Warning: Permanently added '[localhost]:22642' (ECDSA) to the list of known hosts.
2022/09/16 12:48:13 fuzzer started
2022/09/16 12:48:13 dialing manager at localhost:36051
syzkaller login: [   40.331114] cgroup: Unknown subsys name 'net'
[   40.439595] cgroup: Unknown subsys name 'rlimit'
2022/09/16 12:48:28 syscalls: 2215
2022/09/16 12:48:28 code coverage: enabled
2022/09/16 12:48:28 comparison tracing: enabled
2022/09/16 12:48:28 extra coverage: enabled
2022/09/16 12:48:28 setuid sandbox: enabled
2022/09/16 12:48:28 namespace sandbox: enabled
2022/09/16 12:48:28 Android sandbox: enabled
2022/09/16 12:48:28 fault injection: enabled
2022/09/16 12:48:28 leak checking: enabled
2022/09/16 12:48:28 net packet injection: enabled
2022/09/16 12:48:28 net device setup: enabled
2022/09/16 12:48:28 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/09/16 12:48:28 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/09/16 12:48:28 USB emulation: enabled
2022/09/16 12:48:28 hci packet injection: enabled
2022/09/16 12:48:28 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220916                                          )
2022/09/16 12:48:28 802.15.4 emulation: enabled
2022/09/16 12:48:28 fetching corpus: 0, signal 0/2000 (executing program)
2022/09/16 12:48:28 fetching corpus: 50, signal 20450/24092 (executing program)
2022/09/16 12:48:28 fetching corpus: 100, signal 37545/42554 (executing program)
2022/09/16 12:48:28 fetching corpus: 150, signal 48132/54412 (executing program)
2022/09/16 12:48:28 fetching corpus: 200, signal 59874/67229 (executing program)
2022/09/16 12:48:28 fetching corpus: 250, signal 67539/75947 (executing program)
2022/09/16 12:48:29 fetching corpus: 300, signal 73339/82832 (executing program)
2022/09/16 12:48:29 fetching corpus: 350, signal 75459/86193 (executing program)
2022/09/16 12:48:29 fetching corpus: 400, signal 81618/93186 (executing program)
2022/09/16 12:48:29 fetching corpus: 450, signal 86321/98744 (executing program)
2022/09/16 12:48:29 fetching corpus: 500, signal 88888/102247 (executing program)
2022/09/16 12:48:29 fetching corpus: 550, signal 92909/107058 (executing program)
2022/09/16 12:48:29 fetching corpus: 600, signal 97871/112603 (executing program)
2022/09/16 12:48:30 fetching corpus: 650, signal 102473/117740 (executing program)
2022/09/16 12:48:30 fetching corpus: 700, signal 105287/121233 (executing program)
2022/09/16 12:48:30 fetching corpus: 750, signal 107877/124539 (executing program)
2022/09/16 12:48:30 fetching corpus: 800, signal 110348/127685 (executing program)
2022/09/16 12:48:30 fetching corpus: 850, signal 111897/130041 (executing program)
2022/09/16 12:48:30 fetching corpus: 900, signal 115905/134469 (executing program)
2022/09/16 12:48:30 fetching corpus: 950, signal 119361/138284 (executing program)
2022/09/16 12:48:31 fetching corpus: 1000, signal 121991/141358 (executing program)
2022/09/16 12:48:31 fetching corpus: 1050, signal 124008/143919 (executing program)
2022/09/16 12:48:31 fetching corpus: 1100, signal 126391/146677 (executing program)
2022/09/16 12:48:31 fetching corpus: 1150, signal 128433/149155 (executing program)
2022/09/16 12:48:31 fetching corpus: 1200, signal 130495/151662 (executing program)
2022/09/16 12:48:31 fetching corpus: 1250, signal 132318/153935 (executing program)
2022/09/16 12:48:31 fetching corpus: 1300, signal 134484/156459 (executing program)
2022/09/16 12:48:31 fetching corpus: 1350, signal 137428/159466 (executing program)
2022/09/16 12:48:32 fetching corpus: 1400, signal 139097/161520 (executing program)
2022/09/16 12:48:32 fetching corpus: 1450, signal 141032/163715 (executing program)
2022/09/16 12:48:32 fetching corpus: 1500, signal 142999/165875 (executing program)
2022/09/16 12:48:32 fetching corpus: 1550, signal 144336/167580 (executing program)
2022/09/16 12:48:32 fetching corpus: 1600, signal 146103/169519 (executing program)
2022/09/16 12:48:32 fetching corpus: 1650, signal 147526/171239 (executing program)
2022/09/16 12:48:32 fetching corpus: 1700, signal 148525/172605 (executing program)
2022/09/16 12:48:32 fetching corpus: 1750, signal 149854/174153 (executing program)
2022/09/16 12:48:33 fetching corpus: 1800, signal 151143/175649 (executing program)
2022/09/16 12:48:33 fetching corpus: 1850, signal 153327/177762 (executing program)
2022/09/16 12:48:33 fetching corpus: 1900, signal 154318/179032 (executing program)
2022/09/16 12:48:33 fetching corpus: 1950, signal 155590/180478 (executing program)
2022/09/16 12:48:33 fetching corpus: 2000, signal 156530/181692 (executing program)
2022/09/16 12:48:33 fetching corpus: 2050, signal 157706/183078 (executing program)
2022/09/16 12:48:33 fetching corpus: 2100, signal 159212/184611 (executing program)
2022/09/16 12:48:34 fetching corpus: 2150, signal 160969/186214 (executing program)
2022/09/16 12:48:34 fetching corpus: 2200, signal 162450/187619 (executing program)
2022/09/16 12:48:34 fetching corpus: 2250, signal 164105/189187 (executing program)
2022/09/16 12:48:34 fetching corpus: 2300, signal 165142/190343 (executing program)
2022/09/16 12:48:34 fetching corpus: 2350, signal 166453/191647 (executing program)
2022/09/16 12:48:34 fetching corpus: 2400, signal 167536/192800 (executing program)
2022/09/16 12:48:34 fetching corpus: 2450, signal 168650/193971 (executing program)
