Warning: Permanently added '[localhost]:39579' (ECDSA) to the list of known hosts. 2022/09/15 11:49:43 fuzzer started 2022/09/15 11:49:43 dialing manager at localhost:36559 syzkaller login: [ 44.502117] cgroup: Unknown subsys name 'net' [ 44.652073] cgroup: Unknown subsys name 'rlimit' 2022/09/15 11:49:59 syscalls: 2215 2022/09/15 11:49:59 code coverage: enabled 2022/09/15 11:49:59 comparison tracing: enabled 2022/09/15 11:49:59 extra coverage: enabled 2022/09/15 11:49:59 setuid sandbox: enabled 2022/09/15 11:49:59 namespace sandbox: enabled 2022/09/15 11:49:59 Android sandbox: enabled 2022/09/15 11:49:59 fault injection: enabled 2022/09/15 11:49:59 leak checking: enabled 2022/09/15 11:49:59 net packet injection: enabled 2022/09/15 11:49:59 net device setup: enabled 2022/09/15 11:49:59 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/15 11:49:59 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/15 11:49:59 USB emulation: enabled 2022/09/15 11:49:59 hci packet injection: enabled 2022/09/15 11:49:59 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220915) 2022/09/15 11:49:59 802.15.4 emulation: enabled 2022/09/15 11:49:59 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/15 11:49:59 fetching corpus: 50, signal 34387/37584 (executing program) 2022/09/15 11:50:00 fetching corpus: 100, signal 48455/52683 (executing program) 2022/09/15 11:50:00 fetching corpus: 150, signal 54378/59751 (executing program) 2022/09/15 11:50:00 fetching corpus: 200, signal 61835/68126 (executing program) 2022/09/15 11:50:00 fetching corpus: 250, signal 69063/76079 (executing program) 2022/09/15 11:50:00 fetching corpus: 300, signal 73355/81155 (executing program) 2022/09/15 11:50:00 fetching corpus: 350, signal 78358/86835 (executing program) 2022/09/15 11:50:01 fetching corpus: 400, signal 81616/90828 (executing program) 2022/09/15 11:50:01 fetching corpus: 450, signal 87413/96957 (executing program) 2022/09/15 11:50:01 fetching corpus: 500, signal 91944/101875 (executing program) 2022/09/15 11:50:01 fetching corpus: 550, signal 96569/106756 (executing program) 2022/09/15 11:50:01 fetching corpus: 600, signal 98869/109592 (executing program) 2022/09/15 11:50:02 fetching corpus: 650, signal 103266/114146 (executing program) 2022/09/15 11:50:02 fetching corpus: 700, signal 105863/117058 (executing program) 2022/09/15 11:50:02 fetching corpus: 750, signal 108197/119671 (executing program) 2022/09/15 11:50:02 fetching corpus: 800, signal 110661/122412 (executing program) 2022/09/15 11:50:02 fetching corpus: 850, signal 112755/124760 (executing program) 2022/09/15 11:50:02 fetching corpus: 900, signal 114343/126633 (executing program) 2022/09/15 11:50:02 fetching corpus: 950, signal 117061/129342 (executing program) 2022/09/15 11:50:03 fetching corpus: 1000, signal 119129/131607 (executing program) 2022/09/15 11:50:03 fetching corpus: 1050, signal 121822/134161 (executing program) 2022/09/15 11:50:03 fetching corpus: 1100, signal 123375/135860 (executing program) 2022/09/15 11:50:03 fetching corpus: 1150, signal 125656/138105 (executing program) 2022/09/15 11:50:03 fetching corpus: 1200, signal 128301/140592 (executing program) 2022/09/15 11:50:03 fetching corpus: 1250, signal 130026/142343 (executing program) 2022/09/15 11:50:04 fetching corpus: 1299, signal 132213/144612 (executing program) 2022/09/15 11:50:04 fetching corpus: 1348, signal 134219/146417 (executing program) 2022/09/15 11:50:04 fetching corpus: 1397, signal 136142/148116 (executing program) 2022/09/15 11:50:04 fetching corpus: 1446, signal 138666/150141 (executing program) 2022/09/15 11:50:04 fetching corpus: 1496, signal 140395/151667 (executing program) 2022/09/15 11:50:04 fetching corpus: 1545, signal 141623/152959 (executing program) 2022/09/15 11:50:04 fetching corpus: 1595, signal 143081/154251 (executing program) 2022/09/15 11:50:05 fetching corpus: 1645, signal 144355/155350 (executing program) 2022/09/15 11:50:05 fetching corpus: 1695, signal 145540/156338 (executing program) 2022/09/15 11:50:05 fetching corpus: 1745, signal 146737/157340 (executing program) 2022/09/15 11:50:05 fetching corpus: 1794, signal 148891/158817 (executing program) 2022/09/15 11:50:05 fetching corpus: 1843, signal 150538/160039 (executing program) 2022/09/15 11:50:05 fetching corpus: 1893, signal 151857/161084 (executing program) 2022/09/15 11:50:05 fetching corpus: 1943, signal 152799/161896 (executing program) 2022/09/15 11:50:06 fetching corpus: 1993, signal 153485/162517 (executing program) 2022/09/15 11:50:06 fetching corpus: 2043, signal 155762/163885 (executing program) 2022/09/15 11:50:06 fetching corpus: 2093, signal 156925/164588 (executing program) 2022/09/15 11:50:06 fetching corpus: 2143, signal 158474/165505 (executing program) 2022/09/15 11:50:06 fetching corpus: 2193, signal 159598/166202 (executing program) 2022/09/15 11:50:06 fetching corpus: 2243, signal 160386/166743 (executing program) 2022/09/15 11:50:06 fetching corpus: 2293, signal 161695/167487 (executing program) 2022/09/15 11:50:06 fetching corpus: 2343, signal 162490/168050 (executing program) 2022/09/15 11:50:07 fetching corpus: 2393, signal 163364/168521 (executing program) 2022/09/15 11:50:07 fetching corpus: 2443, signal 163984/168982 (executing program) 2022/09/15 11:50:07 fetching corpus: 2493, signal 165261/169636 (executing program) 2022/09/15 11:50:07 fetching corpus: 2543, signal 166066/170043 (executing program) 2022/09/15 11:50:07 fetching corpus: 2572, signal 166666/170393 (executing program) 2022/09/15 11:50:07 fetching corpus: 2572, signal 166666/170464 (executing program) 2022/09/15 11:50:07 fetching corpus: 2572, signal 166666/170532 (executing program) 2022/09/15 11:50:07 fetching corpus: 2572, signal 166666/170596 (executing program) 2022/09/15 11:50:07 fetching corpus: 2572, signal 166666/170657 (executing program) 2022/09/15 11:50:07 fetching corpus: 2573, signal 166667/170729 (executing program) 2022/09/15 11:50:07 fetching corpus: 2573, signal 166667/170813 (executing program) 2022/09/15 11:50:07 fetching corpus: 2573, signal 166667/170889 (executing program) 2022/09/15 11:50:07 fetching corpus: 2573, signal 166667/170955 (executing program) 2022/09/15 11:50:07 fetching corpus: 2573, signal 166667/171035 (executing program) 2022/09/15 11:50:07 fetching corpus: 2573, signal 166667/171098 (executing program) 2022/09/15 11:50:07 fetching corpus: 2573, signal 166667/171167 (executing program) 2022/09/15 11:50:07 fetching corpus: 2573, signal 166667/171235 (executing program) 2022/09/15 11:50:07 fetching corpus: 2573, signal 166667/171318 (executing program) 2022/09/15 11:50:07 fetching corpus: 2573, signal 166667/171386 (executing program) 2022/09/15 11:50:07 fetching corpus: 2573, signal 166667/171459 (executing program) 2022/09/15 11:50:07 fetching corpus: 2573, signal 166667/171520 (executing program) 2022/09/15 11:50:07 fetching corpus: 2573, signal 166667/171572 (executing program) 2022/09/15 11:50:07 fetching corpus: 2574, signal 166723/171653 (executing program) 2022/09/15 11:50:07 fetching corpus: 2574, signal 166723/171730 (executing program) 2022/09/15 11:50:07 fetching corpus: 2574, signal 166723/171795 (executing program) 2022/09/15 11:50:07 fetching corpus: 2574, signal 166723/171876 (executing program) 2022/09/15 11:50:07 fetching corpus: 2574, signal 166723/171933 (executing program) 2022/09/15 11:50:07 fetching corpus: 2575, signal 166737/172016 (executing program) 2022/09/15 11:50:07 fetching corpus: 2575, signal 166737/172084 (executing program) 2022/09/15 11:50:07 fetching corpus: 2575, signal 166737/172168 (executing program) 2022/09/15 11:50:07 fetching corpus: 2575, signal 166737/172245 (executing program) 2022/09/15 11:50:07 fetching corpus: 2575, signal 166737/172322 (executing program) 2022/09/15 11:50:07 fetching corpus: 2575, signal 166737/172397 (executing program) 2022/09/15 11:50:07 fetching corpus: 2575, signal 166737/172471 (executing program) 2022/09/15 11:50:07 fetching corpus: 2575, signal 166737/172511 (executing program) 2022/09/15 11:50:07 fetching corpus: 2575, signal 166737/172511 (executing program) 2022/09/15 11:50:10 starting 8 fuzzer processes 11:50:10 executing program 0: prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 11:50:10 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000200), &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)) mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x200080}, 0x20) 11:50:10 executing program 2: r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000006, 0x11, r0, 0x0) read(r0, &(0x7f0000000000)=""/48, 0x30) 11:50:10 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r1, 0x0) pkey_mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 11:50:10 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x1c3c00, 0x0) ioctl$CDROM_DISC_STATUS(r0, 0x125f) [ 70.988968] audit: type=1400 audit(1663242610.813:6): avc: denied { execmem } for pid=286 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:50:10 executing program 7: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x45, &(0x7f00000000c0), 0x4) 11:50:10 executing program 5: syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@random="d730e83d9efc", @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x14, 0x3c, 0x0, @empty, @local, {[@srh={0x0, 0x0, 0x4, 0x0, 0x0, 0x40}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 11:50:10 executing program 6: syz_emit_ethernet(0x46, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @remote, {[@timestamp_addr={0x44, 0x1c, 0xf, 0x1, 0x0, [{@local}, {@private}, {@private}]}]}}, {0x0, 0x0, 0x8}}}}}, 