122.075401] program syz-executor.0 not setting count and/or reply_len properly 13:55:04 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x4c, &(0x7f0000000040), 0x4) 13:55:04 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005280)=[{{&(0x7f0000001540)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000001d40)=[@dstopts_2292={{0x10, 0x29, 0x3b}}], 0x18}}], 0x1, 0x0) 13:55:04 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) 13:55:04 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r0) socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894) 13:55:04 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000500000008"], 0x125) read(r1, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x40240, 0x0) close_range(r2, r2, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="01000100000018000000", @ANYRES32=r0, @ANYBLOB="03002300000000002e2f66696c653000"]) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f00000001c0), 0x4) openat$cgroup_type(r3, &(0x7f0000000200), 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x11) dup(0xffffffffffffffff) sendmsg$netlink(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a060bb866ba95c67d42331"]}, 0x24}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13:55:04 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001b00)) 13:55:04 executing program 7: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xffffff4c) 13:55:04 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000500000008"], 0x125) read(r1, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x40240, 0x0) close_range(r2, r2, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="01000100000018000000", @ANYRES32=r0, @ANYBLOB="03002300000000002e2f66696c653000"]) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f00000001c0), 0x4) openat$cgroup_type(r3, &(0x7f0000000200), 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x11) dup(0xffffffffffffffff) sendmsg$netlink(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a060bb866ba95c67d42331"]}, 0x24}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13:55:05 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005280)=[{{&(0x7f0000001540)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000001d40)=[@dstopts_2292={{0x10, 0x29, 0x3b}}], 0x18}}], 0x1, 0x0) 13:55:05 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000500000008"], 0x125) read(r1, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x40240, 0x0) close_range(r2, r2, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="01000100000018000000", @ANYRES32=r0, @ANYBLOB="03002300000000002e2f66696c653000"]) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f00000001c0), 0x4) openat$cgroup_type(r3, &(0x7f0000000200), 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x11) dup(0xffffffffffffffff) sendmsg$netlink(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a060bb866ba95c67d42331"]}, 0x24}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 122.782613] sg_write: data in/out 524252/251 bytes for SCSI command 0x0-- guessing data in; [ 122.782613] program syz-executor.5 not setting count and/or reply_len properly 13:55:05 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005280)=[{{&(0x7f0000001540)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000001d40)=[@dstopts_2292={{0x10, 0x29, 0x3b}}], 0x18}}], 0x1, 0x0) [ 122.822346] sg_write: data in/out 524252/251 bytes for SCSI command 0x0-- guessing data in; [ 122.822346] program syz-executor.0 not setting count and/or reply_len properly 13:55:05 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001b00)) 13:55:05 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x4c, &(0x7f0000000040), 0x4) 13:55:05 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005280)=[{{&(0x7f0000001540)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000001d40)=[@dstopts_2292={{0x10, 0x29, 0x3b}}], 0x18}}], 0x1, 0x0) 13:55:05 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000500000008"], 0x125) read(r1, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x40240, 0x0) close_range(r2, r2, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="01000100000018000000", @ANYRES32=r0, @ANYBLOB="03002300000000002e2f66696c653000"]) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f00000001c0), 0x4) openat$cgroup_type(r3, &(0x7f0000000200), 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x11) dup(0xffffffffffffffff) sendmsg$netlink(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a060bb866ba95c67d42331"]}, 0x24}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13:55:05 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000500000008"], 0x125) read(r1, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x40240, 0x0) close_range(r2, r2, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="01000100000018000000", @ANYRES32=r0, @ANYBLOB="03002300000000002e2f66696c653000"]) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f00000001c0), 0x4) openat$cgroup_type(r3, &(0x7f0000000200), 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x11) dup(0xffffffffffffffff) sendmsg$netlink(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a060bb866ba95c67d42331"]}, 