2022/09/16 12:48:35 fetching corpus: 2500, signal 170365/195526 (executing program)
2022/09/16 12:48:35 fetching corpus: 2550, signal 171762/196739 (executing program)
2022/09/16 12:48:35 fetching corpus: 2600, signal 172836/197788 (executing program)
2022/09/16 12:48:35 fetching corpus: 2650, signal 174258/198964 (executing program)
2022/09/16 12:48:35 fetching corpus: 2700, signal 175288/200002 (executing program)
2022/09/16 12:48:35 fetching corpus: 2750, signal 176063/200812 (executing program)
2022/09/16 12:48:35 fetching corpus: 2800, signal 177473/201913 (executing program)
2022/09/16 12:48:36 fetching corpus: 2850, signal 178636/202876 (executing program)
2022/09/16 12:48:36 fetching corpus: 2900, signal 179818/203864 (executing program)
2022/09/16 12:48:36 fetching corpus: 2950, signal 180604/204615 (executing program)
2022/09/16 12:48:36 fetching corpus: 3000, signal 181985/205646 (executing program)
2022/09/16 12:48:36 fetching corpus: 3050, signal 182591/206240 (executing program)
2022/09/16 12:48:36 fetching corpus: 3100, signal 183368/206952 (executing program)
2022/09/16 12:48:36 fetching corpus: 3150, signal 184786/208009 (executing program)
2022/09/16 12:48:37 fetching corpus: 3200, signal 185761/208774 (executing program)
2022/09/16 12:48:37 fetching corpus: 3250, signal 186481/209400 (executing program)
2022/09/16 12:48:37 fetching corpus: 3300, signal 187876/210293 (executing program)
2022/09/16 12:48:37 fetching corpus: 3350, signal 188764/210998 (executing program)
2022/09/16 12:48:37 fetching corpus: 3400, signal 190073/211812 (executing program)
2022/09/16 12:48:37 fetching corpus: 3450, signal 191708/212802 (executing program)
2022/09/16 12:48:37 fetching corpus: 3500, signal 192510/213419 (executing program)
2022/09/16 12:48:38 fetching corpus: 3550, signal 193238/213994 (executing program)
2022/09/16 12:48:38 fetching corpus: 3600, signal 193725/214447 (executing program)
2022/09/16 12:48:38 fetching corpus: 3650, signal 194429/214993 (executing program)
2022/09/16 12:48:38 fetching corpus: 3700, signal 194909/215429 (executing program)
2022/09/16 12:48:38 fetching corpus: 3750, signal 195872/216019 (executing program)
2022/09/16 12:48:38 fetching corpus: 3800, signal 197292/216730 (executing program)
2022/09/16 12:48:38 fetching corpus: 3850, signal 197961/217193 (executing program)
2022/09/16 12:48:38 fetching corpus: 3900, signal 198904/217720 (executing program)
2022/09/16 12:48:39 fetching corpus: 3950, signal 199996/218263 (executing program)
2022/09/16 12:48:39 fetching corpus: 4000, signal 200645/218654 (executing program)
2022/09/16 12:48:39 fetching corpus: 4050, signal 201571/219157 (executing program)
2022/09/16 12:48:39 fetching corpus: 4100, signal 202252/219531 (executing program)
2022/09/16 12:48:39 fetching corpus: 4150, signal 202894/219971 (executing program)
2022/09/16 12:48:39 fetching corpus: 4200, signal 203556/220310 (executing program)
2022/09/16 12:48:39 fetching corpus: 4250, signal 204301/220668 (executing program)
2022/09/16 12:48:40 fetching corpus: 4300, signal 204722/220954 (executing program)
2022/09/16 12:48:40 fetching corpus: 4350, signal 205347/221261 (executing program)
2022/09/16 12:48:40 fetching corpus: 4400, signal 206194/221548 (executing program)
2022/09/16 12:48:40 fetching corpus: 4450, signal 206836/221848 (executing program)
2022/09/16 12:48:40 fetching corpus: 4500, signal 207649/222192 (executing program)
2022/09/16 12:48:40 fetching corpus: 4550, signal 208259/222466 (executing program)
2022/09/16 12:48:40 fetching corpus: 4600, signal 209215/222726 (executing program)
2022/09/16 12:48:41 fetching corpus: 4650, signal 209877/222992 (executing program)
2022/09/16 12:48:41 fetching corpus: 4700, signal 210477/223242 (executing program)
2022/09/16 12:48:41 fetching corpus: 4750, signal 211266/223493 (executing program)
2022/09/16 12:48:41 fetching corpus: 4800, signal 212183/223752 (executing program)
2022/09/16 12:48:41 fetching corpus: 4850, signal 212696/223927 (executing program)
2022/09/16 12:48:41 fetching corpus: 4900, signal 213225/224074 (executing program)
2022/09/16 12:48:41 fetching corpus: 4950, signal 214027/224245 (executing program)
2022/09/16 12:48:42 fetching corpus: 5000, signal 214467/224385 (executing program)
2022/09/16 12:48:42 fetching corpus: 5050, signal 215136/224538 (executing program)
2022/09/16 12:48:42 fetching corpus: 5100, signal 215623/224652 (executing program)
2022/09/16 12:48:42 fetching corpus: 5150, signal 216135/224753 (executing program)
2022/09/16 12:48:42 fetching corpus: 5200, signal 216914/224872 (executing program)
2022/09/16 12:48:42 fetching corpus: 5250, signal 217738/225054 (executing program)
2022/09/16 12:48:42 fetching corpus: 5299, signal 218643/225181 (executing program)
2022/09/16 12:48:42 fetching corpus: 5299, signal 218643/225237 (executing program)
2022/09/16 12:48:42 fetching corpus: 5299, signal 218643/225305 (executing program)
2022/09/16 12:48:43 fetching corpus: 5299, signal 218643/225324 (executing program)
2022/09/16 12:48:43 fetching corpus: 5299, signal 218643/225324 (executing program)
2022/09/16 12:48:45 starting 8 fuzzer processes
12:48:45 executing program 0:
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000})
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001e0001"], 0x1c}], 0x1}, 0x0)