0x0) [ 72.340974] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.343767] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.345897] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.347816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.348881] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.350036] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.351597] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.354995] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.384479] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.386211] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.387702] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.389464] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.390749] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.392555] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 72.393980] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.394974] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.396804] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 72.399363] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 72.401050] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.403397] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 72.403625] Bluetooth: hci2: HCI_REQ-0x0c1a [ 72.405068] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.407146] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 72.409283] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 72.413187] Bluetooth: hci4: HCI_REQ-0x0c1a [ 72.414584] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 72.428066] Bluetooth: hci7: HCI_REQ-0x0c1a [ 72.446382] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.446491] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.449862] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.449958] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.452810] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.454410] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.459370] Bluetooth: hci1: HCI_REQ-0x0c1a [ 72.462759] Bluetooth: hci0: HCI_REQ-0x0c1a [ 72.479036] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.480565] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 72.483035] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 72.484397] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 72.485492] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.487005] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 72.488614] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 72.491041] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 72.492948] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 72.493610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.494339] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 72.496713] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 72.499588] Bluetooth: hci6: HCI_REQ-0x0c1a [ 72.508051] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.511775] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 72.514120] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.514445] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 72.516632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 72.524436] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.533147] Bluetooth: hci3: HCI_REQ-0x0c1a [ 72.536334] Bluetooth: hci5: HCI_REQ-0x0c1a [ 74.467869] Bluetooth: hci7: command 0x0409 tx timeout [ 74.467877] Bluetooth: hci4: command 0x0409 tx timeout [ 74.468437] Bluetooth: hci2: command 0x0409 tx timeout [ 74.531358] Bluetooth: hci6: command 0x0409 tx timeout [ 74.531864] Bluetooth: hci0: command 0x0409 tx timeout [ 74.532353] Bluetooth: hci1: command 0x0409 tx timeout [ 74.595273] Bluetooth: hci5: command 0x0409 tx timeout [ 74.595321] Bluetooth: hci3: command 0x0409 tx timeout [ 76.515303] Bluetooth: hci2: command 0x041b tx timeout [ 76.515732] Bluetooth: hci4: command 0x041b tx timeout [ 76.516091] Bluetooth: hci7: command 0x041b tx timeout [ 76.579323] Bluetooth: hci1: command 0x041b tx timeout [ 76.579762] Bluetooth: hci0: command 0x041b tx timeout [ 76.580161] Bluetooth: hci6: command 0x041b tx timeout [ 76.643278] Bluetooth: hci5: command 0x041b tx timeout [ 76.643299] Bluetooth: hci3: command 0x041b tx timeout [ 78.563423] Bluetooth: hci7: command 0x040f tx timeout [ 78.564173] Bluetooth: hci4: command 0x040f tx timeout [ 78.567134] Bluetooth: hci2: command 0x040f tx timeout [ 78.627403] Bluetooth: hci6: command 0x040f tx timeout [ 78.628102] Bluetooth: hci0: command 0x040f tx timeout [ 78.628985] Bluetooth: hci1: command 0x040f tx timeout [ 78.691307] Bluetooth: hci3: command 0x040f tx timeout [ 78.691436] Bluetooth: hci5: command 0x040f tx timeout [ 80.611393] Bluetooth: hci2: command 0x0419 tx timeout [ 80.612284] Bluetooth: hci4: command 0x0419 tx timeout [ 80.613035] Bluetooth: hci7: command 0x0419 tx timeout [ 80.675733] Bluetooth: hci1: command 0x0419 tx timeout [ 80.676682] Bluetooth: hci0: command 0x0419 tx timeout [ 80.677603] Bluetooth: hci6: command 0x0419 tx timeout [ 80.739407] Bluetooth: hci5: command 0x0419 tx timeout [ 80.740434] Bluetooth: hci3: command 0x0419 tx timeout [ 128.377053] audit: type=1400 audit(1663242668.201:7): avc: denied { open } for pid=3880 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 128.378690] audit: type=1400 audit(1663242668.201:8): avc: denied { kernel } for pid=3880 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 128.408905] ------------[ cut here ]------------ [ 128.408946] [ 128.408952] ====================================================== [ 128.408960] WARNING: possible circular locking dependency detected [ 128.408968] 6.0.0-rc5-next-20220915 #1 Not tainted [ 128.408982] ------------------------------------------------------ [ 128.408988] syz-executor.2/3881 is trying to acquire lock: [ 128.409002] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 128.409074] [ 128.409074] but task is already holding lock: [ 128.409080] ffff88800ff19c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 128.409139] [ 128.409139] which lock already depends on the new lock. [ 128.409139] [ 128.409146] [ 128.409146] the existing dependency chain (in reverse order) is: [ 128.409152] [ 128.409152] -> #3 (&ctx->lock){....}-{2:2}: [ 128.409182] _raw_spin_lock+0x2a/0x40 [ 128.409219] __perf_event_task_sched_out+0x53b/0x18d0 [ 128.409246] __schedule+0xedd/0x2470 [ 128.409269] preempt_schedule_common+0x45/0xc0 [ 128.409295] __cond_resched+0x17/0x30 [ 128.409318] __mutex_lock+0xa3/0x14d0 [ 128.409344] __do_sys_perf_event_open+0x1eec/0x32c0 [ 128.409372] do_syscall_64+0x3b/0x90 [ 128.409404] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.409443] [ 128.409443] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 128.409473] _raw_spin_lock_nested+0x30/0x40 [ 128.409508] raw_spin_rq_lock_nested+0x1e/0x30 [ 128.409535] task_fork_fair+0x63/0x4d0 [ 128.409573] sched_cgroup_fork+0x3d0/0x540 [ 128.409605] copy_process+0x4183/0x6e20 [ 128.409628] kernel_clone+0xe7/0x890 [ 128.409651] user_mode_thread+0xad/0xf0 [ 128.409674] rest_init+0x24/0x250 [ 128.409712] arch_call_rest_init+0xf/0x14 [ 128.409737] start_kernel+0x4c1/0x4e6 [ 128.409759] secondary_startup_64_no_verify+0xe0/0xeb [ 128.409790] [ 128.409790] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 128.409819] _raw_spin_lock_irqsave+0x39/0x60 [ 128.409854] try_to_wake_up+0xab/0x1920 [ 128.409884] up+0x75/0xb0 [ 128.409909] __up_console_sem+0x6e/0x80 [ 128.409944] console_unlock+0x46a/0x590 [ 128.409980] do_con_write+0xc05/0x1d50 [ 128.410004] con_write+0x21/0x40 [ 128.410026] n_tty_write+0x4d4/0xfe0 [ 128.410055] file_tty_write.constprop.0+0x49c/0x8f0 [ 128.410081] vfs_write+0x9c3/0xd90 [ 128.410122] ksys_write+0x127/0x250 [ 128.410161] do_syscall_64+0x3b/0x90 [ 128.410190] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.410230] [ 128.410230] -> #0 ((console_sem).lock){....}-{2:2}: [ 128.410260] __lock_acquire+0x2a02/0x5e70 [ 128.410297] lock_acquire+0x1a2/0x530 [ 128.410333] _raw_spin_lock_irqsave+0x39/0x60 [ 128.410367] down_trylock+0xe/0x70 [ 128.410395] __down_trylock_console_sem+0x3b/0xd0 [ 128.410431] vprintk_emit+0x16b/0x560 [ 128.410468] vprintk+0x84/0xa0 [ 128.410505] _printk+0xba/0xf1 [ 128.410545] report_bug.cold+0x72/0xab [ 128.410573] handle_bug+0x3c/0x70 [ 128.410603] exc_invalid_op+0x14/0x50 [ 128.410634] asm_exc_invalid_op+0x16/0x20 [ 128.410671] group_sched_out.part.0+0x2c7/0x460 [ 128.410695] ctx_sched_out+0x8f1/0xc10 [ 128.410716] __perf_event_task_sched_out+0x6d0/0x18d0 [ 128.410743] __schedule+0xedd/0x2470 [ 128.410766] preempt_schedule_common+0x45/0xc0 [ 128.410791] __cond_resched+0x17/0x30 [ 128.410814] __mutex_lock+0xa3/0x14d0 [ 128.410840] __do_sys_perf_event_open+0x1eec/0x32c0 [ 128.410868] do_syscall_64+0x3b/0x90 [ 128.410898] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.410937] [ 128.410937] other info that might help us debug this: [ 128.410937] [ 128.410943] Chain exists of: [ 128.410943] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 128.410943] [ 128.410976] Possible unsafe locking scenario: [ 128.410976] [ 128.410981] CPU0 CPU1 [ 128.410986] ---- ---- [ 128.410990] lock(&ctx->lock); [ 128.411003] lock(&rq->__lock); [ 128.411017] lock(&ctx->lock); [ 128.411030] lock((console_sem).lock); [ 128.411043] [ 128.411043] *** DEADLOCK *** [ 128.411043] [ 128.411047] 2 locks held by syz-executor.2/3881: [ 128.411062] #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 128.411119] #1: ffff88800ff19c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 128.411180] [ 128.411180] stack backtrace: [ 128.411186] CPU: 0 PID: 3881 Comm: syz-executor.2 