
Debian GNU/Linux 11 syzkaller ttyS0

syzkaller login: [   34.899960] sshd (250) used greatest stack depth: 24776 bytes left
Warning: Permanently added '[localhost]:38151' (ECDSA) to the list of known hosts.
2022/09/12 14:40:55 fuzzer started
2022/09/12 14:40:55 dialing manager at localhost:38027
[   36.210968] cgroup: Unknown subsys name 'net'
[   36.301618] cgroup: Unknown subsys name 'rlimit'
2022/09/12 14:41:10 syscalls: 2215
2022/09/12 14:41:10 code coverage: enabled
2022/09/12 14:41:10 comparison tracing: enabled
2022/09/12 14:41:10 extra coverage: enabled
2022/09/12 14:41:10 setuid sandbox: enabled
2022/09/12 14:41:10 namespace sandbox: enabled
2022/09/12 14:41:10 Android sandbox: enabled
2022/09/12 14:41:10 fault injection: enabled
2022/09/12 14:41:10 leak checking: enabled
2022/09/12 14:41:10 net packet injection: enabled
2022/09/12 14:41:10 net device setup: enabled
2022/09/12 14:41:10 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/09/12 14:41:10 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/09/12 14:41:10 USB emulation: enabled
2022/09/12 14:41:10 hci packet injection: enabled
2022/09/12 14:41:10 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220912                                          )
2022/09/12 14:41:10 802.15.4 emulation: enabled
2022/09/12 14:41:10 fetching corpus: 0, signal 0/2000 (executing program)
2022/09/12 14:41:10 fetching corpus: 50, signal 28925/32309 (executing program)
2022/09/12 14:41:10 fetching corpus: 100, signal 46400/50939 (executing program)
2022/09/12 14:41:10 fetching corpus: 150, signal 53936/59706 (executing program)
2022/09/12 14:41:10 fetching corpus: 200, signal 64764/71444 (executing program)
2022/09/12 14:41:11 fetching corpus: 250, signal 69128/76902 (executing program)
2022/09/12 14:41:11 fetching corpus: 300, signal 74862/83500 (executing program)
2022/09/12 14:41:11 fetching corpus: 350, signal 79347/88845 (executing program)
2022/09/12 14:41:11 fetching corpus: 400, signal 83963/94254 (executing program)
2022/09/12 14:41:11 fetching corpus: 450, signal 88563/99510 (executing program)
2022/09/12 14:41:11 fetching corpus: 500, signal 92029/103675 (executing program)
2022/09/12 14:41:12 fetching corpus: 550, signal 96598/108757 (executing program)
2022/09/12 14:41:12 fetching corpus: 600, signal 99248/112086 (executing program)
2022/09/12 14:41:12 fetching corpus: 650, signal 101332/114907 (executing program)
2022/09/12 14:41:12 fetching corpus: 700, signal 105135/119131 (executing program)
2022/09/12 14:41:12 fetching corpus: 750, signal 109018/123276 (executing program)
2022/09/12 14:41:12 fetching corpus: 800, signal 111188/125938 (executing program)
2022/09/12 14:41:13 fetching corpus: 850, signal 113375/128615 (executing program)
2022/09/12 14:41:13 fetching corpus: 900, signal 115256/130975 (executing program)
2022/09/12 14:41:13 fetching corpus: 950, signal 117565/133697 (executing program)
2022/09/12 14:41:13 fetching corpus: 1000, signal 119731/136244 (executing program)
2022/09/12 14:41:13 fetching corpus: 1050, signal 122111/138896 (executing program)
2022/09/12 14:41:13 fetching corpus: 1100, signal 124437/141433 (executing program)
2022/09/12 14:41:14 fetching corpus: 1150, signal 127318/144298 (executing program)
2022/09/12 14:41:14 fetching corpus: 1200, signal 128651/146033 (executing program)
2022/09/12 14:41:14 fetching corpus: 1250, signal 130493/148130 (executing program)
2022/09/12 14:41:14 fetching corpus: 1300, signal 131772/149724 (executing program)
2022/09/12 14:41:14 fetching corpus: 1350, signal 133290/151477 (executing program)
2022/09/12 14:41:14 fetching corpus: 1400, signal 135947/154028 (executing program)
2022/09/12 14:41:14 fetching corpus: 1450, signal 137428/155629 (executing program)
2022/09/12 14:41:14 fetching corpus: 1500, signal 139743/157864 (executing program)
2022/09/12 14:41:15 fetching corpus: 1550, signal 141537/159654 (executing program)
2022/09/12 14:41:15 fetching corpus: 1600, signal 143469/161471 (executing program)
2022/09/12 14:41:15 fetching corpus: 1650, signal 144891/162936 (executing program)
2022/09/12 14:41:15 fetching corpus: 1700, signal 146064/164224 (executing program)
2022/09/12 14:41:15 fetching corpus: 1750, signal 147655/165795 (executing program)
2022/09/12 14:41:15 fetching corpus: 1800, signal 149122/167298 (executing program)
2022/09/12 14:41:16 fetching corpus: 1850, signal 151059/169050 (executing program)
2022/09/12 14:41:16 fetching corpus: 1900, signal 152119/170171 (executing program)
2022/09/12 14:41:16 fetching corpus: 1950, signal 153793/171625 (executing program)
2022/09/12 14:41:16 fetching corpus: 2000, signal 155514/173091 (executing program)
2022/09/12 14:41:16 fetching corpus: 2050, signal 156539/174142 (executing program)
2022/09/12 14:41:16 fetching corpus: 2100, signal 157706/175174 (executing program)
2022/09/12 14:41:16 fetching corpus: 2150, signal 159129/176338 (executing program)
2022/09/12 14:41:17 fetching corpus: 2200, signal 160221/177457 (executing program)
2022/09/12 14:41:17 fetching corpus: 2250, signal 161554/178583 (executing program)
2022/09/12 14:41:17 fetching corpus: 2300, signal 162464/179437 (executing program)
2022/09/12 14:41:17 fetching corpus: 2350, signal 163241/180211 (executing program)
2022/09/12 14:41:17 fetching corpus: 2400, signal 164817/181377 (executing program)
2022/09/12 14:41:17 fetching corpus: 2450, signal 165808/182344 (executing program)
2022/09/12 14:41:17 fetching corpus: 2500, signal 167177/183325 (executing program)
2022/09/12 14:41:18 fetching corpus: 2550, signal 168789/184503 (executing program)
2022/09/12 14:41:18 fetching corpus: 2600, signal 169734/185253 (executing program)
2022/09/12 14:41:18 fetching corpus: 2650, signal 170656/185955 (executing program)
2022/09/12 14:41:18 fetching corpus: 2700, signal 172113/186872 (executing program)
2022/09/12 14:41:18 fetching corpus: 2750, signal 173347/187730 (executing program)
2022/09/12 14:41:18 fetching corpus: 2800, signal 174028/188293 (executing program)
2022/09/12 14:41:19 fetching corpus: 2850, signal 175379/189129 (executing program)
2022/09/12 14:41:19 fetching corpus: 2900, signal 176351/189759 (executing program)
2022/09/12 14:41:19 fetching corpus: 2950, signal 177443/190420 (executing program)
2022/09/12 14:41:19 fetching corpus: 3000, signal 178231/190978 (executing program)
2022/09/12 14:41:19 fetching corpus: 3050, signal 178942/191485 (executing program)
2022/09/12 14:41:19 fetching corpus: 3100, signal 180050/192144 (executing program)
2022/09/12 14:41:19 fetching corpus: 3150, signal 180835/192625 (executing program)
2022/09/12 14:41:20 fetching corpus: 3200, signal 181853/193195 (executing program)
2022/09/12 14:41:20 fetching corpus: 3250, signal 182951/193753 (executing program)
2022/09/12 14:41:20 fetching corpus: 3300, signal 184129/194304 (executing program)
2022/09/12 14:41:20 fetching corpus: 3350, signal 185133/194729 (executing program)
2022/09/12 14:41:20 fetching corpus: 3400, signal 186088/195164 (executing program)
2022/09/12 14:41:21 fetching corpus: 3450, signal 187060/195700 (executing program)
2022/09/12 14:41:21 fetching corpus: 3500, signal 187683/196020 (executing program)
2022/09/12 14:41:21 fetching corpus: 3550, signal 188786/196400 (executing program)
2022/09/12 14:41:21 fetching corpus: 3600, signal 189430/196724 (executing program)
2022/09/12 14:41:21 fetching corpus: 3650, signal 190006/197054 (executing program)
2022/09/12 14:41:21 fetching corpus: 3700, signal 190886/197384 (executing program)
2022/09/12 14:41:21 fetching corpus: 3728, signal 191632/197637 (executing program)
2022/09/12 14:41:21 fetching corpus: 3728, signal 191632/197725 (executing program)
2022/09/12 14:41:21 fetching corpus: 3728, signal 191632/197816 (executing program)
2022/09/12 14:41:21 fetching corpus: 3728, signal 191632/197892 (executing program)
2022/09/12 14:41:21 fetching corpus: 3728, signal 191632/197967 (executing program)
2022/09/12 14:41:21 fetching corpus: 3728, signal 191632/198065 (executing program)
2022/09/12 14:41:21 fetching corpus: 3728, signal 191632/198144 (executing program)
2022/09/12 14:41:21 fetching corpus: 3728, signal 191632/198219 (executing program)
2022/09/12 14:41:21 fetching corpus: 3728, signal 191632/198299 (executing program)
2022/09/12 14:41:21 fetching corpus: 3728, signal 191632/198374 (executing program)
2022/09/12 14:41:21 fetching corpus: 3728, signal 191632/198434 (executing program)
2022/09/12 14:41:22 fetching corpus: 3728, signal 191632/198527 (executing program)
2022/09/12 14:41:22 fetching corpus: 3728, signal 191632/198619 (executing program)
2022/09/12 14:41:22 fetching corpus: 3728, signal 191632/198720 (executing program)
2022/09/12 14:41:22 fetching corpus: 3728, signal 191632/198801 (executing program)
2022/09/12 14:41:22 fetching corpus: 3728, signal 191632/198887 (executing program)
2022/09/12 14:41:22 fetching corpus: 3728, signal 191632/198978 (executing program)
2022/09/12 14:41:22 fetching corpus: 3728, signal 191632/199056 (executing program)
2022/09/12 14:41:22 fetching corpus: 3728, signal 191632/199137 (executing program)
2022/09/12 14:41:22 fetching corpus: 3728, signal 191632/199210 (executing program)
2022/09/12 14:41:22 fetching corpus: 3728, signal 191632/199290 (executing program)
2022/09/12 14:41:22 fetching corpus: 3728, signal 191632/199364 (executing program)
2022/09/12 14:41:22 fetching corpus: 3728, signal 191632/199364 (executing program)
2022/09/12 14:41:24 starting 8 fuzzer processes
14:41:24 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x2, @in6=@mcast2}}, 0xe8)