0x24}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13:55:05 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000500000008"], 0x125) read(r1, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x40240, 0x0) close_range(r2, r2, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="01000100000018000000", @ANYRES32=r0, @ANYBLOB="03002300000000002e2f66696c653000"]) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f00000001c0), 0x4) openat$cgroup_type(r3, &(0x7f0000000200), 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x11) dup(0xffffffffffffffff) sendmsg$netlink(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a060bb866ba95c67d42331"]}, 0x24}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 123.117060] sg_write: data in/out 524252/251 bytes for SCSI command 0x0-- guessing data in; [ 123.117060] program syz-executor.5 not setting count and/or reply_len properly 13:55:05 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000500000008"], 0x125) read(r1, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x40240, 0x0) close_range(r2, r2, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="01000100000018000000", @ANYRES32=r0, @ANYBLOB="03002300000000002e2f66696c653000"]) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f00000001c0), 0x4) openat$cgroup_type(r3, &(0x7f0000000200), 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x11) dup(0xffffffffffffffff) sendmsg$netlink(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a060bb866ba95c67d42331"]}, 0x24}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 123.148941] sg_write: data in/out 524252/251 bytes for SCSI command 0x0-- guessing data in; [ 123.148941] program syz-executor.0 not setting count and/or reply_len properly 13:55:05 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000500000008"], 0x125) read(r1, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x40240, 0x0) close_range(r2, r2, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="01000100000018000000", @ANYRES32=r0, @ANYBLOB="03002300000000002e2f66696c653000"]) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f00000001c0), 0x4) openat$cgroup_type(r3, &(0x7f0000000200), 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x11) dup(0xffffffffffffffff) sendmsg$netlink(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a060bb866ba95c67d42331"]}, 0x24}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13:55:05 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r0) socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894) 13:55:05 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000500000008"], 0x125) read(r1, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x40240, 0x0) close_range(r2, r2, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="01000100000018000000", @ANYRES32=r0, @ANYBLOB="03002300000000002e2f66696c653000"]) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f00000001c0), 0x4) openat$cgroup_type(r3, &(0x7f0000000200), 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x11) dup(0xffffffffffffffff) sendmsg$netlink(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a060bb866ba95c67d42331"]}, 0x24}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13:55:05 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000500000008"], 0x125) read(r1, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x40240, 0x0) close_range(r2, r2, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="01000100000018000000", @ANYRES32=r0, @ANYBLOB="03002300000000002e2f66696c653000"]) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f00000001c0), 0x4) openat$cgroup_type(r3, &(0x7f0000000200), 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x11) dup(0xffffffffffffffff) sendmsg$netlink(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a060bb866ba95c67d42331"]}, 0x24}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13:55:05 executing program 7: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xffffff4c) 13:55:05 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000500000008"], 0x125) read(r1, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x40240, 0x0) close_range(r2, r2, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="01000100000018000000", @ANYRES32=r0, @ANYBLOB="03002300000000002e2f66696c653000"]) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f00000001c0), 0x4) openat$cgroup_type(r3, &(0x7f0000000200), 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x11) dup(0xffffffffffffffff) sendmsg$netlink(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a060bb866ba95c67d42331"]}, 0x24}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13:55:05 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000500000008"], 0x125) read(r1, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x40240, 0x0) close_range(r2, r2, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="01000100000018000000", @ANYRES32=r0, @ANYBLOB="03002300000000002e2f66696c653000"]) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f00000001c0), 