12:48:45 executing program 1:
r0 = socket$unix(0x1, 0x1, 0x0)
io_setup(0x1f, &(0x7f0000000100)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f0000000780)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xa, 0x0, r0, 0x0}])

12:48:45 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040))
openat(r0, 0x0, 0x101000, 0x1)
r2 = shmget$private(0x0, 0x3000, 0x54001b05, &(0x7f0000ff9000/0x3000)=nil)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00')
pread64(r3, &(0x7f0000000180)=""/16, 0x2f00, 0x600)
openat(r3, &(0x7f0000000000)='./file1\x00', 0x143100, 0x140)
shmctl$IPC_RMID(r2, 0xb)
lsetxattr$security_evm(&(0x7f0000000080)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)=@v1={0x2, "c00e"}, 0x3, 0x1)
pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x3)

12:48:45 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, 0x0, 0x0, 0x0)

12:48:45 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8)

[   72.194047] audit: type=1400 audit(1663332525.987:6): avc:  denied  { execmem } for  pid=283 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
12:48:46 executing program 5:
syz_open_dev$vcsa(&(0x7f00000012c0), 0xffffffffffffffe1, 0x0)

12:48:46 executing program 7:
r0 = io_uring_setup(0x1378, &(0x7f0000000000)={0x0, 0x0, 0x2})
io_uring_enter(r0, 0x0, 0x8dd6, 0x3, &(0x7f0000000080)={[0x2]}, 0x8)

12:48:46 executing program 6:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})