14:41:24 executing program 2:
syz_io_uring_setup(0x14eb, &(0x7f0000000280), &(0x7f0000005000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x100000001)
syz_io_uring_setup(0x4917, &(0x7f0000000180)={0x0, 0x9f8, 0x20, 0x0, 0x128, 0x0, r0}, &(0x7f0000007000/0x1000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000200))
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000000000), 0x4)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r2, 0x0, 0x0, 0x87ffffc)
ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000140)={0x0, 0x200})
sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb0, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9d6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffbff}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x801}, 0x8040)

14:41:24 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x49, &(0x7f0000000180)=0x8000, 0x4)
setsockopt$sock_int(r0, 0x1, 0x49, &(0x7f0000000180)=0x7, 0x4)

14:41:24 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
lchown(&(0x7f0000000140)='./file0\x00', r0, 0x0)
utime(&(0x7f0000000680)='./file0\x00', 0x0)

14:41:24 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000100))

[   65.152490] audit: type=1400 audit(1662993685.005:6): avc:  denied  { execmem } for  pid=285 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
14:41:25 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000100)='./file0\x00', 0x5a97fcc6cf383e4a)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

14:41:25 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000002180)={{}, {}, [], {}, [{0x8, 0x0, 0xffffffffffffffff}]}, 0x2c, 0x0)

14:41:25 executing program 7:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x5437, 0x0)
ioctl$TIOCSPGRP(r0, 0x5410, 0x0)

[   66.461242] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   66.463040] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   66.464475] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   66.466223] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   66.467229] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   66.468918] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   66.469999] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   66.474918] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   66.476079] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   66.478025] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   66.479572] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   66.480739] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   66.482004] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   66.512023] Bluetooth: hci3: HCI_REQ-0x0c1a
[   66.514127] Bluetooth: hci2: HCI_REQ-0x0c1a
[   66.521158] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   66.523111] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   66.555361] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   66.557256] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   66.558814] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   66.560274] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   66.561679] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   66.563930] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   66.566528] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   66.568161] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   66.569483] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   66.571276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   66.572834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   66.574017] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   66.575924] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   66.577335] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   66.578847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   66.580463] Bluetooth: hci5: HCI_REQ-0x0c1a
[   66.582979] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   66.588940] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   66.590152] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   66.597719] Bluetooth: hci1: HCI_REQ-0x0c1a
[   66.598086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   66.604025] Bluetooth: hci4: HCI_REQ-0x0c1a
[   66.604857] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   66.606486] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   66.614381] Bluetooth: hci0: HCI_REQ-0x0c1a
[   66.616522] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   66.629757] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   66.631475] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   66.633139] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   66.634209] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   66.635900] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   66.641812] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   66.645720] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   66.647093] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   66.649003] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   66.651942] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   66.656110] Bluetooth: hci6: HCI_REQ-0x0c1a
[   66.671852] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   66.683106] Bluetooth: hci7: HCI_REQ-0x0c1a
[   68.532236] Bluetooth: hci2: command 0x0409 tx timeout
[   68.596024] Bluetooth: hci5: command 0x0409 tx timeout
[   68.596783] Bluetooth: hci3: command 0x0409 tx timeout
[   68.659496] Bluetooth: hci0: command 0x0409 tx timeout
[   68.659548] Bluetooth: hci6: command 0x0409 tx timeout
[   68.661102] Bluetooth: hci1: command 0x0409 tx timeout
[   68.663385] Bluetooth: hci4: command 0x0409 tx timeout
[   68.723475] Bluetooth: hci7: command 0x0409 tx timeout
[   70.579499] Bluetooth: hci2: command 0x041b tx timeout
[   70.644477] Bluetooth: hci3: command 0x041b tx timeout
[   70.644949] Bluetooth: hci5: command 0x041b tx timeout
[   70.707470] Bluetooth: hci4: command 0x041b tx timeout
[   70.707935] Bluetooth: hci1: command 0x041b tx timeout
[   70.709168] Bluetooth: hci6: command 0x041b tx timeout
[   70.709724] Bluetooth: hci0: command 0x041b tx timeout
[   70.771444] Bluetooth: hci7: command 0x041b tx timeout
[   72.627961] Bluetooth: hci2: command 0x040f tx timeout
[   72.691463] Bluetooth: hci5: command 0x040f tx timeout
[   72.692012] Bluetooth: hci3: command 0x040f tx timeout
[   72.755475] Bluetooth: hci0: command 0x040f tx timeout
[   72.755993] Bluetooth: hci6: command 0x040f tx timeout
[   72.757369] Bluetooth: hci1: command 0x040f tx timeout
[   72.757924] Bluetooth: hci4: command 0x040f tx timeout
[   72.819456] Bluetooth: hci7: command 0x040f tx timeout
[   74.676516] Bluetooth: hci2: command 0x0419 tx timeout
[   74.739490] Bluetooth: hci3: command 0x0419 tx timeout
[   74.739969] Bluetooth: hci5: command 0x0419 tx timeout
[   74.804544] Bluetooth: hci4: command 0x0419 tx timeout
[   74.806218] Bluetooth: hci1: command 0x0419 tx timeout
[   74.806672] Bluetooth: hci6: command 0x0419 tx timeout
[   74.807085] Bluetooth: hci0: command 0x0419 tx timeout
[   74.868531] Bluetooth: hci7: command 0x0419 tx timeout
14:42:17 executing program 4:
r0 = open$dir(&(0x7f0000000200)='.\x00', 0x0, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0)
getdents64(r0, &(0x7f00000000c0)=""/120, 0x78)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab', 0x0, 0x0)
lseek(r2, 0x2000005, 0x0)
getdents64(r2, &(0x7f0000000240)=""/226, 0x20000258)