0x4) openat$cgroup_type(r3, &(0x7f0000000200), 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x11) dup(0xffffffffffffffff) sendmsg$netlink(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a060bb866ba95c67d42331"]}, 0x24}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13:55:05 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000500000008"], 0x125) read(r1, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x40240, 0x0) close_range(r2, r2, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="01000100000018000000", @ANYRES32=r0, @ANYBLOB="03002300000000002e2f66696c653000"]) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f00000001c0), 0x4) openat$cgroup_type(r3, &(0x7f0000000200), 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x11) dup(0xffffffffffffffff) sendmsg$netlink(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a060bb866ba95c67d42331"]}, 0x24}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13:55:05 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000500000008"], 0x125) read(r1, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x40240, 0x0) close_range(r2, r2, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="01000100000018000000", @ANYRES32=r0, @ANYBLOB="03002300000000002e2f66696c653000"]) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f00000001c0), 0x4) openat$cgroup_type(r3, &(0x7f0000000200), 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x11) dup(0xffffffffffffffff) sendmsg$netlink(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a060bb866ba95c67d42331"]}, 0x24}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 123.651363] sg_write: data in/out 524252/251 bytes for SCSI command 0x0-- guessing data in; [ 123.651363] program syz-executor.6 not setting count and/or reply_len properly [ 123.672345] sg_write: data in/out 524252/251 bytes for SCSI command 0x0-- guessing data in; [ 123.672345] program syz-executor.5 not setting count and/or reply_len properly [ 123.677556] sg_write: data in/out 524252/251 bytes for SCSI command 0x0-- guessing data in; [ 123.677556] program syz-executor.3 not setting count and/or reply_len properly [ 123.681006] sg_write: data in/out 524252/251 bytes for SCSI command 0x0-- guessing data in; [ 123.681006] program syz-executor.1 not setting count and/or reply_len properly 13:55:06 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001b00)) 13:55:06 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000500000008"], 0x125) read(r1, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x40240, 0x0) close_range(r2, r2, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="01000100000018000000", @ANYRES32=r0, @ANYBLOB="03002300000000002e2f66696c653000"]) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f00000001c0), 0x4) openat$cgroup_type(r3, &(0x7f0000000200), 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x11) dup(0xffffffffffffffff) sendmsg$netlink(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a060bb866ba95c67d42331"]}, 0x24}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13:55:06 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000500000008"], 0x125) read(r1, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x40240, 0x0) close_range(r2, r2, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="01000100000018000000", @ANYRES32=r0, @ANYBLOB="03002300000000002e2f66696c653000"]) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f00000001c0), 0x4) openat$cgroup_type(r3, &(0x7f0000000200), 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x11) dup(0xffffffffffffffff) sendmsg$netlink(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a060bb866ba95c67d42331"]}, 0x24}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13:55:06 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000500000008"], 0x125) read(r1, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x40240, 0x0) close_range(r2, r2, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="01000100000018000000", @ANYRES32=r0, @ANYBLOB="03002300000000002e2f66696c653000"]) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f00000001c0), 0x4) openat$cgroup_type(r3, &(0x7f0000000200), 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x11) dup(0xffffffffffffffff) sendmsg$netlink(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a060bb866ba95c67d42331"]}, 0x24}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13:55:06 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000500000008"], 0x125) read(r1, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x40240, 0x0) close_range(r2, r2, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="01000100000018000000", @ANYRES32=r0, @ANYBLOB="03002300000000002e2f66696c653000"]) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f00000001c0), 0x4) openat$cgroup_type(r3, &(0x7f0000000200), 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x11) dup(0xffffffffffffffff) sendmsg$netlink(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a060bb866ba95c67d42331"]}, 0x24}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13:55:06 