Not tainted 6.0.0-rc5-next-20220915 #1 [ 128.411213] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 128.411230] Call Trace: [ 128.411237] [ 128.411245] dump_stack_lvl+0x8b/0xb3 [ 128.411279] check_noncircular+0x263/0x2e0 [ 128.411316] ? format_decode+0x26c/0xb50 [ 128.411350] ? print_circular_bug+0x450/0x450 [ 128.411388] ? enable_ptr_key_workfn+0x20/0x20 [ 128.411422] ? lock_release+0x547/0x750 [ 128.411459] ? format_decode+0x26c/0xb50 [ 128.411495] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 128.411535] __lock_acquire+0x2a02/0x5e70 [ 128.411583] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 128.411634] lock_acquire+0x1a2/0x530 [ 128.411672] ? down_trylock+0xe/0x70 [ 128.411705] ? rcu_read_unlock+0x40/0x40 [ 128.411752] ? vprintk+0x84/0xa0 [ 128.411793] _raw_spin_lock_irqsave+0x39/0x60 [ 128.411829] ? down_trylock+0xe/0x70 [ 128.411859] down_trylock+0xe/0x70 [ 128.411919] ? vprintk+0x84/0xa0 [ 128.411956] __down_trylock_console_sem+0x3b/0xd0 [ 128.411993] vprintk_emit+0x16b/0x560 [ 128.412035] vprintk+0x84/0xa0 [ 128.412073] _printk+0xba/0xf1 [ 128.412111] ? record_print_text.cold+0x16/0x16 [ 128.412158] ? perf_event_update_userpage+0x4e8/0x7c0 [ 128.412186] ? report_bug.cold+0x66/0xab [ 128.412218] ? group_sched_out.part.0+0x2c7/0x460 [ 128.412243] report_bug.cold+0x72/0xab [ 128.412277] handle_bug+0x3c/0x70 [ 128.412308] exc_invalid_op+0x14/0x50 [ 128.412340] asm_exc_invalid_op+0x16/0x20 [ 128.412378] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 128.412406] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 128.412431] RSP: 0018:ffff8880204a7978 EFLAGS: 00010006 [ 128.412451] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 128.412468] RDX: ffff888015ff8000 RSI: ffffffff81566027 RDI: 0000000000000005 [ 128.412485] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 128.412502] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800ff19c00 [ 128.412518] R13: ffff88806ce3ef00 R14: ffffffff85238040 R15: 0000000000000002 [ 128.412543] ? group_sched_out.part.0+0x2c7/0x460 [ 128.412571] ? group_sched_out.part.0+0x2c7/0x460 [ 128.412600] ctx_sched_out+0x8f1/0xc10 [ 128.412628] __perf_event_task_sched_out+0x6d0/0x18d0 [ 128.412665] ? lock_is_held_type+0xd7/0x130 [ 128.412706] ? __perf_cgroup_move+0x160/0x160 [ 128.412732] ? set_next_entity+0x304/0x550 [ 128.412771] ? update_curr+0x267/0x740 [ 128.412811] ? lock_is_held_type+0xd7/0x130 [ 128.412852] __schedule+0xedd/0x2470 [ 128.412882] ? io_schedule_timeout+0x150/0x150 [ 128.412907] ? find_held_lock+0x2c/0x110 [ 128.412943] ? lock_is_held_type+0xd7/0x130 [ 128.412982] ? __cond_resched+0x17/0x30 [ 128.413008] preempt_schedule_common+0x45/0xc0 [ 128.413037] __cond_resched+0x17/0x30 [ 128.413061] __mutex_lock+0xa3/0x14d0 [ 128.413091] ? lock_is_held_type+0xd7/0x130 [ 128.413128] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 128.413161] ? mutex_lock_io_nested+0x1310/0x1310 [ 128.413190] ? lock_release+0x3b2/0x750 [ 128.413227] ? __up_read+0x192/0x730 [ 128.413259] ? up_write+0x480/0x480 [ 128.413291] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 128.413332] __do_sys_perf_event_open+0x1eec/0x32c0 [ 128.413367] ? __up_read+0x192/0x730 [ 128.413398] ? perf_compat_ioctl+0x130/0x130 [ 128.413426] ? up_write+0x480/0x480 [ 128.413465] ? syscall_enter_from_user_mode+0x1d/0x50 [ 128.413506] ? syscall_enter_from_user_mode+0x1d/0x50 [ 128.413550] do_syscall_64+0x3b/0x90 [ 128.413582] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.413621] RIP: 0033:0x7f3fde22db19 [ 128.413640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 128.413664] RSP: 002b:00007f3fdb7a3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 128.413688] RAX: ffffffffffffffda RBX: 00007f3fde340f60 RCX: 00007f3fde22db19 [ 128.413705] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000280 [ 128.413721] RBP: 00007f3fde287f6d R08: 0000000000000000 R09: 0000000000000000 [ 128.413737] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 128.413753] R13: 00007ffd0baa119f R14: 00007f3fdb7a3300 R15: 0000000000022000 [ 128.413782] [ 128.480497] WARNING: CPU: 0 PID: 3881 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 128.481187] Modules linked in: [ 128.481438] CPU: 0 PID: 3881 Comm: syz-executor.2 Not tainted 6.0.0-rc5-next-20220915 #1 [ 128.482039] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 128.482883] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 128.483297] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 128.484674] RSP: 0018:ffff8880204a7978 EFLAGS: 00010006 [ 128.485044] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 128.485541] RDX: ffff888015ff8000 RSI: ffffffff81566027 RDI: 0000000000000005 [ 128.486040] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 128.486541] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800ff19c00 [ 128.487034] R13: ffff88806ce3ef00 R14: ffffffff85238040 R15: 0000000000000002 [ 128.487542] FS: 00007f3fdb7a3700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 128.488117] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.488538] CR2: 00005645340834c8 CR3: 000000003e784000 CR4: 0000000000350ef0 [ 128.489057] Call Trace: [ 128.489244] [ 128.489413] ctx_sched_out+0x8f1/0xc10 [ 128.489700] __perf_event_task_sched_out+0x6d0/0x18d0 [ 128.490079] ? lock_is_held_type+0xd7/0x130 [ 128.490401] ? __perf_cgroup_move+0x160/0x160 [ 128.490732] ? set_next_entity+0x304/0x550 [ 128.491041] ? update_curr+0x267/0x740 [ 128.491330] ? lock_is_held_type+0xd7/0x130 [ 128.491652] __schedule+0xedd/0x2470 [ 128.491945] ? io_schedule_timeout+0x150/0x150 [ 128.492282] ? find_held_lock+0x2c/0x110 [ 128.492585] ? lock_is_held_type+0xd7/0x130 [ 128.492917] ? __cond_resched+0x17/0x30 [ 128.493216] preempt_schedule_common+0x45/0xc0 [ 128.493559] __cond_resched+0x17/0x30 [ 128.493845] __mutex_lock+0xa3/0x14d0 [ 128.494136] ? lock_is_held_type+0xd7/0x130 [ 128.494464] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 128.494851] ? mutex_lock_io_nested+0x1310/0x1310 [ 128.495201] ? lock_release+0x3b2/0x750 [ 128.495502] ? __up_read+0x192/0x730 [ 128.495790] ? up_write+0x480/0x480 [ 128.496095] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 128.496474] __do_sys_perf_event_open+0x1eec/0x32c0 [ 128.496820] ? __up_read+0x192/0x730 [ 128.497102] ? perf_compat_ioctl+0x130/0x130 [ 128.497429] ? up_write+0x480/0x480 [ 128.497704] ? syscall_enter_from_user_mode+0x1d/0x50 [ 128.498096] ? syscall_enter_from_user_mode+0x1d/0x50 [ 128.498480] do_syscall_64+0x3b/0x90 [ 128.498759] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.499144] RIP: 0033:0x7f3fde22db19 [ 128.499418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 128.500715] RSP: 002b:00007f3fdb7a3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 128.501301] RAX: ffffffffffffffda RBX: 00007f3fde340f60 RCX: 00007f3fde22db19 [ 128.501833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000280 [ 128.502334] RBP: 00007f3fde287f6d R08: 0000000000000000 R09: 0000000000000000 [ 128.502841] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 128.503352] R13: 00007ffd0baa119f R14: 00007f3fdb7a3300 R15: 0000000000022000 [ 128.503882] [ 128.504058] irq event stamp: 620 [ 128.504309] hardirqs last enabled at (619): [] _raw_spin_unlock_irqrestore+0x28/0x60 [ 128.504998] hardirqs last disabled at (620): [] __schedule+0x1225/0x2470 [ 128.505583] softirqs last enabled at (616): [] __irq_exit_rcu+0x11b/0x180 [ 128.506193] softirqs last disabled at (547): [] __irq_exit_rcu+0x11b/0x180 [ 128.506818] ---[ end trace 0000000000000000 ]--- [ 128.556348] audit: type=1400 audit(1663242668.381:9): avc: denied { read } for pid=3880 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 11:51:09 executing program 0: prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 11:51:09 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x1c3c00, 0x0) ioctl$CDROM_DISC_STATUS(r0, 0x125f) 11:51:09 executing program 2: r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000006, 0x11, r0, 0x0) read(r0, &(0x7f0000000000)=""/48, 0x30) 11:51:09 executing program 7: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x45, &(0x7f00000000c0), 0x4) 11:51:09 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000200), &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)) mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x200080}, 0x20) 11:51:09 executing program 6: syz_emit_ethernet(0x46, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @remote, {[@timestamp_addr={0x44, 0x1c, 0xf, 0x1, 0x0, [{@local}, {@private}, {@private}]}]}}, {0x0, 0x0, 0x8}}}}}, 0x0) 11:51:09 executing program 5: syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@random="d730e83d9efc", @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x14, 0x3c, 0x0, @empty, @local, {[@srh={0x0, 0x0, 0x4, 0x0, 0x0, 0x40}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 11:51:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r1, 0x0) pkey_mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 11:51:09 executing program 0: prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 11:51:09 executing program 6: syz_emit_ethernet(0x46, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @remote, {[@timestamp_addr={0x44, 0x1c, 0xf, 0x1, 0x0, [{@local}, {@private}, {@private}]}]}}, {0x0, 0x0, 0x8}}}}}, 0x0) 11:51:09 executing program 7: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x45, &(0x7f00000000c0), 0x4) 11:51:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r1, 0x0) pkey_mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 11:51:09 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x1c3c00, 0x0) ioctl$CDROM_DISC_STATUS(r0, 