[  117.520009] audit: type=1400 audit(1662993737.372:7): avc:  denied  { open } for  pid=3722 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  117.522016] audit: type=1400 audit(1662993737.372:8): avc:  denied  { kernel } for  pid=3722 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  117.547913] ------------[ cut here ]------------
[  117.547949] 
[  117.547953] ======================================================
[  117.547957] WARNING: possible circular locking dependency detected
[  117.547961] 6.0.0-rc5-next-20220912 #1 Not tainted
[  117.547968] ------------------------------------------------------
[  117.547972] syz-executor.4/3727 is trying to acquire lock:
[  117.547978] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70
[  117.548018] 
[  117.548018] but task is already holding lock:
[  117.548021] ffff88803edd9820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  117.548049] 
[  117.548049] which lock already depends on the new lock.
[  117.548049] 
[  117.548053] 
[  117.548053] the existing dependency chain (in reverse order) is:
[  117.548056] 
[  117.548056] -> #3 (&ctx->lock){....}-{2:2}:
[  117.548070]        _raw_spin_lock+0x2a/0x40
[  117.548087]        __perf_event_task_sched_out+0x53b/0x18d0
[  117.548099]        __schedule+0xedd/0x2470
[  117.548109]        schedule+0xda/0x1b0
[  117.548118]        futex_wait_queue+0xf5/0x1e0
[  117.548130]        futex_wait+0x28e/0x690
[  117.548140]        do_futex+0x2ff/0x380
[  117.548149]        __x64_sys_futex+0x1c6/0x4d0
[  117.548159]        do_syscall_64+0x3b/0x90
[  117.548173]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  117.548190] 
[  117.548190] -> #2 (&rq->__lock){-.-.}-{2:2}:
[  117.548222]        _raw_spin_lock_nested+0x30/0x40
[  117.548236]        raw_spin_rq_lock_nested+0x1e/0x30
[  117.548250]        task_fork_fair+0x63/0x4d0
[  117.548267]        sched_cgroup_fork+0x3d0/0x540
[  117.548281]        copy_process+0x3f9e/0x6df0
[  117.548292]        kernel_clone+0xe7/0x890
[  117.548302]        user_mode_thread+0xad/0xf0
[  117.548312]        rest_init+0x24/0x250
[  117.548328]        arch_call_rest_init+0xf/0x14
[  117.548348]        start_kernel+0x4c1/0x4e6
[  117.548365]        secondary_startup_64_no_verify+0xe0/0xeb
[  117.548379] 
[  117.548379] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[  117.548393]        _raw_spin_lock_irqsave+0x39/0x60
[  117.548411]        try_to_wake_up+0xab/0x1920
[  117.548424]        up+0x75/0xb0
[  117.548435]        __up_console_sem+0x6e/0x80
[  117.548452]        console_unlock+0x46a/0x590
[  117.548471]        vprintk_emit+0x1bd/0x560
[  117.548488]        vprintk+0x84/0xa0
[  117.548504]        _printk+0xba/0xf1
[  117.548522]        kauditd_hold_skb.cold+0x3f/0x4e
[  117.548536]        kauditd_send_queue+0x233/0x290
[  117.548551]        kauditd_thread+0x5da/0x9a0
[  117.548566]        kthread+0x2ed/0x3a0
[  117.548581]        ret_from_fork+0x22/0x30
[  117.548593] 
[  117.548593] -> #0 ((console_sem).lock){....}-{2:2}:
[  117.548607]        __lock_acquire+0x2a02/0x5e70
[  117.548624]        lock_acquire+0x1a2/0x530
[  117.548640]        _raw_spin_lock_irqsave+0x39/0x60
[  117.548655]        down_trylock+0xe/0x70
[  117.548667]        __down_trylock_console_sem+0x3b/0xd0
[  117.548684]        vprintk_emit+0x16b/0x560
[  117.548700]        vprintk+0x84/0xa0
[  117.548717]        _printk+0xba/0xf1
[  117.548733]        report_bug.cold+0x72/0xab
[  117.548745]        handle_bug+0x3c/0x70
[  117.548758]        exc_invalid_op+0x14/0x50
[  117.548771]        asm_exc_invalid_op+0x16/0x20
[  117.548787]        group_sched_out.part.0+0x2c7/0x460
[  117.548798]        ctx_sched_out+0x8f1/0xc10
[  117.548808]        __perf_event_task_sched_out+0x6d0/0x18d0
[  117.548820]        __schedule+0xedd/0x2470
[  117.548829]        schedule+0xda/0x1b0
[  117.548838]        futex_wait_queue+0xf5/0x1e0
[  117.548849]        futex_wait+0x28e/0x690
[  117.548858]        do_futex+0x2ff/0x380
[  117.548867]        __x64_sys_futex+0x1c6/0x4d0
[  117.548877]        do_syscall_64+0x3b/0x90
[  117.548890]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  117.548907] 
[  117.548907] other info that might help us debug this:
[  117.548907] 
[  117.548909] Chain exists of:
[  117.548909]   (console_sem).lock --> &rq->__lock --> &ctx->lock
[  117.548909] 
[  117.548924]  Possible unsafe locking scenario:
[  117.548924] 
[  117.548927]        CPU0                    CPU1
[  117.548929]        ----                    ----
[  117.548931]   lock(&ctx->lock);
[  117.548937]                                lock(&rq->__lock);
[  117.548943]                                lock(&ctx->lock);
[  117.548950]   lock((console_sem).lock);
[  117.548956] 
[  117.548956]  *** DEADLOCK ***
[  117.548956] 
[  117.548957] 2 locks held by syz-executor.4/3727:
[  117.548964]  #0: ffff88806cf37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[  117.548990]  #1: ffff88803edd9820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  117.549017] 
[  117.549017] stack backtrace:
[  117.549020] CPU: 1 PID: 3727 Comm: syz-executor.4 Not tainted 6.0.0-rc5-next-20220912 #1
[  117.549033] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  117.549042] Call Trace:
[  117.549045]  <TASK>
[  117.549050]  dump_stack_lvl+0x8b/0xb3
[  117.549065]  check_noncircular+0x263/0x2e0
[  117.549081]  ? format_decode+0x26c/0xb50
[  117.549099]  ? print_circular_bug+0x450/0x450
[  117.549119]  ? queued_spin_lock_slowpath+0xcd/0xc80
[  117.549137]  ? format_decode+0x26c/0xb50
[  117.549152]  ? alloc_chain_hlocks+0x1ec/0x5a0
[  117.549170]  __lock_acquire+0x2a02/0x5e70
[  117.549192]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  117.549215]  lock_acquire+0x1a2/0x530
[  117.549232]  ? down_trylock+0xe/0x70
[  117.549247]  ? rcu_read_unlock+0x40/0x40
[  117.549268]  ? vprintk+0x84/0xa0
[  117.549286]  _raw_spin_lock_irqsave+0x39/0x60
[  117.549302]  ? down_trylock+0xe/0x70
[  117.549315]  down_trylock+0xe/0x70
[  117.549329]  ? vprintk+0x84/0xa0
[  117.549346]  __down_trylock_console_sem+0x3b/0xd0
[  117.549364]  vprintk_emit+0x16b/0x560
[  117.549383]  vprintk+0x84/0xa0
[  117.549401]  _printk+0xba/0xf1
[  117.549419]  ? record_print_text.cold+0x16/0x16
[  117.549441]  ? report_bug.cold+0x66/0xab
[  117.549455]  ? group_sched_out.part.0+0x2c7/0x460
[  117.549466]  report_bug.cold+0x72/0xab
[  117.549481]  handle_bug+0x3c/0x70
[  117.549495]  exc_invalid_op+0x14/0x50
[  117.549509]  asm_exc_invalid_op+0x16/0x20
[  117.549526] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  117.549540] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  117.549552] RSP: 0018:ffff8880207378f8 EFLAGS: 00010006
[  117.549561] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  117.549568] RDX: ffff8880154db580 RSI: ffffffff81566027 RDI: 0000000000000005
[  117.549576] RBP: ffff88803eaf8000 R08: 0000000000000005 R09: 0000000000000001
[  117.549584] R10: 0000000000000000 R11: ffffffff865aa05b R12: ffff88803edd9800
[  117.549592] R13: ffff88806cf3d100 R14: ffffffff8547c660 R15: 0000000000000002
[  117.549603]  ? group_sched_out.part.0+0x2c7/0x460
[  117.549616]  ? group_sched_out.part.0+0x2c7/0x460
[  117.549629]  ctx_sched_out+0x8f1/0xc10
[  117.549642]  __perf_event_task_sched_out+0x6d0/0x18d0
[  117.549657]  ? lock_is_held_type+0xd7/0x130
[  117.549676]  ? __perf_cgroup_move+0x160/0x160
[  117.549687]  ? set_next_entity+0x304/0x550
[  117.549708]  ? lock_is_held_type+0xd7/0x130
[  117.549726]  __schedule+0xedd/0x2470
[  117.549739]  ? io_schedule_timeout+0x150/0x150
[  117.549750]  ? futex_wait_setup+0x166/0x230
[  117.549764]  schedule+0xda/0x1b0
[  117.549775]  futex_wait_queue+0xf5/0x1e0
[  117.549787]  futex_wait+0x28e/0x690
[  117.549799]  ? futex_wait_setup+0x230/0x230
[  117.549812]  ? wake_up_q+0x8b/0xf0
[  117.549826]  ? do_raw_spin_unlock+0x4f/0x220
[  117.549846]  ? futex_wake+0x158/0x490
[  117.549862]  ? fd_install+0x1f9/0x640
[  117.549879]  do_futex+0x2ff/0x380
[  117.549890]  ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0
[  117.549906]  __x64_sys_futex+0x1c6/0x4d0
[  117.549918]  ? __x64_sys_futex_time32+0x480/0x480
[  117.549931]  ? syscall_enter_from_user_mode+0x1d/0x50
[  117.549949]  ? syscall_enter_from_user_mode+0x1d/0x50
[  117.549969]  do_syscall_64+0x3b/0x90
[  117.549983]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  117.550001] RIP: 0033:0x7f16fe578b19
[  117.550009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  117.550020] RSP: 002b:00007f16fbaee218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  117.550031] RAX: ffffffffffffffda RBX: 00007f16fe68bf68 RCX: 00007f16fe578b19
[  117.550039] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f16fe68bf68
[  117.550047] RBP: 00007f16fe68bf60 R08: 0000000000000000 R09: 0000000000000000
[  117.550054] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f16fe68bf6c
[  117.550061] R13: 00007ffd4fec2faf R14: 00007f16fbaee300 R15: 0000000000022000
[  117.550074]  </TASK>
[  117.609972] WARNING: CPU: 1 PID: 3727 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[  117.610657] Modules linked in:
[  117.610902] CPU: 1 PID: 3727 Comm: syz-executor.4 Not tainted 6.0.0-rc5-next-20220912 #1
[  117.611496] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  117.612327] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  117.612733] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  117.614089] RSP: 0018:ffff8880207378f8 EFLAGS: 00010006
[  117.614496] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  117.615022] RDX: ffff8880154db580 RSI: ffffffff81566027 RDI: 0000000000000005
[  117.615551] RBP: ffff88803eaf8000 R08: 0000000000000005 R09: 0000000000000001
[  117.616077] R10: 0000000000000000 R11: ffffffff865aa05b R12: ffff88803edd9800
[  117.616648] R13: ffff88806cf3d100 R14: ffffffff8547c660 R15: 0000000000000002
[  117.617168] FS:  00007f16fbaee700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[  117.617777] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  117.618200] CR2: 00007fdee3550260 CR3: 0000000040236000 CR4: 0000000000350ee0
[  117.618720] Call Trace:
[  117.618917]  <TASK>
[  117.619109]  ctx_sched_out+0x8f1/0xc10
[  117.619485]  __perf_event_task_sched_out+0x6d0/0x18d0
[  117.619893]  ? lock_is_held_type+0xd7/0x130
[  117.620248]  ? __perf_cgroup_move+0x160/0x160
[  117.620600]  ? set_next_entity+0x304/0x550
[  117.620926]  ? lock_is_held_type+0xd7/0x130
[  117.621252]  __schedule+0xedd/0x2470
[  117.621545]  ? io_schedule_timeout+0x150/0x150
[  117.621893]  ? futex_wait_setup+0x166/0x230
[  117.622217]  schedule+0xda/0x1b0
[  117.622486]  futex_wait_queue+0xf5/0x1e0
[  117.622792]  futex_wait+0x28e/0x690
[  117.623065]  ? futex_wait_setup+0x230/0x230
[  117.623393]  ? wake_up_q+0x8b/0xf0
[  117.623668]  ? do_raw_spin_unlock+0x4f/0x220
[  117.624008]  ? futex_wake+0x158/0x490
[  117.624309]  ? fd_install+0x1f9/0x640
[  117.624623]  do_futex+0x2ff/0x380
[  117.624888]  ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0
[  117.625325]  __x64_sys_futex+0x1c6/0x4d0
[  117.625639]  ? __x64_sys_futex_time32+0x480/0x480
[  117.625996]  ? syscall_enter_from_user_mode+0x1d/0x50
[  117.626393]  ? syscall_enter_from_user_mode+0x1d/0x50
[  117.626788]  do_syscall_64+0x3b/0x90
[  117.627066]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  117.627465] RIP: 0033:0x7f16fe578b19
[  117.627744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  117.629093] RSP: 002b:00007f16fbaee218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  117.629664] RAX: ffffffffffffffda RBX: 00007f16fe68bf68 RCX: 00007f16fe578b19
[  117.630188] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f16fe68bf68
[  117.630729] RBP: 00007f16fe68bf60 R08: 0000000000000000 R09: 0000000000000000
[  117.631252] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f16fe68bf6c
[  117.631781] R13: 00007ffd4fec2faf R14: 00007f16fbaee300 R15: 0000000000022000
[  117.632315]  </TASK>
[  117.632498] irq event stamp: 1406
[  117.632751] hardirqs last  enabled at (1405): [<ffffffff8423e76d>] syscall_enter_from_user_mode+0x1d/0x50
[  117.633459] hardirqs last disabled at (1406): [<ffffffff84247a45>] __schedule+0x1225/0x2470
[  117.634073] softirqs last  enabled at (1392): [<ffffffff8117060b>] __irq_exit_rcu+0x11b/0x180
[  117.634727] softirqs last disabled at (1253): [<ffffffff8117060b>] __irq_exit_rcu+0x11b/0x180
[  117.635370] ---[ end trace 0000000000000000 ]---
14:42:17 executing program 4:
r0 = open$dir(&(0x7f0000000200)='.\x00', 0x0, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0)
getdents64(r0, &(0x7f00000000c0)=""/120, 0x78)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab', 0x0, 0x0)
lseek(r2, 0x2000005, 0x0)
getdents64(r2, &(0x7f0000000240)=""/226, 0x20000258)