executing program 7: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xffffff4c) 13:55:06 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000500000008"], 0x125) read(r1, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x40240, 0x0) close_range(r2, r2, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="01000100000018000000", @ANYRES32=r0, @ANYBLOB="03002300000000002e2f66696c653000"]) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f00000001c0), 0x4) openat$cgroup_type(r3, &(0x7f0000000200), 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x11) dup(0xffffffffffffffff) sendmsg$netlink(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a060bb866ba95c67d42331"]}, 0x24}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13:55:06 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000500000008"], 0x125) read(r1, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x40240, 0x0) close_range(r2, r2, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="01000100000018000000", @ANYRES32=r0, @ANYBLOB="03002300000000002e2f66696c653000"]) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f00000001c0), 0x4) openat$cgroup_type(r3, &(0x7f0000000200), 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x11) dup(0xffffffffffffffff) sendmsg$netlink(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a060bb866ba95c67d42331"]}, 0x24}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 124.571374] sg_write: data in/out 524252/251 bytes for SCSI command 0x0-- guessing data in; [ 124.571374] program syz-executor.5 not setting count and/or reply_len properly 13:55:07 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000500000008"], 0x125) read(r1, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x40240, 0x0) close_range(r2, r2, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="01000100000018000000", @ANYRES32=r0, @ANYBLOB="03002300000000002e2f66696c653000"]) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f00000001c0), 0x4) openat$cgroup_type(r3, &(0x7f0000000200), 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x11) dup(0xffffffffffffffff) sendmsg$netlink(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a060bb866ba95c67d42331"]}, 0x24}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13:55:07 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300), 0x0) 13:55:07 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000500000008"], 0x125) read(r1, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x40240, 0x0) close_range(r2, r2, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="01000100000018000000", @ANYRES32=r0, @ANYBLOB="03002300000000002e2f66696c653000"]) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f00000001c0), 0x4) openat$cgroup_type(r3, &(0x7f0000000200), 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x11) dup(0xffffffffffffffff) sendmsg$netlink(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a060bb866ba95c67d42331"]}, 0x24}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 124.740733] process 'syz-executor.1' launched './file0' with NULL argv: empty string added 13:55:07 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300), 0x0) 13:55:07 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000500000008"], 0x125) read(r1, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x40240, 0x0) close_range(r2, r2, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="01000100000018000000", @ANYRES32=r0, @ANYBLOB="03002300000000002e2f66696c653000"]) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f00000001c0), 0x4) openat$cgroup_type(r3, &(0x7f0000000200), 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x11) dup(0xffffffffffffffff) sendmsg$netlink(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a060bb866ba95c67d42331"]}, 0x24}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13:55:07 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300), 0x0) 13:55:07 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300), 0x0) 13:55:07 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000100)=""/77, &(0x7f0000000080)=0x4d) 13:55:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xda936000) 13:55:07 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)={0x14, 0x22, 0x101, 0x0, 0x0, "", [@nested={0x2}]}, 0x14}], 0x1}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/179, 0xb3}], 0x1) 13:55:07 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000100)=""/77, &(0x7f0000000080)=0x4d) 13:55:07 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000500000008"], 0x125) read(r1, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x40240, 0x0) close_range(r2, r2, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="01000100000018000000", @ANYRES32=r0, @ANYBLOB="03002300000000002e2f66696c653000"]) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f00000001c0), 0x4) openat$cgroup_type(r3, &(0x7f0000000200), 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x11) dup(0xffffffffffffffff) sendmsg$netlink(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a060bb866ba95c67d42331"]}, 