[   73.557902] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   73.559870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   73.563747] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   73.565185] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   73.567698] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   73.568934] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   73.573158] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   73.574484] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   73.577163] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   73.579462] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   73.580565] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   73.583974] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   73.614909] Bluetooth: hci0: HCI_REQ-0x0c1a
[   73.617511] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   73.617871] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   73.623903] Bluetooth: hci1: HCI_REQ-0x0c1a
[   73.639793] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   73.642189] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   73.643500] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   73.647599] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   73.651208] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   73.654909] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   73.657716] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   73.659126] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   73.665927] Bluetooth: hci5: HCI_REQ-0x0c1a
[   73.667097] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   73.680617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   73.685694] Bluetooth: hci4: HCI_REQ-0x0c1a
[   73.692191] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   73.694884] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   73.697292] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   73.698922] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   73.699524] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   73.701182] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   73.702936] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   73.704266] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   73.706804] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   73.711968] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   73.713254] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   73.715083] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   73.716180] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   73.718162] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   73.718692] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   73.720470] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   73.721714] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   73.727758] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   73.732777] Bluetooth: hci3: HCI_REQ-0x0c1a
[   73.736818] Bluetooth: hci6: HCI_REQ-0x0c1a
[   73.743102] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   73.751001] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   73.752834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   73.758600] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   73.760373] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   73.761732] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   73.765857] Bluetooth: hci2: HCI_REQ-0x0c1a
[   73.779450] Bluetooth: hci7: HCI_REQ-0x0c1a
[   75.697880] Bluetooth: hci4: command 0x0409 tx timeout
[   75.698596] Bluetooth: hci5: command 0x0409 tx timeout
[   75.699036] Bluetooth: hci0: command 0x0409 tx timeout
[   75.699512] Bluetooth: hci1: command 0x0409 tx timeout
[   75.761440] Bluetooth: hci6: command 0x0409 tx timeout
[   75.762450] Bluetooth: hci3: command 0x0409 tx timeout
[   75.825408] Bluetooth: hci7: command 0x0409 tx timeout
[   75.825997] Bluetooth: hci2: command 0x0409 tx timeout
[   77.746427] Bluetooth: hci1: command 0x041b tx timeout
[   77.746952] Bluetooth: hci0: command 0x041b tx timeout
[   77.747940] Bluetooth: hci5: command 0x041b tx timeout
[   77.748415] Bluetooth: hci4: command 0x041b tx timeout
[   77.809396] Bluetooth: hci3: command 0x041b tx timeout
[   77.809913] Bluetooth: hci6: command 0x041b tx timeout
[   77.874433] Bluetooth: hci2: command 0x041b tx timeout
[   77.875121] Bluetooth: hci7: command 0x041b tx timeout
[   79.793573] Bluetooth: hci4: command 0x040f tx timeout
[   79.794727] Bluetooth: hci5: command 0x040f tx timeout
[   79.798083] Bluetooth: hci0: command 0x040f tx timeout
[   79.799011] Bluetooth: hci1: command 0x040f tx timeout
[   79.857464] Bluetooth: hci6: command 0x040f tx timeout
[   79.859439] Bluetooth: hci3: command 0x040f tx timeout
[   79.921418] Bluetooth: hci7: command 0x040f tx timeout
[   79.923562] Bluetooth: hci2: command 0x040f tx timeout
[   81.841403] Bluetooth: hci1: command 0x0419 tx timeout
[   81.841993] Bluetooth: hci0: command 0x0419 tx timeout
[   81.843659] Bluetooth: hci5: command 0x0419 tx timeout
[   81.844171] Bluetooth: hci4: command 0x0419 tx timeout
[   81.906378] Bluetooth: hci3: command 0x0419 tx timeout
[   81.906977] Bluetooth: hci6: command 0x0419 tx timeout
[   81.969429] Bluetooth: hci2: command 0x0419 tx timeout
[   81.971145] Bluetooth: hci7: command 0x0419 tx timeout
[  128.303518] audit: type=1400 audit(1663332582.096:7): avc:  denied  { open } for  pid=3798 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  128.304924] audit: type=1400 audit(1663332582.096:8): avc:  denied  { kernel } for  pid=3798 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  128.314111] ------------[ cut here ]------------
[  128.314130] 
[  128.314133] ======================================================
[  128.314137] WARNING: possible circular locking dependency detected
[  128.314142] 6.0.0-rc5-next-20220916 #1 Not tainted
[  128.314148] ------------------------------------------------------
[  128.314151] syz-executor.2/3799 is trying to acquire lock:
[  128.314158] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70
[  128.314195] 
[  128.314195] but task is already holding lock:
[  128.314198] ffff888008b74820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  128.314226] 
[  128.314226] which lock already depends on the new lock.
[  128.314226] 
[  128.314229] 
[  128.314229] the existing dependency chain (in reverse order) is:
[  128.314232] 
[  128.314232] -> #3 (&ctx->lock){....}-{2:2}:
[  128.314247]        _raw_spin_lock+0x2a/0x40
[  128.314264]        __perf_event_task_sched_out+0x53b/0x18d0
[  128.314277]        __schedule+0xedd/0x2470
[  128.314288]        schedule+0xda/0x1b0
[  128.314298]        exit_to_user_mode_prepare+0x114/0x1a0
[  128.314322]        syscall_exit_to_user_mode+0x19/0x40
[  128.314343]        do_syscall_64+0x48/0x90
[  128.314357]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  128.314375] 
[  128.314375] -> #2 (&rq->__lock){-.-.}-{2:2}:
[  128.314389]        _raw_spin_lock_nested+0x30/0x40
[  128.314405]        raw_spin_rq_lock_nested+0x1e/0x30
[  128.314419]        task_fork_fair+0x63/0x4d0
[  128.314436]        sched_cgroup_fork+0x3d0/0x540
[  128.314450]        copy_process+0x4183/0x6e20
[  128.314461]        kernel_clone+0xe7/0x890
[  128.314470]        user_mode_thread+0xad/0xf0
[  128.314480]        rest_init+0x24/0x250
[  128.314498]        arch_call_rest_init+0xf/0x14
[  128.314510]        start_kernel+0x4c1/0x4e6
[  128.314520]        secondary_startup_64_no_verify+0xe0/0xeb
[  128.314535] 
[  128.314535] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[  128.314549]        _raw_spin_lock_irqsave+0x39/0x60
[  128.314564]        try_to_wake_up+0xab/0x1920
[  128.314578]        up+0x75/0xb0
[  128.314589]        __up_console_sem+0x6e/0x80
[  128.314606]        console_unlock+0x46a/0x590
[  128.314622]        vprintk_emit+0x1bd/0x560
[  128.314639]        vprintk+0x84/0xa0
[  128.314656]        _printk+0xba/0xf1
[  128.314674]        kauditd_hold_skb.cold+0x3f/0x4e
[  128.314689]        kauditd_send_queue+0x233/0x290
[  128.314705]        kauditd_thread+0x5da/0x9a0
[  128.314719]        kthread+0x2ed/0x3a0
[  128.314734]        ret_from_fork+0x22/0x30
[  128.314746] 
[  128.314746] -> #0 ((console_sem).lock){....}-{2:2}:
[  128.314760]        __lock_acquire+0x2a02/0x5e70
[  128.314777]        lock_acquire+0x1a2/0x530
[  128.314793]        _raw_spin_lock_irqsave+0x39/0x60
[  128.314808]        down_trylock+0xe/0x70
[  128.314821]        __down_trylock_console_sem+0x3b/0xd0
[  128.314837]        vprintk_emit+0x16b/0x560
[  128.314854]        vprintk+0x84/0xa0
[  128.314870]        _printk+0xba/0xf1
[  128.314887]        report_bug.cold+0x72/0xab
[  128.314900]        handle_bug+0x3c/0x70