[  117.829416] hrtimer: interrupt took 18304 ns
14:42:18 executing program 4:
r0 = open$dir(&(0x7f0000000200)='.\x00', 0x0, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0)
getdents64(r0, &(0x7f00000000c0)=""/120, 0x78)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab', 0x0, 0x0)
lseek(r2, 0x2000005, 0x0)
getdents64(r2, &(0x7f0000000240)=""/226, 0x20000258)

14:42:18 executing program 4:
r0 = open$dir(&(0x7f0000000200)='.\x00', 0x0, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0)
getdents64(r0, &(0x7f00000000c0)=""/120, 0x78)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab', 0x0, 0x0)
lseek(r2, 0x2000005, 0x0)
getdents64(r2, &(0x7f0000000240)=""/226, 0x20000258)

14:42:18 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000100)='./file0\x00', 0x5a97fcc6cf383e4a)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

14:42:18 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000100)='./file0\x00', 0x5a97fcc6cf383e4a)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

14:42:18 executing program 4:
r0 = open$dir(&(0x7f0000000200)='.\x00', 0x0, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0)
getdents64(r0, &(0x7f00000000c0)=""/120, 0x78)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab', 0x0, 0x0)
lseek(r2, 0x2000005, 0x0)
getdents64(r2, &(0x7f0000000240)=""/226, 0x20000258)

14:42:18 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000100)='./file0\x00', 0x5a97fcc6cf383e4a)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)

14:42:20 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x2, @in6=@mcast2}}, 0xe8)

14:42:20 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x49, &(0x7f0000000180)=0x8000, 0x4)
setsockopt$sock_int(r0, 0x1, 0x49, &(0x7f0000000180)=0x7, 0x4)

14:42:20 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
lchown(&(0x7f0000000140)='./file0\x00', r0, 0x0)
utime(&(0x7f0000000680)='./file0\x00', 0x0)

14:42:20 executing program 2:
syz_io_uring_setup(0x14eb, &(0x7f0000000280), &(0x7f0000005000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x100000001)
syz_io_uring_setup(0x4917, &(0x7f0000000180)={0x0, 0x9f8, 0x20, 0x0, 0x128, 0x0, r0}, &(0x7f0000007000/0x1000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000200))
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000000000), 0x4)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r2, 0x0, 0x0, 0x87ffffc)
ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000140)={0x0, 0x200})
sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb0, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9d6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffbff}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x801}, 0x8040)

14:42:20 executing program 5:
r0 = open$dir(&(0x7f0000000200)='.\x00', 0x0, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0)
getdents64(r0, &(0x7f00000000c0)=""/120, 0x78)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab', 0x0, 0x0)
lseek(r2, 0x2000005, 0x0)
getdents64(r2, &(0x7f0000000240)=""/226, 0x20000258)

14:42:20 executing program 4:
r0 = open$dir(&(0x7f0000000200)='.\x00', 0x0, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0)
getdents64(r0, &(0x7f00000000c0)=""/120, 0x78)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab', 0x0, 0x0)
lseek(r2, 0x2000005, 0x0)
getdents64(r2, &(0x7f0000000240)=""/226, 0x20000258)

14:42:20 executing program 7:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x5437, 0x0)
ioctl$TIOCSPGRP(r0, 0x5410, 0x0)

14:42:20 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000002180)={{}, {}, [], {}, [{0x8, 0x0, 0xffffffffffffffff}]}, 0x2c, 0x0)

14:42:20 executing program 7:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x5437, 0x0)
ioctl$TIOCSPGRP(r0, 0x5410, 0x0)