0x24}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13:55:07 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000500000008"], 0x125) read(r1, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x40240, 0x0) close_range(r2, r2, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="01000100000018000000", @ANYRES32=r0, @ANYBLOB="03002300000000002e2f66696c653000"]) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f00000001c0), 0x4) openat$cgroup_type(r3, &(0x7f0000000200), 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x11) dup(0xffffffffffffffff) sendmsg$netlink(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a060bb866ba95c67d42331"]}, 0x24}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13:55:07 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000500000008"], 0x125) read(r1, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x40240, 0x0) close_range(r2, r2, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="01000100000018000000", @ANYRES32=r0, @ANYBLOB="03002300000000002e2f66696c653000"]) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f00000001c0), 0x4) openat$cgroup_type(r3, &(0x7f0000000200), 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x11) dup(0xffffffffffffffff) sendmsg$netlink(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a060bb866ba95c67d42331"]}, 0x24}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13:55:07 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 13:55:07 executing program 6: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f0000000000)={'sit0\x00'}) 13:55:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xda936000) 13:55:08 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000100)=""/77, &(0x7f0000000080)=0x4d) 13:55:08 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 13:55:08 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 13:55:08 executing program 6: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f0000000000)={'sit0\x00'}) 13:55:08 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)={0x14, 0x22, 0x101, 0x0, 0x0, "", [@nested={0x2}]}, 0x14}], 0x1}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/179, 0xb3}], 0x1) 13:55:08 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000500000008"], 0x125) read(r1, 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x40240, 0x0) close_range(r2, r2, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="01000100000018000000", @ANYRES32=r0, @ANYBLOB="03002300000000002e2f66696c653000"]) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nr0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f00000001c0), 0x4) openat$cgroup_type(r3, &(0x7f0000000200), 0x2, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x11) dup(0xffffffffffffffff) sendmsg$netlink(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a060bb866ba95c67d42331"]}, 0x24}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13:55:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)={0x14, 0x22, 0x101, 0x0, 0x0, "", [@nested={0x2}]}, 0x14}], 0x1}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/179, 0xb3}], 0x1) 13:55:08 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000100)=""/77, &(0x7f0000000080)=0x4d) 13:55:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)={0x14, 0x22, 0x101, 0x0, 0x0, "", [@nested={0x2}]}, 0x14}], 0x1}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/179, 0xb3}], 0x1) 13:55:08 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)={0x14, 0x22, 0x101, 0x0, 0x0, "", [@nested={0x2}]}, 0x14}], 0x1}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/179, 0xb3}], 0x1) 13:55:08 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 13:55:08 executing program 6: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f0000000000)={'sit0\x00'}) 13:55:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xda936000) 13:55:08 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 13:55:08 executing program 6: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f0000000000)={'sit0\x00'}) 13:55:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)={0x14, 0x22, 0x101, 0x0, 0x0, "", [@nested={0x2}]}, 0x14}], 0x1}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/179, 0xb3}], 0x1) 13:55:08 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)={0x14, 0x22, 0x101, 0x0, 0x0, "", [@nested={0x2}]}, 0x14}], 0x1}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/179, 0xb3}], 0x1) 13:55:08 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 13:55:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xda936000) 13:55:08 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 13:55:08 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 13:55:08 executing program 2: getgroups(0x2, &(0x7f0000000140)=[0x0, 0xee00]) setresgid(0x0, r0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) 13:55:08 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8954, &(0x7f0000000080)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @link_local}, 0x0, {0x2, 0x0, @empty}, 'lo\x00'}) 13:55:08 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) [ 