[  128.314913]        exc_invalid_op+0x14/0x50
[  128.314927]        asm_exc_invalid_op+0x16/0x20
[  128.314944]        group_sched_out.part.0+0x2c7/0x460
[  128.314955]        ctx_sched_out+0x8f1/0xc10
[  128.314964]        __perf_event_task_sched_out+0x6d0/0x18d0
[  128.314976]        __schedule+0xedd/0x2470
[  128.314987]        schedule+0xda/0x1b0
[  128.314996]        exit_to_user_mode_prepare+0x114/0x1a0
[  128.315016]        syscall_exit_to_user_mode+0x19/0x40
[  128.315033]        do_syscall_64+0x48/0x90
[  128.315047]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  128.315064] 
[  128.315064] other info that might help us debug this:
[  128.315064] 
[  128.315067] Chain exists of:
[  128.315067]   (console_sem).lock --> &rq->__lock --> &ctx->lock
[  128.315067] 
[  128.315082]  Possible unsafe locking scenario:
[  128.315082] 
[  128.315084]        CPU0                    CPU1
[  128.315087]        ----                    ----
[  128.315089]   lock(&ctx->lock);
[  128.315095]                                lock(&rq->__lock);
[  128.315101]                                lock(&ctx->lock);
[  128.315108]   lock((console_sem).lock);
[  128.315113] 
[  128.315113]  *** DEADLOCK ***
[  128.315113] 
[  128.315115] 2 locks held by syz-executor.2/3799:
[  128.315122]  #0: ffff88806cf37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[  128.315148]  #1: ffff888008b74820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  128.315176] 
[  128.315176] stack backtrace:
[  128.315179] CPU: 1 PID: 3799 Comm: syz-executor.2 Not tainted 6.0.0-rc5-next-20220916 #1
[  128.315191] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  128.315199] Call Trace:
[  128.315203]  <TASK>
[  128.315207]  dump_stack_lvl+0x8b/0xb3
[  128.315222]  check_noncircular+0x263/0x2e0
[  128.315239]  ? format_decode+0x26c/0xb50
[  128.315255]  ? print_circular_bug+0x450/0x450
[  128.315272]  ? enable_ptr_key_workfn+0x20/0x20
[  128.315286]  ? __lockdep_reset_lock+0x180/0x180
[  128.315304]  ? format_decode+0x26c/0xb50
[  128.315320]  ? alloc_chain_hlocks+0x1ec/0x5a0
[  128.315338]  __lock_acquire+0x2a02/0x5e70
[  128.315359]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  128.315382]  lock_acquire+0x1a2/0x530
[  128.315399]  ? down_trylock+0xe/0x70
[  128.315414]  ? rcu_read_unlock+0x40/0x40
[  128.315431]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  128.315453]  ? vprintk+0x84/0xa0
[  128.315471]  _raw_spin_lock_irqsave+0x39/0x60
[  128.315487]  ? down_trylock+0xe/0x70
[  128.315501]  down_trylock+0xe/0x70
[  128.315514]  ? vprintk+0x84/0xa0
[  128.315532]  __down_trylock_console_sem+0x3b/0xd0
[  128.315549]  vprintk_emit+0x16b/0x560
[  128.315566]  ? lock_downgrade+0x6d0/0x6d0
[  128.315585]  vprintk+0x84/0xa0
[  128.315603]  _printk+0xba/0xf1
[  128.315621]  ? record_print_text.cold+0x16/0x16
[  128.315642]  ? hrtimer_try_to_cancel+0x163/0x2c0
[  128.315656]  ? lock_downgrade+0x6d0/0x6d0
[  128.315674]  ? report_bug.cold+0x66/0xab
[  128.315689]  ? group_sched_out.part.0+0x2c7/0x460
[  128.315700]  report_bug.cold+0x72/0xab
[  128.315716]  handle_bug+0x3c/0x70
[  128.315730]  exc_invalid_op+0x14/0x50
[  128.315745]  asm_exc_invalid_op+0x16/0x20
[  128.315763] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  128.315776] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  128.315787] RSP: 0018:ffff88804183fc48 EFLAGS: 00010006
[  128.315796] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  128.315804] RDX: ffff88801a223580 RSI: ffffffff81566027 RDI: 0000000000000005
[  128.315812] RBP: ffff8880100e8000 R08: 0000000000000005 R09: 0000000000000001
[  128.315819] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888008b74800
[  128.315826] R13: ffff88806cf3d100 R14: ffffffff8547bfc0 R15: 0000000000000002
[  128.315837]  ? group_sched_out.part.0+0x2c7/0x460
[  128.315850]  ? group_sched_out.part.0+0x2c7/0x460
[  128.315863]  ctx_sched_out+0x8f1/0xc10
[  128.315875]  __perf_event_task_sched_out+0x6d0/0x18d0
[  128.315891]  ? lock_is_held_type+0xd7/0x130
[  128.315910]  ? __perf_cgroup_move+0x160/0x160
[  128.315922]  ? set_next_entity+0x304/0x550
[  128.315940]  ? update_curr+0x267/0x740
[  128.315959]  ? lock_is_held_type+0xd7/0x130
[  128.315978]  __schedule+0xedd/0x2470
[  128.315992]  ? io_schedule_timeout+0x150/0x150
[  128.316005]  ? __x64_sys_futex_time32+0x480/0x480
[  128.316019]  schedule+0xda/0x1b0
[  128.316031]  exit_to_user_mode_prepare+0x114/0x1a0
[  128.316051]  syscall_exit_to_user_mode+0x19/0x40
[  128.316070]  do_syscall_64+0x48/0x90
[  128.316085]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  128.316103] RIP: 0033:0x7f0f18eceb19
[  128.316111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  128.316122] RSP: 002b:00007f0f16444218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  128.316133] RAX: 0000000000000001 RBX: 00007f0f18fe1f68 RCX: 00007f0f18eceb19
[  128.316141] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0f18fe1f6c
[  128.316148] RBP: 00007f0f18fe1f60 R08: 000000000000000e R09: 0000000000000000
[  128.316155] R10: 0000000000000006 R11: 0000000000000246 R12: 00007f0f18fe1f6c
[  128.316162] R13: 00007ffc05b8e05f R14: 00007f0f16444300 R15: 0000000000022000
[  128.316175]  </TASK>
[  128.372505] WARNING: CPU: 1 PID: 3799 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[  128.373152] Modules linked in:
[  128.373384] CPU: 1 PID: 3799 Comm: syz-executor.2 Not tainted 6.0.0-rc5-next-20220916 #1
[  128.373957] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  128.374748] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  128.375136] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  128.376413] RSP: 0018:ffff88804183fc48 EFLAGS: 00010006
[  128.376803] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  128.377309] RDX: ffff88801a223580 RSI: ffffffff81566027 RDI: 0000000000000005
[  128.377825] RBP: ffff8880100e8000 R08: 0000000000000005 R09: 0000000000000001
[  128.378329] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888008b74800
[  128.378834] R13: ffff88806cf3d100 R14: ffffffff8547bfc0 R15: 0000000000000002
[  128.379343] FS:  00007f0f16444700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[  128.379907] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  128.380322] CR2: 00007f7086c52000 CR3: 000000001b4ce000 CR4: 0000000000350ee0
[  128.380825] Call Trace:
[  128.381009]  <TASK>
[  128.381178]  ctx_sched_out+0x8f1/0xc10
[  128.381467]  __perf_event_task_sched_out+0x6d0/0x18d0
[  128.381842]  ? lock_is_held_type+0xd7/0x130
[  128.382164]  ? __perf_cgroup_move+0x160/0x160
[  128.382494]  ? set_next_entity+0x304/0x550
[  128.382807]  ? update_curr+0x267/0x740
[  128.383095]  ? lock_is_held_type+0xd7/0x130
[  128.383411]  __schedule+0xedd/0x2470
[  128.383685]  ? io_schedule_timeout+0x150/0x150
[  128.384020]  ? __x64_sys_futex_time32+0x480/0x480
[  128.384367]  schedule+0xda/0x1b0
[  128.384620]  exit_to_user_mode_prepare+0x114/0x1a0
[  128.384985]  syscall_exit_to_user_mode+0x19/0x40
[  128.385337]  do_syscall_64+0x48/0x90
[  128.385624]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  128.386004] RIP: 0033:0x7f0f18eceb19
[  128.386273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  128.387553] RSP: 002b:00007f0f16444218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  128.388090] RAX: 0000000000000001 RBX: 00007f0f18fe1f68 RCX: 00007f0f18eceb19
[  128.388602] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0f18fe1f6c
[  128.389106] RBP: 00007f0f18fe1f60 R08: 000000000000000e R09: 0000000000000000
[  128.389620] R10: 0000000000000006 R11: 0000000000000246 R12: 00007f0f18fe1f6c
[  128.390128] R13: 00007ffc05b8e05f R14: 00007f0f16444300 R15: 0000000000022000
[  128.390642]  </TASK>
[  128.390815] irq event stamp: 2224
[  128.391066] hardirqs last  enabled at (2223): [<ffffffff8133ffc9>] exit_to_user_mode_prepare+0x109/0x1a0
[  128.391738] hardirqs last disabled at (2224): [<ffffffff8424c965>] __schedule+0x1225/0x2470
[  128.392360] softirqs last  enabled at (1786): [<ffffffff8117063b>] __irq_exit_rcu+0x11b/0x180
[  128.393000] softirqs last disabled at (1693): [<ffffffff8117063b>] __irq_exit_rcu+0x11b/0x180
[  128.393653] ---[ end trace 0000000000000000 ]---
[  128.723670] syz-executor.2 (3799) used greatest stack depth: 24496 bytes left
12:49:42 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040))
openat(r0, 0x0, 0x101000, 0x1)
r2 = shmget$private(0x0, 0x3000, 0x54001b05, &(0x7f0000ff9000/0x3000)=nil)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00')
pread64(r3, &(0x7f0000000180)=""/16, 0x2f00, 0x600)
openat(r3, &(0x7f0000000000)='./file1\x00', 0x143100, 0x140)
shmctl$IPC_RMID(r2, 0xb)
lsetxattr$security_evm(&(0x7f0000000080)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)=@v1={0x2, "c00e"}, 0x3, 0x1)
pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x3)