14:42:20 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x49, &(0x7f0000000180)=0x8000, 0x4)
setsockopt$sock_int(r0, 0x1, 0x49, &(0x7f0000000180)=0x7, 0x4)

14:42:20 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x2, @in6=@mcast2}}, 0xe8)

14:42:20 executing program 4:
r0 = open$dir(&(0x7f0000000200)='.\x00', 0x0, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0)
getdents64(r0, &(0x7f00000000c0)=""/120, 0x78)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab', 0x0, 0x0)
lseek(r2, 0x2000005, 0x0)
getdents64(r2, &(0x7f0000000240)=""/226, 0x20000258)

14:42:20 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000002180)={{}, {}, [], {}, [{0x8, 0x0, 0xffffffffffffffff}]}, 0x2c, 0x0)

14:42:20 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
lchown(&(0x7f0000000140)='./file0\x00', r0, 0x0)
utime(&(0x7f0000000680)='./file0\x00', 0x0)

14:42:20 executing program 5:
r0 = open$dir(&(0x7f0000000200)='.\x00', 0x0, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0)
getdents64(r0, &(0x7f00000000c0)=""/120, 0x78)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab', 0x0, 0x0)
lseek(r2, 0x2000005, 0x0)
getdents64(r2, &(0x7f0000000240)=""/226, 0x20000258)

14:42:20 executing program 7:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x5437, 0x0)
ioctl$TIOCSPGRP(r0, 0x5410, 0x0)

14:42:20 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x49, &(0x7f0000000180)=0x8000, 0x4)
setsockopt$sock_int(r0, 0x1, 0x49, &(0x7f0000000180)=0x7, 0x4)

14:42:20 executing program 2:
syz_io_uring_setup(0x14eb, &(0x7f0000000280), &(0x7f0000005000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x100000001)
syz_io_uring_setup(0x4917, &(0x7f0000000180)={0x0, 0x9f8, 0x20, 0x0, 0x128, 0x0, r0}, &(0x7f0000007000/0x1000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000200))
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000000000), 0x4)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r2, 0x0, 0x0, 0x87ffffc)
ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000140)={0x0, 0x200})
sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb0, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9d6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffbff}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x801}, 0x8040)

14:42:20 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
lchown(&(0x7f0000000140)='./file0\x00', r0, 0x0)
utime(&(0x7f0000000680)='./file0\x00', 0x0)

14:42:20 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x2, @in6=@mcast2}}, 0xe8)

14:42:20 executing program 7:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x49, &(0x7f0000000180)=0x8000, 0x4)
setsockopt$sock_int(r0, 0x1, 0x49, &(0x7f0000000180)=0x7, 0x4)

14:42:20 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000002180)={{}, {}, [], {}, [{0x8, 0x0, 0xffffffffffffffff}]}, 0x2c, 0x0)

14:42:20 executing program 5:
r0 = open$dir(&(0x7f0000000200)='.\x00', 0x0, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0)
getdents64(r0, &(0x7f00000000c0)=""/120, 0x78)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab', 0x0, 0x0)
lseek(r2, 0x2000005, 0x0)
getdents64(r2, &(0x7f0000000240)=""/226, 0x20000258)

14:42:21 executing program 6:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1}, 0x14}}, 0x0)

14:42:21 executing program 2:
syz_io_uring_setup(0x14eb, &(0x7f0000000280), &(0x7f0000005000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x100000001)
syz_io_uring_setup(0x4917, &(0x7f0000000180)={0x0, 0x9f8, 0x20, 0x0, 0x128, 0x0, r0}, &(0x7f0000007000/0x1000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000200))
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000000000), 0x4)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r2, 0x0, 0x0, 0x87ffffc)
ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000140)={0x0, 0x200})
sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb0, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9d6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffbff}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x801}, 0x8040)

14:42:21 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00')
preadv2(r0, &(0x7f0000000380)=[{&(0x7f0000001c40)=""/159, 0x7ffff000}], 0x1, 0x2, 0x0, 0x0)

14:42:21 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

14:42:21 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x5437, 0x0)
ioctl$TIOCSPGRP(r0, 0x5410, 0x0)

14:42:21 executing program 7:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x49, &(0x7f0000000180)=0x8000, 0x4)
setsockopt$sock_int(r0, 0x1, 0x49, &(0x7f0000000180)=0x7, 0x4)

14:42:21 executing program 5:
r0 = io_uring_setup(0x454a, &(0x7f0000000240))
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = dup(r1)
read$eventfd(r2, &(0x7f0000000040), 0x8)
close_range(r0, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
dup(r3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1030c2, 0x0)

14:42:21 executing program 3:
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000005, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14)
setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000000c0)={@loopback}, 0x14)

14:42:21 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x5437, 0x0)
ioctl$TIOCSPGRP(r0, 0x5410, 0x0)

14:42:21 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
io_setup(0x40, &(0x7f0000000240)=<r0=>0x0)
r1 = eventfd2(0x0, 0x0)
io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
io_cancel(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)

14:42:21 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00')
preadv2(r0, &(0x7f0000000380)=[{&(0x7f0000001c40)=""/159, 0x7ffff000}], 0x1, 0x2, 0x0, 0x0)

14:42:21 executing program 7:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x49, &(0x7f0000000180)=0x8000, 0x4)
setsockopt$sock_int(r0, 0x1, 0x49, &(0x7f0000000180)=0x7, 0x4)

14:42:21 executing program 3:
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000005, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14)
setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000000c0)={@loopback}, 0x14)

14:42:21 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_SCRNMAP(r0, 0x5437, 0x0)
ioctl$TIOCSPGRP(r0, 0x5410, 0x0)

14:42:21 executing program 5:
r0 = io_uring_setup(0x454a, &(0x7f0000000240))
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = dup(r1)
read$eventfd(r2, &(0x7f0000000040), 0x8)
close_range(r0, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
dup(r3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1030c2, 0x0)

14:42:21 executing program 7:
epoll_pwait2(0xffffffffffffffff, &(0x7f0000000400)=[{}], 0x1, 0x0, 0x0, 0x0)

14:42:21 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000040))

14:42:21 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00')
preadv2(r0, &(0x7f0000000380)=[{&(0x7f0000001c40)=""/159, 0x7ffff000}], 0x1, 0x2, 0x0, 0x0)

14:42:21 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
io_setup(0x40, &(0x7f0000000240)=<r0=>0x0)
r1 = eventfd2(0x0, 0x0)
io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
io_cancel(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)

14:42:21 executing program 3:
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000005, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14)
setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000000c0)={@loopback}, 0x14)

14:42:21 executing program 7:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_io_uring_submit(0x0, r2, &(0x7f0000000480)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xff)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x54, &(0x7f0000000300)=@pppol2tpv3}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000300)=ANY=[@ANYBLOB="010003000000000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x101, 0x1, &(0x7f0000000380)=[{&(0x7f00000001c0)="e6c9d0a24b9e058b9ceec5aec42019f6bddb6301090880b2149201c896a7b8d195ecf0409b3929caac18b72952b484f147e4c8fec2dd2d7a0d684e52fa6d334470d5f03d9121d126aea92c7281051d9aaf715bb53f7c7bd674e0ab6fbf52fd00358747d04fd2465d5d7df50e01cbaf7b0ecd44db236383833dff5439c2d673618e53155112ddfaa36a8e6a12e45b4566c6bfb9e08152f06c1e28fb45b5d73222bda01bdd75fe5d1f8f09f9ea29a6e234ff948bba74efb5bb0f13321d8190808669f3921b8889ac", 0xc7, 0x6}], 0x1800840, &(0x7f00000003c0)={[{@iocharset={'iocharset', 0x3d, 'cp860'}}, {@shortname_win95}, {@utf8}, {@shortname_winnt}, {@shortname_lower}, {@utf8}, {@utf8no}, {@uni_xlate}], [{@euid_lt={'euid<', 0xee01}}, {@subj_user={'subj_user', 0x3d, '/]$'}}]})
io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0)
r4 = syz_io_uring_setup(0x46ac, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
dup2(r4, r4)

14:42:21 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000040))

14:42:21 executing program 4:
r0 = socket$inet(0x2, 0x3, 0x8)
setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000200), 0x88)

14:42:21 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00')
preadv2(r0, &(0x7f0000000380)=[{&(0x7f0000001c40)=""/159, 0x7ffff000}], 0x1, 0x2, 0x0, 0x0)

14:42:21 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

14:42:21 executing program 5:
r0 = io_uring_setup(0x454a, &(0x7f0000000240))
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = dup(r1)
read$eventfd(r2, &(0x7f0000000040), 0x8)
close_range(r0, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
dup(r3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1030c2, 0x0)

14:42:21 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000040))