126.450834] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) 13:55:08 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f00000000c0)=0x7, 0x4) 13:55:08 executing program 2: getgroups(0x2, &(0x7f0000000140)=[0x0, 0xee00]) setresgid(0x0, r0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) 13:55:08 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f00000000c0)=0x7, 0x4) 13:55:08 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8954, &(0x7f0000000080)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @link_local}, 0x0, {0x2, 0x0, @empty}, 'lo\x00'}) 13:55:08 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) dup2(r1, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 13:55:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x3ff, 0x4) sendmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 13:55:08 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x137, &(0x7f00000003c0), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 13:55:08 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000040), 0x14) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f00000000c0), 0x45d, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x202100, 0x0) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000100)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)="c338013510160ad1c1e4b47f24f8a0edc6b5a09fe890c75b405bba0b1949df9f282014b85b1a82e99d3fdf7206655f128cf62a5bb39f2f3eef100f110e58fb7903a53162e5e2a87298a18957ff119c7ce530125c2a8b1c54a21a3e", 0x5b}, {&(0x7f0000000300)="b4319b3c8bc2f8b08a7bb7507ad55c171ec0400864154bab5cf1f89f7fd2b1441e4962c66c563bfa7582ce6dd747563ea4fe578e7ab7de4af0c2c6893cdfb43a8520f679032e783389e861fe27572a9c561ae1d9f2c45b23a6eb32fab37fd2bc85eb336021a97496c45e6cc924c355b9d97b3e215950f02490212ac3f27f0d56aa2bd43025bf28feb35b750664e444135226bbcf1f2048c855c37f9fcbb4f5070744457cfba741d46d6f4e24ce2f3303435cd1c5f2fdc42f7f8ae422bb688ff0bfcf2bf5331bb48ff69681dc89e9ef77451d3155fc7e6fcfca", 0xd9}, {0xfffffffffffffffe}], 0x3, &(0x7f0000000400)=[@ip_retopts={{0x4c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0x3f, 0x3, 0x5, [{@remote, 0x8}, {@empty, 0x3}, {@multicast1, 0x4}, {@multicast2, 0xa87}, {@local, 0x6}]}, @timestamp_addr={0x44, 0xc, 0x9d, 0x1, 0xd, [{@local}]}, @end]}}}], 0x50}, 0x4000) 13:55:08 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f00000000c0)=0x7, 0x4) 13:55:08 executing program 2: getgroups(0x2, &(0x7f0000000140)=[0x0, 0xee00]) setresgid(0x0, r0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) 13:55:08 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8954, &(0x7f0000000080)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @link_local}, 0x0, {0x2, 0x0, @empty}, 'lo\x00'}) 13:55:08 executing program 1: inotify_init() 13:55:08 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f00000000c0)=0x7, 0x4) 13:55:08 executing program 1: inotify_init() 13:55:08 executing program 2: getgroups(0x2, &(0x7f0000000140)=[0x0, 0xee00]) setresgid(0x0, r0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) 13:55:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x3ff, 0x4) sendmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 13:55:08 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8954, &(0x7f0000000080)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @link_local}, 0x0, {0x2, 0x0, @empty}, 'lo\x00'}) 13:55:08 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x137, &(0x7f00000003c0), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 13:55:09 executing program 1: inotify_init() 13:55:09 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x137, &(0x7f00000003c0), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 13:55:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x3ff, 0x4) sendmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 13:55:09 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x137, &(0x7f00000003c0), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 13:55:09 executing program 1: inotify_init() 13:55:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x3ff, 0x4) sendmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 13:55:09 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x3ff, 0x4) sendmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 13:55:09 executing program 0: r0 = syz_io_uring_setup(0x4eff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0xc811}, 0x94) io_uring_enter(r0, 0x6c64, 0x0, 0x0, 0x0, 0x0) 13:55:09 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000040), 0x14) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f00000000c0), 0x45d, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x202100, 0x0) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000100)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)="c338013510160ad1c1e4b47f24f8a0edc6b5a09fe890c75b405bba0b1949df9f282014b85b1a82e99d3fdf7206655f128cf62a5bb39f2f3eef100f110e58fb7903a53162e5e2a87298a18957ff119c7ce530125c2a8b1c54a21a3e", 