12:49:42 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040))
openat(r0, 0x0, 0x101000, 0x1)
r2 = shmget$private(0x0, 0x3000, 0x54001b05, &(0x7f0000ff9000/0x3000)=nil)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00')
pread64(r3, &(0x7f0000000180)=""/16, 0x2f00, 0x600)
openat(r3, &(0x7f0000000000)='./file1\x00', 0x143100, 0x140)
shmctl$IPC_RMID(r2, 0xb)
lsetxattr$security_evm(&(0x7f0000000080)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)=@v1={0x2, "c00e"}, 0x3, 0x1)
pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x3)

12:49:42 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040))
openat(r0, 0x0, 0x101000, 0x1)
r2 = shmget$private(0x0, 0x3000, 0x54001b05, &(0x7f0000ff9000/0x3000)=nil)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00')
pread64(r3, &(0x7f0000000180)=""/16, 0x2f00, 0x600)
openat(r3, &(0x7f0000000000)='./file1\x00', 0x143100, 0x140)
shmctl$IPC_RMID(r2, 0xb)
lsetxattr$security_evm(&(0x7f0000000080)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)=@v1={0x2, "c00e"}, 0x3, 0x1)
pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x3)

12:49:43 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040))
openat(r0, 0x0, 0x101000, 0x1)
r2 = shmget$private(0x0, 0x3000, 0x54001b05, &(0x7f0000ff9000/0x3000)=nil)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00')
pread64(r3, &(0x7f0000000180)=""/16, 0x2f00, 0x600)
openat(r3, &(0x7f0000000000)='./file1\x00', 0x143100, 0x140)
shmctl$IPC_RMID(r2, 0xb)
lsetxattr$security_evm(&(0x7f0000000080)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)=@v1={0x2, "c00e"}, 0x3, 0x1)
pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x3)

12:49:43 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040))
openat(r0, 0x0, 0x101000, 0x1)
r2 = shmget$private(0x0, 0x3000, 0x54001b05, &(0x7f0000ff9000/0x3000)=nil)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00')
pread64(r3, &(0x7f0000000180)=""/16, 0x2f00, 0x600)
openat(r3, &(0x7f0000000000)='./file1\x00', 0x143100, 0x140)
shmctl$IPC_RMID(r2, 0xb)
lsetxattr$security_evm(&(0x7f0000000080)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)=@v1={0x2, "c00e"}, 0x3, 0x1)
pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x3)

[  130.314912] audit: type=1326 audit(1663332584.108:9): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3951 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f720cf81b19 code=0x0
12:49:44 executing program 0:
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000})
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001e0001"], 0x1c}], 0x1}, 0x0)

12:49:44 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040))
openat(r0, 0x0, 0x101000, 0x1)
r2 = shmget$private(0x0, 0x3000, 0x54001b05, &(0x7f0000ff9000/0x3000)=nil)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00')
pread64(r3, &(0x7f0000000180)=""/16, 0x2f00, 0x600)
openat(r3, &(0x7f0000000000)='./file1\x00', 0x143100, 0x140)
shmctl$IPC_RMID(r2, 0xb)
lsetxattr$security_evm(&(0x7f0000000080)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)=@v1={0x2, "c00e"}, 0x3, 0x1)
pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x3)

12:49:44 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, 0x0, 0x0, 0x0)

12:49:44 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, 0x0, 0x0, 0x0)

12:49:44 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r0, 0x5385, &(0x7f0000000000))

12:49:44 executing program 6:
socketpair(0x0, 0x0, 0x0, &(0x7f0000000040))
ioctl$CDROMREADRAW(0xffffffffffffffff, 0x5314, &(0x7f0000000280))
syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), 0xffffffffffffffff)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0)
clone3(&(0x7f0000001280)={0x100000, &(0x7f0000000fc0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0)

12:49:44 executing program 7:
r0 = io_uring_setup(0x1378, &(0x7f0000000000)={0x0, 0x0, 0x2})
io_uring_enter(r0, 0x0, 0x8dd6, 0x3, &(0x7f0000000080)={[0x2]}, 0x8)

12:49:44 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
io_setup(0x2, &(0x7f0000000000)=<r1=>0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/protocols\x00')
dup2(r2, r0)
io_submit(r1, 0x1, &(0x7f0000001a00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

12:49:44 executing program 0:
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000})
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001e0001"], 0x1c}], 0x1}, 0x0)

12:49:44 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r0, 0x5385, &(0x7f0000000000))

[  131.304326] hrtimer: interrupt took 19126 ns
12:49:45 executing program 7:
r0 = io_uring_setup(0x1378, &(0x7f0000000000)={0x0, 0x0, 0x2})
io_uring_enter(r0, 0x0, 0x8dd6, 0x3, &(0x7f0000000080)={[0x2]}, 0x8)

12:49:45 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, 0x0, 0x0, 0x0)

12:49:45 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, 0x0, 0x0, 0x0)

12:49:45 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
io_setup(0x2, &(0x7f0000000000)=<r1=>0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/protocols\x00')
dup2(r2, r0)
io_submit(r1, 0x1, &(0x7f0000001a00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

12:49:45 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r0, 0x5385, &(0x7f0000000000))

12:49:45 executing program 0:
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000})
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001e0001"], 0x1c}], 0x1}, 0x0)

12:49:45 executing program 6:
r0 = io_uring_setup(0x1378, &(0x7f0000000000)={0x0, 0x0, 0x2})
io_uring_enter(r0, 0x0, 0x8dd6, 0x3, &(0x7f0000000080)={[0x2]}, 0x8)

12:49:45 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r0, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f00000003c0)=@ethtool_perm_addr})

12:49:45 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
io_setup(0x2, &(0x7f0000000000)=<r1=>0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/protocols\x00')
dup2(r2, r0)
io_submit(r1, 0x1, &(0x7f0000001a00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

12:49:45 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, 0x0, 0x0, 0x0)

12:49:45 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x36, 0x2d, 0x36, 0x3a, 0x4e]}}}}]})

12:49:45 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, 0x0, 0x0, 0x0)

12:49:45 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r0, 0x5385, &(0x7f0000000000))

12:49:45 executing program 0:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}, {&(0x7f0000000000)=""/12, 0xc}], 0x2, 0x7, 0xfbd1)
pidfd_open(0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540))
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000300)=""/251, 0xfb}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000400)=""/139, 0x8b}], 0x4, 0x10000, 0x81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xfffffdcd)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents64(r2, &(0x7f00000017c0)=""/200, 0xc8)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000000c0)=@abs={0x1}, 0x6e)
listen(r3, 0x0)
shutdown(r3, 0x0)
accept$unix(r3, 0x0, 0x0)
signalfd4(r3, &(0x7f0000000500)={[0xe46]}, 0x8, 0x0)
getdents(r2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