0x125f) 11:51:09 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000200), &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)) mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x200080}, 0x20) 11:51:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r1, 0x0) pkey_mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 11:51:09 executing program 0: prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 11:51:09 executing program 5: syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@random="d730e83d9efc", @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x14, 0x3c, 0x0, @empty, @local, {[@srh={0x0, 0x0, 0x4, 0x0, 0x0, 0x40}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 11:51:09 executing program 6: syz_emit_ethernet(0x46, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @remote, {[@timestamp_addr={0x44, 0x1c, 0xf, 0x1, 0x0, [{@local}, {@private}, {@private}]}]}}, {0x0, 0x0, 0x8}}}}}, 0x0) 11:51:09 executing program 2: r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000006, 0x11, r0, 0x0) read(r0, &(0x7f0000000000)=""/48, 0x30) 11:51:09 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x1c3c00, 0x0) ioctl$CDROM_DISC_STATUS(r0, 0x125f) 11:51:09 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000200), &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)) mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x200080}, 0x20) 11:51:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r1, 0x0) pkey_mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 11:51:09 executing program 7: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x45, &(0x7f00000000c0), 0x4) 11:51:09 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000006, 0x11, r0, 0x0) read(r0, &(0x7f0000000000)=""/48, 0x30) 11:51:09 executing program 2: r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000006, 0x11, r0, 0x0) read(r0, &(0x7f0000000000)=""/48, 0x30) 11:51:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r1, 0x0) pkey_mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 11:51:09 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') open_by_handle_at(r0, &(0x7f00000005c0)=@FILEID_BTRFS_WITH_PARENT_ROOT={0x28}, 0x0) 11:51:09 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x34, 0x0, 0x0, 0x4020003}, {0x6}]}, 0x10) 11:51:09 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000006, 0x11, r0, 0x0) read(r0, &(0x7f0000000000)=""/48, 0x30) 11:51:09 executing program 5: syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@random="d730e83d9efc", @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x14, 0x3c, 0x0, @empty, @local, {[@srh={0x0, 0x0, 0x4, 0x0, 0x0, 0x40}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 11:51:09 executing program 6: clock_settime(0x5, 0x0) 11:51:09 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') open_by_handle_at(r0, &(0x7f00000005c0)=@FILEID_BTRFS_WITH_PARENT_ROOT={0x28}, 0x0) 11:51:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r1, 0x0) pkey_mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 11:51:09 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000006, 0x11, r0, 0x0) read(r0, &(0x7f0000000000)=""/48, 0x30) 11:51:09 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') open_by_handle_at(r0, &(0x7f00000005c0)=@FILEID_BTRFS_WITH_PARENT_ROOT={0x28}, 0x0) 11:51:09 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x34, 0x0, 0x0, 0x4020003}, {0x6}]}, 0x10) 11:51:09 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') open_by_handle_at(r0, &(0x7f00000005c0)=@FILEID_BTRFS_WITH_PARENT_ROOT={0x28}, 0x0) 11:51:10 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c) 11:51:10 executing program 6: clock_settime(0x5, 0x0) 11:51:10 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000240)={0x2, 0x4e24, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @remote}, r2}}}], 0x28}}], 0x1, 0x0) 11:51:10 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') open_by_handle_at(r0, &(0x7f00000005c0)=@FILEID_BTRFS_WITH_PARENT_ROOT={0x28}, 0x0) 11:51:10 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000240)={0x2, 0x4e24, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @remote}, r2}}}], 0x28}}], 0x1, 0x0) 11:51:10 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000240)={0x2, 0x4e24, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @remote}, r2}}}], 0x28}}], 0x1, 0x0) 11:51:10 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="001100000000000000010007"], 0x90) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 11:51:10 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x34, 0x0, 0x0, 0x4020003}, {0x6}]}, 0x10) 11:51:10 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') open_by_handle_at(r0, &(0x7f00000005c0)=@FILEID_BTRFS_WITH_PARENT_ROOT={0x28}, 0x0) 11:51:10 executing program 6: clock_settime(0x5, 0x0) 11:51:10 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') open_by_handle_at(r0, &(0x7f00000005c0)=@FILEID_BTRFS_WITH_PARENT_ROOT={0x28}, 0x0) 11:51:10 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x34, 0x0, 0x0, 0x4020003}, {0x6}]}, 0x10) 11:51:10 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="001100000000000000010007"], 0x90) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 11:51:10 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000240)={0x2, 0x4e24, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @remote}, r2}}}], 0x28}}], 0x1, 0x0) 11:51:10 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c) 11:51:10 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000240)={0x2, 0x4e24, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @remote}, r2}}}], 0x28}}], 0x1, 0x0) 11:51:10 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c) 11:51:10 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c) 11:51:10 executing program 6: clock_settime(0x5, 0x0) 11:51:10 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000240)={0x2, 0x4e24, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @remote}, r2}}}], 0x28}}], 0x1, 0x0) 11:51:10 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="001100000000000000010007"], 0x90) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 11:51:10 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000240)={0x2, 0x4e24, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @remote}, r2}}}], 0x28}}], 0x1, 0x0) 11:51:10 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c) 11:51:10 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c) 11:51:10 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x0) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:51:10 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="001100000000000000010007"], 0x90) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 11:51:10 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x0) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:51:10 executing program 6: socketpair(0x0, 0x0, 0x0, &(0x7f0000001640)) 11:51:10 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') 11:51:10 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c) 11:51:10 executing program 3: r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) close(r0) 11:51:10 executing program 4: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) 11:51:10 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) [ 130.740243] hrtimer: interrupt took 17022 ns 11:51:10 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0xf) 11:51:10 executing program 4: mq_getsetattr(0xffffffffffffffff, &(0x7f0000001200), 0x0) 11:51:10 executing program 3: r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) close(r0) 11:51:10 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x0) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:51:10 executing program 7: r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) close(r0) 11:51:10 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0xf) 11:51:10 executing program 6: socketpair(0x0, 0x0, 0x0, &(0x7f0000001640)) 11:51:10 executing program 4: mq_getsetattr(0xffffffffffffffff, &(0x7f0000001200), 0x0) 11:51:10 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x0) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:51:11 executing program 3: r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) close(r0) 11:51:11 executing program 7: r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) close(r0) 11:51:11 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0xf) 11:51:11 executing program 4: mq_getsetattr(0xffffffffffffffff, &(0x7f0000001200), 0x0) 11:51:11 executing program 2: mlockall(0x8) 11:51:11 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') 11:51:11 executing program 6: socketpair(0x0, 0x0, 0x0, &(0x7f0000001640)) 11:51:11 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') 11:51:11 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0xf) 11:51:11 executing program 2: mlockall(0x8) 11:51:11 executing program 4: mq_getsetattr(0xffffffffffffffff, &(0x7f0000001200), 0x0) 11:51:11 executing program 7: r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) close(r0) 11:51:11 executing program 3: r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) close(r0) 11:51:11 executing program 2: mlockall(0x8) 11:51:11 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') 11:51:11 executing program 6: socketpair(0x0, 0x0, 0x0, &(0x7f0000001640)) 11:51:11 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') 11:51:11 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r1 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:51:11 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002000028020000028401001b", 0x65, 0x400}, {&(0x7f0000000040)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x80035c0}], 0x0, &(0x7f0000012900)) 11:51:11 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') 11:51:11 executing program 7: mkdir(&(0x7f0000003b80)='./file0\x00', 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x4b, &(0x7f0000000000)={0x77359400}, 0x10) [ 131.631419] loop0: detected capacity change from 0 to 264192 [ 131.638503] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57356!