0x5b}, {&(0x7f0000000300)="b4319b3c8bc2f8b08a7bb7507ad55c171ec0400864154bab5cf1f89f7fd2b1441e4962c66c563bfa7582ce6dd747563ea4fe578e7ab7de4af0c2c6893cdfb43a8520f679032e783389e861fe27572a9c561ae1d9f2c45b23a6eb32fab37fd2bc85eb336021a97496c45e6cc924c355b9d97b3e215950f02490212ac3f27f0d56aa2bd43025bf28feb35b750664e444135226bbcf1f2048c855c37f9fcbb4f5070744457cfba741d46d6f4e24ce2f3303435cd1c5f2fdc42f7f8ae422bb688ff0bfcf2bf5331bb48ff69681dc89e9ef77451d3155fc7e6fcfca", 0xd9}, {0xfffffffffffffffe}], 0x3, &(0x7f0000000400)=[@ip_retopts={{0x4c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0x3f, 0x3, 0x5, [{@remote, 0x8}, {@empty, 0x3}, {@multicast1, 0x4}, {@multicast2, 0xa87}, {@local, 0x6}]}, @timestamp_addr={0x44, 0xc, 0x9d, 0x1, 0xd, [{@local}]}, @end]}}}], 0x50}, 0x4000) 13:55:09 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x137, &(0x7f00000003c0), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 13:55:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x3ff, 0x4) sendmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 13:55:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x3ff, 0x4) sendmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 13:55:09 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x3ff, 0x4) sendmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 13:55:09 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r2, r2, 0x0, 0x100000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) readv(r1, &(0x7f0000000ac0)=[{&(0x7f0000000340)=""/3, 0x3}, {&(0x7f0000000380)=""/75, 0x4b}, {&(0x7f00000007c0)=""/253, 0xfd}, {&(0x7f00000006c0)=""/84, 0x54}, {&(0x7f00000008c0)=""/126, 0x7e}, {&(0x7f0000000940)=""/113, 0x71}, {&(0x7f0000000b80)=""/20, 0x14}, {&(0x7f0000000bc0)=""/171, 0xab}, {&(0x7f0000000740)=""/26, 0x1a}, {&(0x7f0000000a80)=""/60, 0x3c}], 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x1, 0x1, 0x0, 'queue1\x00', 0x1000}) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000240)=0x1) r3 = epoll_create1(0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x109042, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000000)="1c", 0xf}]) write$sndseq(r4, &(0x7f0000000400)=[{0x81, 0x1f, 0x2, 0x40, @time={0x40, 0xfffffffb}, {0x1a, 0xff}, {0x3f, 0x1f}, @connect={{0x2, 0x7f}, {0x7c, 0x1f}}}, {0xf8, 0x6, 0x3, 0x3, @tick=0x6, {0x69, 0x1}, {0x9, 0x3}, @raw8={"e36e2d888f0ecd381042c169"}}], 0x38) sendfile(r3, r0, &(0x7f0000000300)=0x8c9e, 0x10001) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x7f) 13:55:09 executing program 0: r0 = syz_io_uring_setup(0x4eff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0xc811}, 0x94) io_uring_enter(r0, 0x6c64, 0x0, 0x0, 0x0, 0x0) 13:55:09 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x137, &(0x7f00000003c0), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 13:55:10 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x137, &(0x7f00000003c0), &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 13:55:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x3ff, 0x4) sendmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 13:55:10 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x945401, 0x0) 13:55:10 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x3ff, 0x4) sendmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 13:55:10 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x945401, 0x0) 13:55:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000003fc0)={0x28, 0x65, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0xffffffff}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x28}], 0x1}, 0x0) [ 127.878148] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 13:55:10 executing program 0: r0 = syz_io_uring_setup(0x4eff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0xc811}, 0x94) io_uring_enter(r0, 0x6c64, 0x0, 0x0, 0x0, 0x0) 13:55:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000003fc0)={0x28, 0x65, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0xffffffff}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x28}], 0x1}, 0x0) [ 128.397237] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 13:55:10 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r2, r2, 0x0, 0x100000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) readv(r1, &(0x7f0000000ac0)=[{&(0x7f0000000340)=""/3, 0x3}, {&(0x7f0000000380)=""/75, 0x4b}, {&(0x7f00000007c0)=""/253, 0xfd}, {&(0x7f00000006c0)=""/84, 0x54}, {&(0x7f00000008c0)=""/126, 0x7e}, {&(0x7f0000000940)=""/113, 0x71}, {&(0x7f0000000b80)=""/20, 0x14}, {&(0x7f0000000bc0)=""/171, 0xab}, {&(0x7f0000000740)=""/26, 0x1a}, {&(0x7f0000000a80)=""/60, 0x3c}], 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x1, 0x1, 0x0, 'queue1\x00', 0x1000}) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000240)=0x1) r3 = epoll_create1(0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x109042, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000000)="1c", 0xf}]) write$sndseq(r4, &(0x7f0000000400)=[{0x81, 0x1f, 0x2, 0x40, @time={0x40, 0xfffffffb}, {0x1a, 0xff}, {0x3f, 0x1f}, @connect={{0x2, 0x7f}, {0x7c, 0x1f}}}, {0xf8, 0x6, 0x3, 0x3, @tick=0x6, {0x69, 0x1}, {0x9, 0x3}, @raw8={"e36e2d888f0ecd381042c169"}}], 0x38) sendfile(r3, r0, &(0x7f0000000300)=0x8c9e, 