[  122.107002] =======================================================
[  122.107002] WARNING: The mand mount option has been deprecated and
[  122.107002]          and is ignored by this kernel. Remove the mand
[  122.107002]          option from the mount to silence this warning.
[  122.107002] =======================================================
[  122.110015] FAT-fs (loop7): Unrecognized mount option "euid<00000000000000060929" or missing value
14:42:21 executing program 4:
r0 = socket$inet(0x2, 0x3, 0x8)
setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000200), 0x88)

[  122.130134] FAT-fs (loop7): Unrecognized mount option "euid<00000000000000060929" or missing value
14:42:21 executing program 3:
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000005, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14)
setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000000c0)={@loopback}, 0x14)

14:42:22 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
io_setup(0x40, &(0x7f0000000240)=<r0=>0x0)
r1 = eventfd2(0x0, 0x0)
io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
io_cancel(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)

14:42:22 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
io_setup(0x40, &(0x7f0000000240)=<r0=>0x0)
r1 = eventfd2(0x0, 0x0)
io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
io_cancel(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)

14:42:22 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

14:42:22 executing program 5:
r0 = io_uring_setup(0x454a, &(0x7f0000000240))
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = dup(r1)
read$eventfd(r2, &(0x7f0000000040), 0x8)
close_range(r0, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
dup(r3)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1030c2, 0x0)

14:42:22 executing program 3:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_io_uring_submit(0x0, r2, &(0x7f0000000480)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xff)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x54, &(0x7f0000000300)=@pppol2tpv3}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000300)=ANY=[@ANYBLOB="010003000000000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x101, 0x1, &(0x7f0000000380)=[{&(0x7f00000001c0)="e6c9d0a24b9e058b9ceec5aec42019f6bddb6301090880b2149201c896a7b8d195ecf0409b3929caac18b72952b484f147e4c8fec2dd2d7a0d684e52fa6d334470d5f03d9121d126aea92c7281051d9aaf715bb53f7c7bd674e0ab6fbf52fd00358747d04fd2465d5d7df50e01cbaf7b0ecd44db236383833dff5439c2d673618e53155112ddfaa36a8e6a12e45b4566c6bfb9e08152f06c1e28fb45b5d73222bda01bdd75fe5d1f8f09f9ea29a6e234ff948bba74efb5bb0f13321d8190808669f3921b8889ac", 0xc7, 0x6}], 0x1800840, &(0x7f00000003c0)={[{@iocharset={'iocharset', 0x3d, 'cp860'}}, {@shortname_win95}, {@utf8}, {@shortname_winnt}, {@shortname_lower}, {@utf8}, {@utf8no}, {@uni_xlate}], [{@euid_lt={'euid<', 0xee01}}, {@subj_user={'subj_user', 0x3d, '/]$'}}]})
io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0)
r4 = syz_io_uring_setup(0x46ac, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
dup2(r4, r4)

14:42:22 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000040))

14:42:22 executing program 7:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_io_uring_submit(0x0, r2, &(0x7f0000000480)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xff)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x54, &(0x7f0000000300)=@pppol2tpv3}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000300)=ANY=[@ANYBLOB="010003000000000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x101, 0x1, &(0x7f0000000380)=[{&(0x7f00000001c0)="e6c9d0a24b9e058b9ceec5aec42019f6bddb6301090880b2149201c896a7b8d195ecf0409b3929caac18b72952b484f147e4c8fec2dd2d7a0d684e52fa6d334470d5f03d9121d126aea92c7281051d9aaf715bb53f7c7bd674e0ab6fbf52fd00358747d04fd2465d5d7df50e01cbaf7b0ecd44db236383833dff5439c2d673618e53155112ddfaa36a8e6a12e45b4566c6bfb9e08152f06c1e28fb45b5d73222bda01bdd75fe5d1f8f09f9ea29a6e234ff948bba74efb5bb0f13321d8190808669f3921b8889ac", 0xc7, 0x6}], 0x1800840, &(0x7f00000003c0)={[{@iocharset={'iocharset', 0x3d, 'cp860'}}, {@shortname_win95}, {@utf8}, {@shortname_winnt}, {@shortname_lower}, {@utf8}, {@utf8no}, {@uni_xlate}], [{@euid_lt={'euid<', 0xee01}}, {@subj_user={'subj_user', 0x3d, '/]$'}}]})
io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0)
r4 = syz_io_uring_setup(0x46ac, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
dup2(r4, r4)

14:42:22 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
io_setup(0x40, &(0x7f0000000240)=<r0=>0x0)
r1 = eventfd2(0x0, 0x0)
io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
io_cancel(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)

14:42:22 executing program 4:
r0 = socket$inet(0x2, 0x3, 0x8)
setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000200), 0x88)

14:42:22 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
io_setup(0x40, &(0x7f0000000240)=<r0=>0x0)
r1 = eventfd2(0x0, 0x0)
io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
io_cancel(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)

[  123.013105] FAT-fs (loop3): Unrecognized mount option "euid<00000000000000060929" or missing value
[  123.024108] FAT-fs (loop7): Unrecognized mount option "euid<00000000000000060929" or missing value
14:42:22 executing program 4:
r0 = socket$inet(0x2, 0x3, 0x8)
setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000200), 0x88)

14:42:22 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
io_setup(0x40, &(0x7f0000000240)=<r0=>0x0)
r1 = eventfd2(0x0, 0x0)
io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
io_cancel(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)

14:42:22 executing program 3:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_io_uring_submit(0x0, r2, &(0x7f0000000480)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xff)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x54, &(0x7f0000000300)=@pppol2tpv3}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000300)=ANY=[@ANYBLOB="010003000000000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x101, 0x1, &(0x7f0000000380)=[{&(0x7f00000001c0)="e6c9d0a24b9e058b9ceec5aec42019f6bddb6301090880b2149201c896a7b8d195ecf0409b3929caac18b72952b484f147e4c8fec2dd2d7a0d684e52fa6d334470d5f03d9121d126aea92c7281051d9aaf715bb53f7c7bd674e0ab6fbf52fd00358747d04fd2465d5d7df50e01cbaf7b0ecd44db236383833dff5439c2d673618e53155112ddfaa36a8e6a12e45b4566c6bfb9e08152f06c1e28fb45b5d73222bda01bdd75fe5d1f8f09f9ea29a6e234ff948bba74efb5bb0f13321d8190808669f3921b8889ac", 0xc7, 0x6}], 0x1800840, &(0x7f00000003c0)={[{@iocharset={'iocharset', 0x3d, 'cp860'}}, {@shortname_win95}, {@utf8}, {@shortname_winnt}, {@shortname_lower}, {@utf8}, {@utf8no}, {@uni_xlate}], [{@euid_lt={'euid<', 0xee01}}, {@subj_user={'subj_user', 0x3d, '/]$'}}]})
io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0)
r4 = syz_io_uring_setup(0x46ac, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
dup2(r4, r4)

[  123.122744] FAT-fs (loop3): Unrecognized mount option "euid<00000000000000060929" or missing value
14:42:22 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
io_setup(0x40, &(0x7f0000000240)=<r0=>0x0)
r1 = eventfd2(0x0, 0x0)
io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
io_cancel(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)

14:42:23 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20}, {0x6}]}, 0x10)

14:42:23 executing program 7:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_io_uring_submit(0x0, r2, &(0x7f0000000480)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xff)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x54, &(0x7f0000000300)=@pppol2tpv3}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000300)=ANY=[@ANYBLOB="010003000000000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x101, 0x1, &(0x7f0000000380)=[{&(0x7f00000001c0)="e6c9d0a24b9e058b9ceec5aec42019f6bddb6301090880b2149201c896a7b8d195ecf0409b3929caac18b72952b484f147e4c8fec2dd2d7a0d684e52fa6d334470d5f03d9121d126aea92c7281051d9aaf715bb53f7c7bd674e0ab6fbf52fd00358747d04fd2465d5d7df50e01cbaf7b0ecd44db236383833dff5439c2d673618e53155112ddfaa36a8e6a12e45b4566c6bfb9e08152f06c1e28fb45b5d73222bda01bdd75fe5d1f8f09f9ea29a6e234ff948bba74efb5bb0f13321d8190808669f3921b8889ac", 0xc7, 0x6}], 0x1800840, &(0x7f00000003c0)={[{@iocharset={'iocharset', 0x3d, 'cp860'}}, {@shortname_win95}, {@utf8}, {@shortname_winnt}, {@shortname_lower}, {@utf8}, {@utf8no}, {@uni_xlate}], [{@euid_lt={'euid<', 0xee01}}, {@subj_user={'subj_user', 0x3d, '/]$'}}]})
io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0)
r4 = syz_io_uring_setup(0x46ac, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
dup2(r4, r4)