=0) [ 131.639277] EXT4-fs (loop0): group descriptors corrupted! [ 131.646939] loop0: detected capacity change from 0 to 264192 [ 131.653972] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57356!=0) [ 131.654738] EXT4-fs (loop0): group descriptors corrupted! 11:51:11 executing program 7: mkdir(&(0x7f0000003b80)='./file0\x00', 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x4b, &(0x7f0000000000)={0x77359400}, 0x10) 11:51:11 executing program 2: mlockall(0x8) 11:51:11 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) io_setup(0x4e, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x4}]) 11:51:11 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002000028020000028401001b", 0x65, 0x400}, {&(0x7f0000000040)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x80035c0}], 0x0, &(0x7f0000012900)) 11:51:11 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') 11:51:11 executing program 2: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0) mount$9p_unix(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x100000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) [ 131.786611] loop0: detected capacity change from 0 to 264192 11:51:11 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') [ 131.818538] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57356!=0) [ 131.819696] EXT4-fs (loop0): group descriptors corrupted! 11:51:11 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) io_setup(0x4e, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x4}]) 11:51:11 executing program 2: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0) mount$9p_unix(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x100000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 11:51:11 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') 11:51:11 executing program 7: mkdir(&(0x7f0000003b80)='./file0\x00', 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x4b, &(0x7f0000000000)={0x77359400}, 0x10) 11:51:11 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002000028020000028401001b", 0x65, 0x400}, {&(0x7f0000000040)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x80035c0}], 0x0, &(0x7f0000012900)) 11:51:11 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lgetxattr(0x0, 0x0, 0x0, 0x0) 11:51:11 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) io_setup(0x4e, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x4}]) [ 131.924651] loop0: detected capacity change from 0 to 264192 [ 131.932699] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57356!=0) [ 131.933362] EXT4-fs (loop0): group descriptors corrupted! [ 132.042691] loop0: detected capacity change from 0 to 264192 [ 132.062080] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57356!=0) [ 132.062973] EXT4-fs (loop0): group descriptors corrupted! 11:51:11 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) io_setup(0x4e, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x4}]) 11:51:11 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f0000000180)='./file1\x00') 11:51:11 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002000028020000028401001b", 0x65, 0x400}, {&(0x7f0000000040)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x80035c0}], 0x0, &(0x7f0000012900)) 11:51:11 executing program 7: mkdir(&(0x7f0000003b80)='./file0\x00', 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x4b, &(0x7f0000000000)={0x77359400}, 0x10) 11:51:11 executing program 2: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0) mount$9p_unix(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x100000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 11:51:11 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lgetxattr(0x0, 0x0, 0x0, 0x0) 11:51:11 executing program 2: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0) mount$9p_unix(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x100000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 11:51:11 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lgetxattr(0x0, 0x0, 0x0, 0x0) 11:51:11 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000540)=""/23, 0x17}], 0x1, 0x3ff, 0x0) 11:51:11 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lgetxattr(0x0, 0x0, 0x0, 0x0) 11:51:11 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000540)=""/23, 0x17}], 0x1, 0x3ff, 0x0) 11:51:12 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x1000000008000000}, 0x180}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x7dcd8ccce9b1401e}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x3, 0x2, 0x20, 0x0, 0x9, 0x40000, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x1, 0x0, 0x3, 0x0, 0xfff0000000000000, 0x7, 0xce, 0x0, 0x6, 0x0, 0x8}, 0xffffffffffffffff, 0x2, r0, 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pread64(r1, &(0x7f0000000080)=""/39, 0x27, 0x610) 11:51:12 executing program 7: syz_open_dev$vcsa(&(0x7f0000001a40), 0x0, 0x80140) 11:51:12 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0/file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 11:51:12 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) shmctl$SHM_LOCK(r1, 0xb) 11:51:12 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(0xffffffffffffffff) gettid() migrate_pages(0x0, 0x9, 0x0, &(0x7f0000000180)=0x10001) sched_getattr(0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780), 0x0, 0x0) 11:51:12 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$inet(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000000)="d0", 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f000000b2c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/18, 0x12}}], 0x1, 0x0, 0x0) 11:51:12 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$inet(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000000)="d0", 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f000000b2c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/18, 0x12}}], 0x1, 0x0, 0x0) 11:51:12 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) shmctl$SHM_LOCK(r1, 0xb) 11:51:12 executing program 7: syz_open_dev$vcsa(&(0x7f0000001a40), 0x0, 0x80140) 11:51:12 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0/file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 11:51:12 executing program 6: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) shmctl$SHM_LOCK(r1, 0xb) 11:51:12 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(0xffffffffffffffff) gettid() migrate_pages(0x0, 0x9, 0x0, &(0x7f0000000180)=0x10001) sched_getattr(0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780), 0x0, 0x0) 11:51:12 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000540)=""/23, 0x17}], 0x1, 0x3ff, 0x0) 11:51:12 executing program 7: syz_open_dev$vcsa(&(0x7f0000001a40), 0x0, 0x80140) 11:51:12 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000540)=""/23, 0x17}], 0x1, 0x3ff, 0x0) 11:51:12 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$inet(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000000)="d0", 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f000000b2c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/18, 0x12}}], 0x1, 0x0, 0x0) 11:51:12 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x1000000008000000}, 0x180}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x7dcd8ccce9b1401e}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x3, 0x2, 0x20, 0x0, 0x9, 0x40000, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x1, 0x0, 0x3, 0x0, 0xfff0000000000000, 0x7, 0xce, 0x0, 0x6, 0x0, 0x8}, 0xffffffffffffffff, 0x2, r0, 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pread64(r1, &(0x7f0000000080)=""/39, 0x27, 0x610) 11:51:12 executing program 6: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) shmctl$SHM_LOCK(r1, 0xb) 11:51:12 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(0xffffffffffffffff) gettid() migrate_pages(0x0, 0x9, 0x0, &(0x7f0000000180)=0x10001) sched_getattr(0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780), 0x0, 0x0) 11:51:12 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) shmctl$SHM_LOCK(r1, 0xb) 11:51:12 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0/file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 11:51:12 executing program 6: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) shmctl$SHM_LOCK(r1, 0xb) 11:51:12 executing program 7: syz_open_dev$vcsa(&(0x7f0000001a40), 0x0, 0x80140) 11:51:12 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$inet(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000000)="d0", 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f000000b2c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/18, 0x12}}], 0x1, 0x0, 0x0) 11:51:12 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x1000000008000000}, 0x180}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x7dcd8ccce9b1401e}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x3, 0x2, 0x20, 0x0, 0x9, 0x40000, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x1, 0x0, 0x3, 0x0, 0xfff0000000000000, 0x7, 0xce, 0x0, 0x6, 0x0, 0x8}, 0xffffffffffffffff, 0x2, r0, 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pread64(r1, &(0x7f0000000080)=""/39, 0x27, 0x610) 11:51:12 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x1000000008000000}, 