12:49:45 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
io_setup(0x2, &(0x7f0000000000)=<r1=>0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/protocols\x00')
dup2(r2, r0)
io_submit(r1, 0x1, &(0x7f0000001a00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

[  132.202118] tmpfs: Bad value for 'mpol'
[  132.217785] tmpfs: Bad value for 'mpol'
12:49:46 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x36, 0x2d, 0x36, 0x3a, 0x4e]}}}}]})

12:49:46 executing program 3:
io_uring_setup(0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001d40)={0x2, &(0x7f0000001cc0)=[{}, {0x810}]})

12:49:46 executing program 5:
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
open_tree(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f00000003c0), 0x210400, 0x0)
syz_open_procfs(0x0, &(0x7f00000009c0)='loginuid\x00')
syz_mount_image$iso9660(&(0x7f0000000b40), &(0x7f0000000b80)='./file0\x00', 0x0, 0x1, &(0x7f0000000c00)=[{&(0x7f0000000bc0)="06", 0x1}], 0x1800, &(0x7f0000000c40))
setxattr$trusted_overlay_opaque(&(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40), &(0x7f0000000d80), 0x2, 0x0)

12:49:46 executing program 0:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}, {&(0x7f0000000000)=""/12, 0xc}], 0x2, 0x7, 0xfbd1)
pidfd_open(0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540))
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000300)=""/251, 0xfb}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000400)=""/139, 0x8b}], 0x4, 0x10000, 0x81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xfffffdcd)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents64(r2, &(0x7f00000017c0)=""/200, 0xc8)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000000c0)=@abs={0x1}, 0x6e)
listen(r3, 0x0)
shutdown(r3, 0x0)
accept$unix(r3, 0x0, 0x0)
signalfd4(r3, &(0x7f0000000500)={[0xe46]}, 0x8, 0x0)
getdents(r2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

12:49:46 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/protocols\x00')
pread64(r0, &(0x7f00000000c0)=""/98, 0x62, 0xe99)

12:49:46 executing program 6:
r0 = io_uring_setup(0x1378, &(0x7f0000000000)={0x0, 0x0, 0x2})
io_uring_enter(r0, 0x0, 0x8dd6, 0x3, &(0x7f0000000080)={[0x2]}, 0x8)

12:49:46 executing program 7:
r0 = io_uring_setup(0x1378, &(0x7f0000000000)={0x0, 0x0, 0x2})
io_uring_enter(r0, 0x0, 0x8dd6, 0x3, &(0x7f0000000080)={[0x2]}, 0x8)

12:49:46 executing program 2:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}, {&(0x7f0000000000)=""/12, 0xc}], 0x2, 0x7, 0xfbd1)
pidfd_open(0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540))
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000300)=""/251, 0xfb}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000400)=""/139, 0x8b}], 0x4, 0x10000, 0x81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xfffffdcd)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents64(r2, &(0x7f00000017c0)=""/200, 0xc8)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000000c0)=@abs={0x1}, 0x6e)
listen(r3, 0x0)
shutdown(r3, 0x0)
accept$unix(r3, 0x0, 0x0)
signalfd4(r3, &(0x7f0000000500)={[0xe46]}, 0x8, 0x0)
getdents(r2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

[  133.017208] tmpfs: Bad value for 'mpol'
12:49:46 executing program 3:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}, {&(0x7f0000000000)=""/12, 0xc}], 0x2, 0x7, 0xfbd1)
pidfd_open(0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540))
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000300)=""/251, 0xfb}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000400)=""/139, 0x8b}], 0x4, 0x10000, 0x81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xfffffdcd)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents64(r2, &(0x7f00000017c0)=""/200, 0xc8)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000000c0)=@abs={0x1}, 0x6e)
listen(r3, 0x0)
shutdown(r3, 0x0)
accept$unix(r3, 0x0, 0x0)
signalfd4(r3, &(0x7f0000000500)={[0xe46]}, 0x8, 0x0)
getdents(r2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

12:49:46 executing program 5:
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
open_tree(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f00000003c0), 0x210400, 0x0)
syz_open_procfs(0x0, &(0x7f00000009c0)='loginuid\x00')
syz_mount_image$iso9660(&(0x7f0000000b40), &(0x7f0000000b80)='./file0\x00', 0x0, 0x1, &(0x7f0000000c00)=[{&(0x7f0000000bc0)="06", 0x1}], 0x1800, &(0x7f0000000c40))
setxattr$trusted_overlay_opaque(&(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40), &(0x7f0000000d80), 0x2, 0x0)

12:49:46 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/protocols\x00')
pread64(r0, &(0x7f00000000c0)=""/98, 0x62, 0xe99)

12:49:46 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x36, 0x2d, 0x36, 0x3a, 0x4e]}}}}]})

12:49:46 executing program 2:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}, {&(0x7f0000000000)=""/12, 0xc}], 0x2, 0x7, 0xfbd1)
pidfd_open(0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540))
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000300)=""/251, 0xfb}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000400)=""/139, 0x8b}], 0x4, 0x10000, 0x81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xfffffdcd)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents64(r2, &(0x7f00000017c0)=""/200, 0xc8)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000000c0)=@abs={0x1}, 0x6e)
listen(r3, 0x0)
shutdown(r3, 0x0)
accept$unix(r3, 0x0, 0x0)
signalfd4(r3, &(0x7f0000000500)={[0xe46]}, 0x8, 0x0)
getdents(r2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

12:49:46 executing program 5:
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
open_tree(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f00000003c0), 0x210400, 0x0)
syz_open_procfs(0x0, &(0x7f00000009c0)='loginuid\x00')
syz_mount_image$iso9660(&(0x7f0000000b40), &(0x7f0000000b80)='./file0\x00', 0x0, 0x1, &(0x7f0000000c00)=[{&(0x7f0000000bc0)="06", 0x1}], 0x1800, &(0x7f0000000c40))
setxattr$trusted_overlay_opaque(&(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40), &(0x7f0000000d80), 0x2, 0x0)