0x10001) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x7f) 13:55:10 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000040), 0x14) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f00000000c0), 0x45d, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x202100, 0x0) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000100)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)="c338013510160ad1c1e4b47f24f8a0edc6b5a09fe890c75b405bba0b1949df9f282014b85b1a82e99d3fdf7206655f128cf62a5bb39f2f3eef100f110e58fb7903a53162e5e2a87298a18957ff119c7ce530125c2a8b1c54a21a3e", 0x5b}, {&(0x7f0000000300)="b4319b3c8bc2f8b08a7bb7507ad55c171ec0400864154bab5cf1f89f7fd2b1441e4962c66c563bfa7582ce6dd747563ea4fe578e7ab7de4af0c2c6893cdfb43a8520f679032e783389e861fe27572a9c561ae1d9f2c45b23a6eb32fab37fd2bc85eb336021a97496c45e6cc924c355b9d97b3e215950f02490212ac3f27f0d56aa2bd43025bf28feb35b750664e444135226bbcf1f2048c855c37f9fcbb4f5070744457cfba741d46d6f4e24ce2f3303435cd1c5f2fdc42f7f8ae422bb688ff0bfcf2bf5331bb48ff69681dc89e9ef77451d3155fc7e6fcfca", 0xd9}, {0xfffffffffffffffe}], 0x3, &(0x7f0000000400)=[@ip_retopts={{0x4c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0x3f, 0x3, 0x5, [{@remote, 0x8}, {@empty, 0x3}, {@multicast1, 0x4}, {@multicast2, 0xa87}, {@local, 0x6}]}, @timestamp_addr={0x44, 0xc, 0x9d, 0x1, 0xd, [{@local}]}, @end]}}}], 0x50}, 0x4000) 13:55:10 executing program 0: r0 = syz_io_uring_setup(0x4eff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0xc811}, 0x94) io_uring_enter(r0, 0x6c64, 0x0, 0x0, 0x0, 0x0) 13:55:10 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x945401, 0x0) 13:55:10 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000140)="8f857635", 0x4}], 0x1}}], 0x1, 0x0) recvmsg(r0, &(0x7f00000011c0)={0x0, 0x0, 0x0}, 0x0) 13:55:10 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r4, 0x0) lstat(&(0x7f0000000580)='./file1/file0\x00', &(0x7f00000005c0)) syz_mount_image$nfs(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0xfffffffffffffff7, 0x1, &(0x7f0000000540)=[{&(0x7f0000000480)="c4bf1bb6858b67daf940c255057af45d483c40ff11bf7a01c3d421163a375c163cf59c84d790362d764405b8dfe9229e85f48c15a2de2a9ff465461818451f07805a64a3f0b64e4b9ba13b93d990dd1f1a6ad4441b7e8e64ab3448aa4a89bcc2eb6a0ec9211ab9e4a031747a80b9862413068a52f87e29caa6dfe43b5f77e4458e67cd767b9a20f37aaa337fec3f4377dd70fa65a8ef4b39370367c598f3592d7248ee07eaf270dcc91a2e17", 0xac, 0x3}], 0x0, &(0x7f0000000640)={[{'//'}], [{@dont_measure}, {@euid_gt={'euid>', r3}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@euid_lt={'euid<', r4}}, {@euid_gt}]}) r5 = openat$cgroup_subtree(r1, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r2, 0xc0403d08, &(0x7f00000003c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="0000080015001d012a2fb66e6665312f66696c003000"]) syz_open_dev$tty20(0xc, 0x4, 0x1) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7ffffffff000}]) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') fcntl$dupfd(r2, 0x0, r0) 13:55:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000003fc0)={0x28, 0x65, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0xffffffff}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x28}], 0x1}, 0x0) 13:55:10 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setuid(0x0) [ 128.477630] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 13:55:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000003fc0)={0x28, 0x65, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0xffffffff}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x28}], 0x1}, 0x0) [ 128.562458] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 128.589442] loop3: detected capacity change from 0 to 264192 [ 128.594816] nfs: Unknown parameter '//' VM DIAGNOSIS: 13:55:01 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff822b1e41 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff88803f4b7678 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=ffffffff8763faa0 R14=ffffffff8763faf0 R15=ffffffff8763fd48 RIP=ffffffff822b1e99 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f614dc22700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2e522000 CR3=000000001b880000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 ffffffffffffffff ff00000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM03=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88803dca2a00 RCX=0000000000000000 RDX=ffff88801b615040 RSI=ffffffff840cf440 RDI=ffff88803f44f820 RBP=0000000000000003 RSP=ffff88803f44f6d0 R8 =0000000000000005 R9 =0000000000000003 R10=0000000000000003 R11=0000000000000001 R12=ffff88803dca2a08 R13=0000000000000003 R14=ffff88803f44f7f8 R15=dffffc0000000000 RIP=ffffffff81461777 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7506beb1f0 CR3=000000003e208000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 6461657268747062 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00302e6f732e6461 657268747062696c YMM03=0000000000000000 0000000000000000 2f756e672d78756e 696c2d34365f3638 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000