0x180}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x7dcd8ccce9b1401e}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x3, 0x2, 0x20, 0x0, 0x9, 0x40000, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x1, 0x0, 0x3, 0x0, 0xfff0000000000000, 0x7, 0xce, 0x0, 0x6, 0x0, 0x8}, 0xffffffffffffffff, 0x2, r0, 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pread64(r1, &(0x7f0000000080)=""/39, 0x27, 0x610) 11:51:12 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) shmctl$SHM_LOCK(r1, 0xb) 11:51:12 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x1000000008000000}, 0x180}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x7dcd8ccce9b1401e}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x3, 0x2, 0x20, 0x0, 0x9, 0x40000, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x1, 0x0, 0x3, 0x0, 0xfff0000000000000, 0x7, 0xce, 0x0, 0x6, 0x0, 0x8}, 0xffffffffffffffff, 0x2, r0, 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pread64(r1, &(0x7f0000000080)=""/39, 0x27, 0x610) 11:51:12 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0/file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 11:51:12 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(0xffffffffffffffff) gettid() migrate_pages(0x0, 0x9, 0x0, &(0x7f0000000180)=0x10001) sched_getattr(0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780), 0x0, 0x0) 11:51:12 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(0xffffffffffffffff) gettid() migrate_pages(0x0, 0x9, 0x0, &(0x7f0000000180)=0x10001) sched_getattr(0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780), 0x0, 0x0) 11:51:12 executing program 7: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) shmctl$SHM_LOCK(r1, 0xb) 11:51:12 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$inet(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000000)="d0", 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f000000b2c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/18, 0x12}}], 0x1, 0x0, 0x0) 11:51:12 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x1000000008000000}, 0x180}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x7dcd8ccce9b1401e}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x3, 0x2, 0x20, 0x0, 0x9, 0x40000, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x1, 0x0, 0x3, 0x0, 0xfff0000000000000, 0x7, 0xce, 0x0, 0x6, 0x0, 0x8}, 0xffffffffffffffff, 0x2, r0, 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pread64(r1, &(0x7f0000000080)=""/39, 0x27, 0x610) 11:51:12 executing program 7: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) shmctl$SHM_LOCK(r1, 0xb) 11:51:12 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) 11:51:12 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(0xffffffffffffffff) gettid() migrate_pages(0x0, 0x9, 0x0, &(0x7f0000000180)=0x10001) sched_getattr(0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780), 0x0, 0x0) 11:51:12 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 11:51:12 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x1000000008000000}, 0x180}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x7dcd8ccce9b1401e}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x3, 0x2, 0x20, 0x0, 0x9, 0x40000, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x1, 0x0, 0x3, 0x0, 0xfff0000000000000, 0x7, 0xce, 0x0, 0x6, 0x0, 0x8}, 0xffffffffffffffff, 0x2, r0, 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pread64(r1, &(0x7f0000000080)=""/39, 0x27, 0x610) 11:51:12 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$inet(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000000)="d0", 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f000000b2c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/18, 0x12}}], 0x1, 0x0, 0x0) 11:51:12 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) 11:51:12 executing program 7: syz_mount_image$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) shmctl$SHM_LOCK(r1, 0xb) 11:51:12 executing program 3: get_mempolicy(0x0, &(0x7f0000000680), 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x0) 11:51:12 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(0xffffffffffffffff) gettid() migrate_pages(0x0, 0x9, 0x0, &(0x7f0000000180)=0x10001) sched_getattr(0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780), 0x0, 0x0) 11:51:12 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') truncate(&(0x7f0000000140)='./file1\x00', 0x0) 11:51:12 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x1000000008000000}, 0x180}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x7dcd8ccce9b1401e}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x3, 0x2, 0x20, 0x0, 0x9, 0x40000, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x1, 0x0, 0x3, 0x0, 0xfff0000000000000, 0x7, 0xce, 0x0, 0x6, 0x0, 0x8}, 0xffffffffffffffff, 0x2, r0, 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pread64(r1, &(0x7f0000000080)=""/39, 0x27, 0x610) [ 132.895186] audit: type=1326 audit(1663242672.719:10): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4323 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd72d7e8b19 code=0x0 11:51:12 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$inet(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000000)="d0", 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f000000b2c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/18, 0x12}}], 0x1, 0x0, 0x0) [ 133.730355] audit: type=1326 audit(1663242673.554:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4323 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd72d7e8b19 code=0x0 11:51:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') truncate(&(0x7f0000000140)='./file1\x00', 0x0) 11:51:13 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x1000000008000000}, 0x180}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x7dcd8ccce9b1401e}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x3, 0x2, 0x20, 0x0, 0x9, 0x40000, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x1, 0x0, 0x3, 0x0, 0xfff0000000000000, 0x7, 0xce, 0x0, 0x6, 0x0, 0x8}, 0xffffffffffffffff, 0x2, r0, 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pread64(r1, &(0x7f0000000080)=""/39, 0x27, 0x610) 11:51:13 executing program 3: get_mempolicy(0x0, &(0x7f0000000680), 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x0) 11:51:13 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f00000000c0), 0x4) 11:51:13 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) 11:51:13 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, 0x14, 0x0, 0x101, 0x0, 0x0, {0x2, 0x9b}, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@remote}]}, 0x28}}, 0x0) 11:51:13 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x1000000008000000}, 0x180}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x7dcd8ccce9b1401e}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x3, 0x2, 0x20, 0x0, 0x9, 0x40000, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x1, 0x0, 0x3, 0x0, 0xfff0000000000000, 0x7, 0xce, 0x0, 0x6, 0x0, 0x8}, 0xffffffffffffffff, 0x2, r0, 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pread64(r1, &(0x7f0000000080)=""/39, 0x27, 0x610) 11:51:13 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') truncate(&(0x7f0000000140)='./file1\x00', 0x0) [ 133.794210] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.7'. [ 133.795109] audit: type=1326 audit(1663242673.619:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4341 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd830e9eb19 code=0x0 11:51:13 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f00000000c0), 0x4) 11:51:13 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, 0x14, 0x0, 0x101, 0x0, 0x0, {0x2, 0x9b}, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@remote}]}, 0x28}}, 0x0) 11:51:13 executing program 3: get_mempolicy(0x0, &(0x7f0000000680), 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x0) 11:51:13 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) [ 133.855648] audit: type=1326 audit(1663242673.680:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4349 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd72d7e8b19 code=0x0 [ 133.869426] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.7'. 11:51:13 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f00000000c0), 0x4) 11:51:13 executing program 3: get_mempolicy(0x0, &(0x7f0000000680), 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x0) 11:51:13 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, 0x14, 0x0, 0x101, 0x0, 0x0, {0x2, 0x9b}, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@remote}]}, 0x28}}, 0x0) 11:51:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') truncate(&(0x7f0000000140)='./file1\x00', 0x0) [ 133.956102] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.7'. [ 133.974144] audit: type=1326 audit(1663242673.798:14): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4365 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01cef34b19 code=0x0 [ 134.831386] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 134.834466] ieee80211 phy2: Selected rate control algorithm 'minstrel_ht' [ 134.858795] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.7'. 