[  123.251614] FAT-fs (loop7): Unrecognized mount option "euid<00000000000000060929" or missing value
14:42:23 executing program 3:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_io_uring_submit(0x0, r2, &(0x7f0000000480)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xff)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x54, &(0x7f0000000300)=@pppol2tpv3}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000300)=ANY=[@ANYBLOB="010003000000000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x101, 0x1, &(0x7f0000000380)=[{&(0x7f00000001c0)="e6c9d0a24b9e058b9ceec5aec42019f6bddb6301090880b2149201c896a7b8d195ecf0409b3929caac18b72952b484f147e4c8fec2dd2d7a0d684e52fa6d334470d5f03d9121d126aea92c7281051d9aaf715bb53f7c7bd674e0ab6fbf52fd00358747d04fd2465d5d7df50e01cbaf7b0ecd44db236383833dff5439c2d673618e53155112ddfaa36a8e6a12e45b4566c6bfb9e08152f06c1e28fb45b5d73222bda01bdd75fe5d1f8f09f9ea29a6e234ff948bba74efb5bb0f13321d8190808669f3921b8889ac", 0xc7, 0x6}], 0x1800840, &(0x7f00000003c0)={[{@iocharset={'iocharset', 0x3d, 'cp860'}}, {@shortname_win95}, {@utf8}, {@shortname_winnt}, {@shortname_lower}, {@utf8}, {@utf8no}, {@uni_xlate}], [{@euid_lt={'euid<', 0xee01}}, {@subj_user={'subj_user', 0x3d, '/]$'}}]})
io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0)
r4 = syz_io_uring_setup(0x46ac, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
dup2(r4, r4)

14:42:23 executing program 6:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x4000}, 0x90)

14:42:23 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))

14:42:23 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
io_setup(0x40, &(0x7f0000000240)=<r0=>0x0)
r1 = eventfd2(0x0, 0x0)
io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
io_cancel(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)

14:42:23 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0}}}, 0xb8}}, 0x0)

14:42:23 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20}, {0x6}]}, 0x10)

14:42:23 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

14:42:23 executing program 7:
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_io_uring_submit(0x0, r2, &(0x7f0000000480)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xff)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x54, &(0x7f0000000300)=@pppol2tpv3}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000300)=ANY=[@ANYBLOB="010003000000000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x101, 0x1, &(0x7f0000000380)=[{&(0x7f00000001c0)="e6c9d0a24b9e058b9ceec5aec42019f6bddb6301090880b2149201c896a7b8d195ecf0409b3929caac18b72952b484f147e4c8fec2dd2d7a0d684e52fa6d334470d5f03d9121d126aea92c7281051d9aaf715bb53f7c7bd674e0ab6fbf52fd00358747d04fd2465d5d7df50e01cbaf7b0ecd44db236383833dff5439c2d673618e53155112ddfaa36a8e6a12e45b4566c6bfb9e08152f06c1e28fb45b5d73222bda01bdd75fe5d1f8f09f9ea29a6e234ff948bba74efb5bb0f13321d8190808669f3921b8889ac", 0xc7, 0x6}], 0x1800840, &(0x7f00000003c0)={[{@iocharset={'iocharset', 0x3d, 'cp860'}}, {@shortname_win95}, {@utf8}, {@shortname_winnt}, {@shortname_lower}, {@utf8}, {@utf8no}, {@uni_xlate}], [{@euid_lt={'euid<', 0xee01}}, {@subj_user={'subj_user', 0x3d, '/]$'}}]})
io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0)
r4 = syz_io_uring_setup(0x46ac, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000003c0))
dup2(r4, r4)

[  123.947456] FAT-fs (loop3): Unrecognized mount option "euid<00000000000000060929" or missing value
[  123.987284] FAT-fs (loop7): Unrecognized mount option "euid<00000000000000060929" or missing value
14:42:23 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20}, {0x6}]}, 0x10)

14:42:23 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
io_setup(0x5, &(0x7f0000001940)=<r0=>0x0)
io_destroy(r0)

14:42:23 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
io_setup(0x40, &(0x7f0000000240)=<r0=>0x0)
r1 = eventfd2(0x0, 0x0)
io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
io_cancel(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)

14:42:23 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0}}}, 0xb8}}, 0x0)

14:42:23 executing program 6:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x4000}, 0x90)

14:42:24 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20}, {0x6}]}, 0x10)

14:42:24 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0}}}, 0xb8}}, 0x0)

14:42:24 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
io_setup(0x5, &(0x7f0000001940)=<r0=>0x0)
io_destroy(r0)

14:42:24 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
io_setup(0x5, &(0x7f0000001940)=<r0=>0x0)
io_destroy(r0)

14:42:24 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0}}}, 0xb8}}, 0x0)

14:42:24 executing program 7:
io_setup(0x0, &(0x7f0000001940))

14:42:24 executing program 5:
r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x541b, 0x0)

14:42:24 executing program 6:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x4000}, 0x90)

14:42:24 executing program 2:
pselect6(0x40, &(0x7f00000005c0)={0x1}, &(0x7f0000000600)={0x3}, &(0x7f0000000640)={0x7}, &(0x7f0000000680)={0x77359400}, &(0x7f0000000700)={&(0x7f00000006c0)={[0x81]}, 0x8})

14:42:24 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', <r2=>0x0})
sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @broadcast}}}], 0x20}, 0x0)

[  124.920514] audit: type=1400 audit(1662993744.773:9): avc:  denied  { write } for  pid=4166 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
14:42:24 executing program 7:
move_pages(0xffffffffffffffff, 0x5, &(0x7f0000000000)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x6)
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_adj\x00')
r1 = dup2(r0, r0)
write$P9_RMKNOD(r1, &(0x7f0000000140)={0x14, 0x13, 0x2, {0x4}}, 0x14)
pkey_free(0xffffffffffffffff)

14:42:24 executing program 6:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x4000}, 0x90)

14:42:24 executing program 2:
pselect6(0x40, &(0x7f00000005c0)={0x1}, &(0x7f0000000600)={0x3}, &(0x7f0000000640)={0x7}, &(0x7f0000000680)={0x77359400}, &(0x7f0000000700)={&(0x7f00000006c0)={[0x81]}, 0x8})

14:42:24 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
io_setup(0x5, &(0x7f0000001940)=<r0=>0x0)
io_destroy(r0)

14:42:24 executing program 5:
r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x541b, 0x0)

14:42:24 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
io_setup(0x5, &(0x7f0000001940)=<r0=>0x0)
io_destroy(r0)

14:42:24 executing program 1:
ustat(0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x1ff)
close(0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
close(0xffffffffffffffff)
ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

[  125.121973] syz-executor.0 (4174) used greatest stack depth: 24664 bytes left
14:42:25 executing program 7:
move_pages(0xffffffffffffffff, 0x5, &(0x7f0000000000)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x6)
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_adj\x00')
r1 = dup2(r0, r0)
write$P9_RMKNOD(r1, &(0x7f0000000140)={0x14, 0x13, 0x2, {0x4}}, 0x14)
pkey_free(0xffffffffffffffff)

14:42:25 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
io_setup(0x5, &(0x7f0000001940)=<r0=>0x0)
io_destroy(r0)

14:42:25 executing program 6:
move_pages(0xffffffffffffffff, 0x5, &(0x7f0000000000)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x6)
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_adj\x00')
r1 = dup2(r0, r0)
write$P9_RMKNOD(r1, &(0x7f0000000140)={0x14, 0x13, 0x2, {0x4}}, 0x14)
pkey_free(0xffffffffffffffff)

14:42:25 executing program 2:
pselect6(0x40, &(0x7f00000005c0)={0x1}, &(0x7f0000000600)={0x3}, &(0x7f0000000640)={0x7}, &(0x7f0000000680)={0x77359400}, &(0x7f0000000700)={&(0x7f00000006c0)={[0x81]}, 0x8})

14:42:25 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', <r2=>0x0})
sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @broadcast}}}], 0x20}, 0x0)

14:42:25 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
io_setup(0x5, &(0x7f0000001940)=<r0=>0x0)
io_destroy(r0)

14:42:25 executing program 5:
r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x541b, 0x0)

14:42:25 executing program 6:
move_pages(0xffffffffffffffff, 0x5, &(0x7f0000000000)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x6)
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_adj\x00')
r1 = dup2(r0, r0)
write$P9_RMKNOD(r1, &(0x7f0000000140)={0x14, 0x13, 0x2, {0x4}}, 0x14)
pkey_free(0xffffffffffffffff)

14:42:25 executing program 7:
move_pages(0xffffffffffffffff, 0x5, &(0x7f0000000000)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x6)
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_adj\x00')
r1 = dup2(r0, r0)
write$P9_RMKNOD(r1, &(0x7f0000000140)={0x14, 0x13, 0x2, {0x4}}, 0x14)
pkey_free(0xffffffffffffffff)