11:51:14 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f00000000c0), 0x4) 11:51:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') truncate(&(0x7f0000000140)='./file1\x00', 0x0) 11:51:14 executing program 3: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x2}) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="200000001d0001000000000400000000040000000c000c"], 0x20}], 0x1}, 0x0) 11:51:14 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 11:51:14 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, 0x14, 0x0, 0x101, 0x0, 0x0, {0x2, 0x9b}, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@remote}]}, 0x28}}, 0x0) 11:51:14 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') truncate(&(0x7f0000000140)='./file1\x00', 0x0) 11:51:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') truncate(&(0x7f0000000140)='./file1\x00', 0x0) 11:51:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') truncate(&(0x7f0000000140)='./file1\x00', 0x0) [ 134.863433] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 134.868692] audit: type=1326 audit(1663242674.693:15): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4385 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd830e9eb19 code=0x0 [ 134.876801] ieee80211 phy3: Selected rate control algorithm 'minstrel_ht' [ 134.881528] audit: type=1326 audit(1663242674.706:16): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4383 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba339e6b19 code=0x0 [ 134.892037] audit: type=1326 audit(1663242674.716:17): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4382 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd72d7e8b19 code=0x0 11:51:14 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/blk_cgroup', 0x200000, 0x0) [ 134.904056] audit: type=1326 audit(1663242674.728:18): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4389 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01cef34b19 code=0x0 11:51:14 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 11:51:14 executing program 7: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x5416, 0x0) 11:51:14 executing program 3: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x2}) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="200000001d0001000000000400000000040000000c000c"], 0x20}], 0x1}, 0x0) [ 134.967673] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 134.976160] ieee80211 phy4: Selected rate control algorithm 'minstrel_ht' 11:51:14 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r0, 0x0, 0x0) 11:51:14 executing program 7: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x5416, 0x0) 11:51:14 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 11:51:14 executing program 3: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x2}) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="200000001d0001000000000400000000040000000c000c"], 0x20}], 0x1}, 0x0) 11:51:14 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) [ 135.063376] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 135.068475] ieee80211 phy5: Selected rate control algorithm 'minstrel_ht' 11:51:15 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r0, 0x0, 0x0) 11:51:15 executing program 3: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x2}) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="200000001d0001000000000400000000040000000c000c"], 0x20}], 0x1}, 0x0) 11:51:15 executing program 1: syz_io_uring_setup(0x52b7, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x34}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001c00), &(0x7f0000001c40)) 11:51:15 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') truncate(&(0x7f0000000140)='./file1\x00', 0x0) 11:51:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') truncate(&(0x7f0000000140)='./file1\x00', 0x0) 11:51:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') truncate(&(0x7f0000000140)='./file1\x00', 0x0) 11:51:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') truncate(&(0x7f0000000140)='./file1\x00', 0x0) 11:51:15 executing program 7: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x5416, 0x0) [ 135.770204] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 135.776821] ieee80211 phy6: Selected rate control algorithm 'minstrel_ht' [ 135.815291] audit: type=1326 audit(1663242675.639:19): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4419 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd830e9eb19 code=0x0 [ 135.824442] audit: type=1326 audit(1663242675.648:20): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4426 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd72d7e8b19 code=0x0 11:51:15 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r0, 0x0, 0x0) 11:51:15 executing program 7: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x5416, 0x0) 11:51:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000003fc0)={0x28, 0x65, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0xffffffff}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x28}], 0x1}, 0x0) 11:51:15 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r0, 0x0, 0x0) [ 135.887474] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 11:51:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000003fc0)={0x28, 0x65, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0xffffffff}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x28}], 0x1}, 0x0) [ 135.938306] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 11:51:16 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$1(0x1, &(0x7f0000000000)='vfat\x00') recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001100)=[{{&(0x7f0000000880), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000900)=""/101, 0x65}, {&(0x7f0000000980)=""/46, 0x2e}, {0x0}, {&(0x7f0000000a80)=""/119, 0x77}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/1, 0x1}], 0x6, &(0x7f0000000bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}], 0x1, 0x40000041, &(0x7f00000011c0)={0x77359400}) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e80)=ANY=[@ANYRES16]) clone3(&(0x7f0000004c00)={0xc0000500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:51:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000003fc0)={0x28, 0x65, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0xffffffff}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x28}], 0x1}, 0x0) 11:51:16 executing program 6: r0 = fsopen(&(0x7f00000001c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000240)='/dev/bsg\x00', 0x0) read(r0, &(0x7f0000000000)=""/225, 0xe1) 11:51:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="02b2dccad213e1e6cf54b7a797f8f22a47f25b7658fb110b2e76f95b0f318b8fa745e6ffba4414d29a42bfab524bc5bffb17decc4540a6f00b9772f5f9789a9525790df8d989b23530d0a1398f2ad734c7ff47961b63", 0x56}], 0x1) 11:51:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') truncate(&(0x7f0000000140)='./file1\x00', 0x0) 11:51:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x4b65, 0x0) 11:51:16 executing program 5: ustat(0x8000000000201, &(0x7f0000000000)) ustat(0x7fffffff, &(0x7f0000000340)) ustat(0x5, &(0x7f0000000300)) r0 = open(0x0, 0x0, 0x22) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000500)={0x0, 0x2, 0xffffffffffffffff, 0x6}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000140)={{0x7, 0x3}, 0x100, './file1\x00'}) pwritev(r3, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) 11:51:16 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1}, 0x6e) ioctl$sock_SIOCINQ(r0, 0x89e0, 0x0) [ 136.751031] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 11:51:16 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1}, 0x6e) ioctl$sock_SIOCINQ(r0, 0x89e0, 0x0) 11:51:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="02b2dccad213e1e6cf54b7a797f8f22a47f25b7658fb110b2e76f95b0f318b8fa745e6ffba4414d29a42bfab524bc5bffb17decc4540a6f00b9772f5f9789a9525790df8d989b23530d0a1398f2ad734c7ff47961b63", 0x56}], 0x1) 11:51:16 executing program 6: r0 = fsopen(&(0x7f00000001c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000240)='/dev/bsg\x00', 0x0) read(r0, &(0x7f0000000000)=""/225, 0xe1) 11:51:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x4b65, 0x0) 11:51:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000003fc0)={0x28, 0x65, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0xffffffff}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x28}], 0x1}, 0x0) 11:51:16 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1}, 0x6e) ioctl$sock_SIOCINQ(r0, 0x89e0, 0x0) [ 136.887103] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 11:51:16 executing program 6: r0 = fsopen(&(0x7f00000001c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000240)='/dev/bsg\x00', 0x0) read(r0, &(0x7f0000000000)=""/225, 0xe1) 11:51:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="02b2dccad213e1e6cf54b7a797f8f22a47f25b7658fb110b2e76f95b0f318b8fa745e6ffba4414d29a42bfab524bc5bffb17decc4540a6f00b9772f5f9789a9525790df8d989b23530d0a1398f2ad734c7ff47961b63", 0x56}], 0x1) 11:51:17 executing program 6: r0 = fsopen(&(0x7f00000001c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000240)='/dev/bsg\x00', 0x0) read(r0, &(0x7f0000000000)=""/225, 0xe1) 11:51:17 executing program 5: ustat(0x8000000000201, &(0x7f0000000000)) ustat(0x7fffffff, &(0x7f0000000340)) ustat(0x5, &(0x7f0000000300)) r0 = open(0x0, 0x0, 0x22) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000500)={0x0, 0x2, 0xffffffffffffffff, 0x6}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000140)={{0x7, 0x3}, 0x100, './file1\x00'}) pwritev(r3, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) 11:51:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="02b2dccad213e1e6cf54b7a797f8f22a47f25b7658fb110b2e76f95b0f318b8fa745e6ffba4414d29a42bfab524bc5bffb17decc4540a6f00b9772f5f9789a9525790df8d989b23530d0a1398f2ad734c7ff47961b63", 0x56}], 0x1) 11:51:17 executing program 1: ustat(0x8000000000201, &(0x7f0000000000)) ustat(0x7fffffff, &(0x7f0000000340)) ustat(0x5, &(0x7f0000000300)) r0 = open(0x0, 0x0, 0x22) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000500)={0x0, 0x2, 0xffffffffffffffff, 0x6}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000140)={{0x7, 0x3}, 0x100, './file1\x00'}) pwritev(r3, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) 11:51:17 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$1(0x1, &(0x7f0000000000)='vfat\x00') recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001100)=[{{&(0x7f0000000880), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000900)=""/101, 0x65}, {&(0x7f0000000980)=""/46, 0x2e}, {0x0}, {&(0x7f0000000a80)=""/119, 0x77}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/1, 0x1}], 0x6, &(0x7f0000000bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}], 0x1, 0x40000041, &(0x7f00000011c0)={0x77359400}) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e80)=ANY=[@ANYRES16]) clone3(&(0x7f0000004c00)={0xc0000500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:51:17 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1}, 0x6e) ioctl$sock_SIOCINQ(r0, 0x89e0, 0x0) 11:51:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x4b65, 0x0) 11:51:17 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$1(0x1, &(0x7f0000000000)='vfat\x00') recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001100)=[{{&(0x7f0000000880), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000900)=""/101, 0x65}, {&(0x7f0000000980)=""/46, 0x2e}, {0x0}, {&(0x7f0000000a80)=""/119, 0x77}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/1, 0x1}], 0x6, &(0x7f0000000bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}], 0x1, 0x40000041, &(0x7f00000011c0)={0x77359400}) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e80)=ANY=[@ANYRES16]) clone3(&(0x7f0000004c00)={0xc0000500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:51:17 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$1(0x1, &(0x7f0000000000)='vfat\x00') recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001100)=[{{&(0x7f0000000880), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000900)=""/101, 0x65}, {&(0x7f0000000980)=""/46, 0x2e}, {0x0}, {&(0x7f0000000a80)=""/119, 0x77}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/1, 0x1}], 0x6, &(0x7f0000000bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}], 0x1, 0x40000041, &(0x7f00000011c0)={0x77359400}) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e80)=ANY=[@ANYRES16]) clone3(&(0x7f0000004c00)={0xc0000500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:51:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x4b65, 0x0) 11:51:17 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$1(0x1, &(0x7f0000000000)='vfat\x00') recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001100)=[{{&(0x7f0000000880), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000900)=""/101, 0x65}, {&(0x7f0000000980)=""/46, 0x2e}, {0x0}, {&(0x7f0000000a80)=""/119, 0x77}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/1, 0x1}], 0x6, &(0x7f0000000bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}], 0x1, 0x40000041, &(0x7f00000011c0)={0x77359400}) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e80)=ANY=[@ANYRES16]) clone3(&(0x7f0000004c00)={0xc0000500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:51:17 executing program 6: ustat(0x8000000000201, &(0x7f0000000000)) ustat(0x7fffffff, &(0x7f0000000340)) ustat(0x5, &(0x7f0000000300)) r0 = open(0x0, 0x0, 0x22) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000500)={0x0, 0x2, 0xffffffffffffffff, 0x6}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000140)={{0x7, 0x3}, 0x100, './file1\x00'}) pwritev(r3, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) 11:51:17 executing program 5: ustat(0x8000000000201, &(0x7f0000000000)) ustat(0x7fffffff, &(0x7f0000000340)) ustat(0x5, &(0x7f0000000300)) r0 = open(0x0, 0x0, 0x22) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000500)={0x0, 0x2, 0xffffffffffffffff, 0x6}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000140)={{0x7, 0x3}, 0x100, './file1\x00'}) pwritev(r3, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) 11:51:17 executing program 1: ustat(0x8000000000201, &(0x7f0000000000)) ustat(0x7fffffff, &(0x7f0000000340)) ustat(0x5, &(0x7f0000000300)) r0 = open(0x0, 0x0, 0x22) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000500)={0x0, 0x2, 0xffffffffffffffff, 0x6}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000140)={{0x7, 0x3}, 0x100, './file1\x00'}) pwritev(r3, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) 11:51:17 executing program 4: ustat(0x8000000000201, &(0x7f0000000000)) ustat(0x7fffffff, &(0x7f0000000340)) ustat(0x5, &(0x7f0000000300)) r0 = open(0x0, 0x0, 0x22) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000500)={0x0, 0x2, 0xffffffffffffffff, 0x6}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000140)={{0x7, 0x3}, 0x100, './file1\x00'}) pwritev(r3, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) 11:51:17 executing program 5: ustat(0x8000000000201, &(0x7f0000000000)) ustat(0x7fffffff, &(0x7f0000000340)) ustat(0x5, &(0x7f0000000300)) r0 = open(0x0, 0x0, 0x22) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000500)={0x0, 0x2, 0xffffffffffffffff, 0x6}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000140)={{0x7, 0x3}, 0x100, './file1\x00'}) pwritev(r3, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) 11:51:17 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$1(0x1, &(0x7f0000000000)='vfat\x00') recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001100)=[{{&(0x7f0000000880), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000900)=""/101, 0x65}, {&(0x7f0000000980)=""/46, 0x2e}, {0x0}, {&(0x7f0000000a80)=""/119, 0x77}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/1, 0x1}], 0x6, &(0x7f0000000bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}], 0x1, 0x40000041, &(0x7f00000011c0)={0x77359400}) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e80)=ANY=[@ANYRES16]) clone3(&(0x7f0000004c00)={0xc0000500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:51:17 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$1(0x1, &(0x7f0000000000)='vfat\x00') recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001100)=[{{&(0x7f0000000880), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000900)=""/101, 0x65}, {&(0x7f0000000980)=""/46, 0x2e}, {0x0}, {&(0x7f0000000a80)=""/119, 0x77}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/1, 0x1}], 0x6, &(0x7f0000000bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}], 0x1, 0x40000041, &(0x7f00000011c0)={0x77359400}) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e80)=ANY=[@ANYRES16]) clone3(&(0x7f0000004c00)={0xc0000500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:51:17 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$1(0x1, &(0x7f0000000000)='vfat\x00') recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001100)=[{{&(0x7f0000000880), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000900)=""/101, 0x65}, {&(0x7f0000000980)=""/46, 0x2e}, {0x0}, {&(0x7f0000000a80)=""/119, 0x77}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/1, 0x1}], 0x6, &(0x7f0000000bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}], 0x1, 0x40000041, &(0x7f00000011c0)={0x77359400}) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e80)=ANY=[@ANYRES16]) clone3(&(0x7f0000004c00)={0xc0000500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:51:17 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$1(0x1, &(0x7f0000000000)='vfat\x00') recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001100)=[{{&(0x7f0000000880), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000900)=""/101, 0x65}, {&(0x7f0000000980)=""/46, 0x2e}, {0x0}, {&(0x7f0000000a80)=""/119, 0x77}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/1, 0x1}], 0x6, &(0x7f0000000bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}], 0x1, 0x40000041, &(0x7f00000011c0)={0x77359400}) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e80)=ANY=[@ANYRES16]) clone3(&(0x7f0000004c00)={0xc0000500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) VM DIAGNOSIS: 11:51:08 Registers: info registers vcpu 0 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b29f1 RDI=ffffffff87641ba0 RBP=ffffffff87641b60 RSP=ffff8880204a73c8 R8 =0000000000000001 R9 =000000000000000a R10=000000000000002d R11=0000000000000001 R12=000000000000002d R13=ffffffff87641b60 R14=0000000000000010 R15=ffffffff822b29e0 RIP=ffffffff822b2a49 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f3fdb7a3700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005645340834c8 CR3=000000003e784000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ff00000000000000 000000000000ff00 YMM02=0000000000000000 0000000000000000 0000000000000000 0000ffffffffffff YMM03=0000000000000000 0000000000000000 0000000000000000 0000ff00000000ff YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 676f6c206d6f7473 7563000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=ffff888018407c50 RBX=0000000000000001 RCX=ffff888018407c10 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000001 RBP=ffff888018407620 RSP=ffff888018407548 R8 =ffffffff85ecb6ec R9 =ffffffff85ecb6f0 R10=ffffed1003080ec6 R11=000000000003603d R12=ffff888018407609 R13=ffff888018407628 R14=ffff8880184075c8 R15=ffffffff85ecb6f1 RIP=ffffffff8111bc6c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9a52e22260 CR3=000000003ea9c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 2e6f747079726362 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00312e312e6f732e 6f74707972636269 YMM03=0000000000000000 0000000000000000 6c2f756e672d7875 6e696c2d34365f36 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000