14:42:25 executing program 2:
pselect6(0x40, &(0x7f00000005c0)={0x1}, &(0x7f0000000600)={0x3}, &(0x7f0000000640)={0x7}, &(0x7f0000000680)={0x77359400}, &(0x7f0000000700)={&(0x7f00000006c0)={[0x81]}, 0x8})

14:42:25 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', <r2=>0x0})
sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @broadcast}}}], 0x20}, 0x0)

14:42:25 executing program 1:
ustat(0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x1ff)
close(0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
close(0xffffffffffffffff)
ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

14:42:25 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', <r2=>0x0})
sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @broadcast}}}], 0x20}, 0x0)

14:42:25 executing program 5:
r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x541b, 0x0)

14:42:25 executing program 7:
move_pages(0xffffffffffffffff, 0x5, &(0x7f0000000000)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x6)
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_adj\x00')
r1 = dup2(r0, r0)
write$P9_RMKNOD(r1, &(0x7f0000000140)={0x14, 0x13, 0x2, {0x4}}, 0x14)
pkey_free(0xffffffffffffffff)

14:42:25 executing program 2:
move_pages(0xffffffffffffffff, 0x5, &(0x7f0000000000)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x6)
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_adj\x00')
r1 = dup2(r0, r0)
write$P9_RMKNOD(r1, &(0x7f0000000140)={0x14, 0x13, 0x2, {0x4}}, 0x14)
pkey_free(0xffffffffffffffff)

14:42:25 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', <r2=>0x0})
sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @broadcast}}}], 0x20}, 0x0)

14:42:25 executing program 6:
move_pages(0xffffffffffffffff, 0x5, &(0x7f0000000000)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x6)
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_adj\x00')
r1 = dup2(r0, r0)
write$P9_RMKNOD(r1, &(0x7f0000000140)={0x14, 0x13, 0x2, {0x4}}, 0x14)
pkey_free(0xffffffffffffffff)

14:42:25 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

14:42:25 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', <r2=>0x0})
sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @broadcast}}}], 0x20}, 0x0)

14:42:25 executing program 5:
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0)

14:42:25 executing program 2:
move_pages(0xffffffffffffffff, 0x5, &(0x7f0000000000)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x6)
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_adj\x00')
r1 = dup2(r0, r0)
write$P9_RMKNOD(r1, &(0x7f0000000140)={0x14, 0x13, 0x2, {0x4}}, 0x14)
pkey_free(0xffffffffffffffff)

14:42:25 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

14:42:26 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

14:42:26 executing program 6:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

14:42:26 executing program 2:
move_pages(0xffffffffffffffff, 0x5, &(0x7f0000000000)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x6)
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_adj\x00')
r1 = dup2(r0, r0)
write$P9_RMKNOD(r1, &(0x7f0000000140)={0x14, 0x13, 0x2, {0x4}}, 0x14)
pkey_free(0xffffffffffffffff)

14:42:26 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004140)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0xc000)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000240), 0x4)

14:42:26 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', <r2=>0x0})
sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @broadcast}}}], 0x20}, 0x0)

14:42:26 executing program 1:
ustat(0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x1ff)
close(0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
close(0xffffffffffffffff)
ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

14:42:26 executing program 5:
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0)

14:42:26 executing program 7:
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0)

14:42:26 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sysfs$3(0x3)

14:42:26 executing program 5:
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0)

14:42:26 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0)

14:42:26 executing program 7:
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0)

14:42:26 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sysfs$3(0x3)

14:42:26 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004140)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0xc000)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000240), 0x4)

14:42:26 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sysfs$3(0x3)

14:42:26 executing program 5:
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0)

14:42:26 executing program 4:
io_setup(0x1c13, &(0x7f00000000c0)=<r0=>0x0)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x0)
io_submit(r0, 0x1, &(0x7f00000025c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}])

14:42:26 executing program 1:
ustat(0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x1ff)
close(0xffffffffffffffff)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
close(0xffffffffffffffff)
ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

14:42:26 executing program 6:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

14:42:26 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004140)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0xc000)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000240), 0x4)

14:42:26 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sysfs$3(0x3)

14:42:26 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sysfs$3(0x3)

14:42:26 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0x0, 0x5})

14:42:26 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sysfs$3(0x3)

14:42:26 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004140)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0xc000)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000240), 0x4)

14:42:26 executing program 4:
io_setup(0x1c13, &(0x7f00000000c0)=<r0=>0x0)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x0)
io_submit(r0, 0x1, &(0x7f00000025c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}])

14:42:26 executing program 6:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

14:42:26 executing program 7:
write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0)

14:42:26 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0xffff, 0x0, 0x0, 0x0, 0x0, "839cdef64b251a43"})
ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040))

14:42:26 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x8, 0x0, &(0x7f00000000c0))

14:42:26 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0x0, 0x5})

14:42:26 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sysfs$3(0x3)

14:42:26 executing program 6:
openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

14:42:26 executing program 4:
io_setup(0x1c13, &(0x7f00000000c0)=<r0=>0x0)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x0)
io_submit(r0, 0x1, &(0x7f00000025c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}])

14:42:26 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0xffff, 0x0, 0x0, 0x0, 0x0, "839cdef64b251a43"})
ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040))

14:42:26 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x8, 0x0, &(0x7f00000000c0))

14:42:26 executing program 4:
io_setup(0x1c13, &(0x7f00000000c0)=<r0=>0x0)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x0)
io_submit(r0, 0x1, &(0x7f00000025c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}])

[  126.989541] syz-executor.2 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
14:42:26 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0x0, 0x5})

14:42:26 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0xffff, 0x0, 0x0, 0x0, 0x0, "839cdef64b251a43"})
ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040))

14:42:26 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r1, 0x0, 0x0, 0x87ffffc)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
readv(r2, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2)
syz_open_dev$tty20(0xc, 0x4, 0x1)
syncfs(0xffffffffffffffff)
io_setup(0x20, &(0x7f0000000000)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f00000004c0)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3e}])
fcntl$dupfd(r2, 0x0, r0)

14:42:26 executing program 2:
setitimer(0x3, 0x0, 0x0)

14:42:26 executing program 2:
setitimer(0x3, 0x0, 0x0)

14:42:26 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x8, 0x0, &(0x7f00000000c0))

14:42:26 executing program 3:
restart_syscall()

14:42:26 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0xffff, 0x0, 0x0, 0x0, 0x0, "839cdef64b251a43"})
ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040))

14:42:26 executing program 3:
restart_syscall()

14:42:26 executing program 2:
setitimer(0x3, 0x0, 0x0)

14:42:26 executing program 6:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(0x0, r0, 0x0)
link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00')

14:42:26 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00'}, &(0x7f0000000180)=0x54)

14:42:26 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x8, 0x0, &(0x7f00000000c0))

14:42:27 executing program 6:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(0x0, r0, 0x0)
link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00')

14:42:27 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x5)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x4f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0x0, 0x5})

14:42:27 executing program 2:
setitimer(0x3, 0x0, 0x0)

14:42:27 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=<r2=>0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2})
ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000340)={'\x00', 0x80, 0x3f, 0x7fffffff, 0x0, 0x2, r2})
r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2})
ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r5=>r0}, './file0\x00'})
accept4$unix(r5, &(0x7f0000000180), &(0x7f0000000200)=0x6e, 0x80800)
ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0)

14:42:27 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00'}, &(0x7f0000000180)=0x54)


VM DIAGNOSIS:
14:42:17  Registers:
info registers vcpu 0
RAX=fffffbfff0b603e2 RBX=fffffbfff0b603e3 RCX=ffffffff812a3fcf RDX=fffffbfff0b603e3
RSI=0000000000000008 RDI=ffffffff85b01f10 RBP=fffffbfff0b603e2 RSP=ffff88801d65f510
R8 =0000000000000000 R9 =ffffffff85b01f17 R10=fffffbfff0b603e2 R11=0000000000000001
R12=0000000000000000 R13=0000000000000000 R14=ffff888007c4ed98 R15=0000000000000000
RIP=ffffffff81787f05 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe9de7e11f0 CR3=000000000e988000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f
YMM01=0000000000000000 0000000000000000 2e6f747079726362 696c2f756e672d78
YMM02=0000000000000000 0000000000000000 00312e312e6f732e 6f74707972636269
YMM03=0000000000000000 0000000000000000 6c2f756e672d7875 6e696c2d34365f36
YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff822b1e41 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff888020737348
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000038 R11=0000000000000001
R12=0000000000000038 R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b1e30
RIP=ffffffff822b1e99 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f16fbaee700 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fdee3550260 CR3=0000000040236000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 000000ff00000000 00000000000000ff
YMM01=0000000000000000 0000000000000000 ffffff0000ff00ff ffffffffffffff00
YMM02=0000000000000000 0000000000000000 494c4700362e322e 325f4342494c4700
YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000004700
YMM04=0000000000000000 0000000000000000 4342494c4700362e 322e325f4342494c
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000