[  133.170190] tmpfs: Bad value for 'mpol'
[  133.909275] tmpfs: Bad value for 'mpol'
12:49:47 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/protocols\x00')
pread64(r0, &(0x7f00000000c0)=""/98, 0x62, 0xe99)

12:49:47 executing program 4:
syz_mount_image$tmpfs(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x36, 0x2d, 0x36, 0x3a, 0x4e]}}}}]})

12:49:47 executing program 3:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}, {&(0x7f0000000000)=""/12, 0xc}], 0x2, 0x7, 0xfbd1)
pidfd_open(0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540))
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000300)=""/251, 0xfb}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000400)=""/139, 0x8b}], 0x4, 0x10000, 0x81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xfffffdcd)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents64(r2, &(0x7f00000017c0)=""/200, 0xc8)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000000c0)=@abs={0x1}, 0x6e)
listen(r3, 0x0)
shutdown(r3, 0x0)
accept$unix(r3, 0x0, 0x0)
signalfd4(r3, &(0x7f0000000500)={[0xe46]}, 0x8, 0x0)
getdents(r2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

12:49:47 executing program 2:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}, {&(0x7f0000000000)=""/12, 0xc}], 0x2, 0x7, 0xfbd1)
pidfd_open(0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540))
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000300)=""/251, 0xfb}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000400)=""/139, 0x8b}], 0x4, 0x10000, 0x81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xfffffdcd)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents64(r2, &(0x7f00000017c0)=""/200, 0xc8)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000000c0)=@abs={0x1}, 0x6e)
listen(r3, 0x0)
shutdown(r3, 0x0)
accept$unix(r3, 0x0, 0x0)
signalfd4(r3, &(0x7f0000000500)={[0xe46]}, 0x8, 0x0)
getdents(r2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

12:49:47 executing program 5:
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
open_tree(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f00000003c0), 0x210400, 0x0)
syz_open_procfs(0x0, &(0x7f00000009c0)='loginuid\x00')
syz_mount_image$iso9660(&(0x7f0000000b40), &(0x7f0000000b80)='./file0\x00', 0x0, 0x1, &(0x7f0000000c00)=[{&(0x7f0000000bc0)="06", 0x1}], 0x1800, &(0x7f0000000c40))
setxattr$trusted_overlay_opaque(&(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40), &(0x7f0000000d80), 0x2, 0x0)

12:49:47 executing program 0:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}, {&(0x7f0000000000)=""/12, 0xc}], 0x2, 0x7, 0xfbd1)
pidfd_open(0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540))
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000300)=""/251, 0xfb}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000400)=""/139, 0x8b}], 0x4, 0x10000, 0x81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xfffffdcd)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents64(r2, &(0x7f00000017c0)=""/200, 0xc8)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000000c0)=@abs={0x1}, 0x6e)
listen(r3, 0x0)
shutdown(r3, 0x0)
accept$unix(r3, 0x0, 0x0)
signalfd4(r3, &(0x7f0000000500)={[0xe46]}, 0x8, 0x0)
getdents(r2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

12:49:47 executing program 6:
r0 = io_uring_setup(0x1378, &(0x7f0000000000)={0x0, 0x0, 0x2})
io_uring_enter(r0, 0x0, 0x8dd6, 0x3, &(0x7f0000000080)={[0x2]}, 0x8)

12:49:47 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}, {&(0x7f0000000000)=""/12, 0xc}], 0x2, 0x7, 0xfbd1)
pidfd_open(0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540))
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000300)=""/251, 0xfb}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000400)=""/139, 0x8b}], 0x4, 0x10000, 0x81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xfffffdcd)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents64(r2, &(0x7f00000017c0)=""/200, 0xc8)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000000c0)=@abs={0x1}, 0x6e)
listen(r3, 0x0)
shutdown(r3, 0x0)
accept$unix(r3, 0x0, 0x0)
signalfd4(r3, &(0x7f0000000500)={[0xe46]}, 0x8, 0x0)
getdents(r2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

12:49:47 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/protocols\x00')
pread64(r0, &(0x7f00000000c0)=""/98, 0x62, 0xe99)

12:49:47 executing program 4:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}, {&(0x7f0000000000)=""/12, 0xc}], 0x2, 0x7, 0xfbd1)
pidfd_open(0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540))
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000300)=""/251, 0xfb}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000400)=""/139, 0x8b}], 0x4, 0x10000, 0x81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xfffffdcd)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents64(r2, &(0x7f00000017c0)=""/200, 0xc8)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000000c0)=@abs={0x1}, 0x6e)
listen(r3, 0x0)
shutdown(r3, 0x0)
accept$unix(r3, 0x0, 0x0)
signalfd4(r3, &(0x7f0000000500)={[0xe46]}, 0x8, 0x0)
getdents(r2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

12:49:47 executing program 0:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}, {&(0x7f0000000000)=""/12, 0xc}], 0x2, 0x7, 0xfbd1)
pidfd_open(0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540))
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000300)=""/251, 0xfb}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000400)=""/139, 0x8b}], 0x4, 0x10000, 0x81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xfffffdcd)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents64(r2, &(0x7f00000017c0)=""/200, 0xc8)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000000c0)=@abs={0x1}, 0x6e)
listen(r3, 0x0)
shutdown(r3, 0x0)
accept$unix(r3, 0x0, 0x0)
signalfd4(r3, &(0x7f0000000500)={[0xe46]}, 0x8, 0x0)
getdents(r2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

12:49:47 executing program 3:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}, {&(0x7f0000000000)=""/12, 0xc}], 0x2, 0x7, 0xfbd1)
pidfd_open(0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540))
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000300)=""/251, 0xfb}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000400)=""/139, 0x8b}], 0x4, 0x10000, 0x81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xfffffdcd)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents64(r2, &(0x7f00000017c0)=""/200, 0xc8)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000000c0)=@abs={0x1}, 0x6e)
listen(r3, 0x0)
shutdown(r3, 0x0)
accept$unix(r3, 0x0, 0x0)
signalfd4(r3, &(0x7f0000000500)={[0xe46]}, 0x8, 0x0)
getdents(r2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

12:49:47 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}, {&(0x7f0000000000)=""/12, 0xc}], 0x2, 0x7, 0xfbd1)
pidfd_open(0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540))
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000300)=""/251, 0xfb}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000400)=""/139, 0x8b}], 0x4, 0x10000, 0x81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xfffffdcd)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents64(r2, &(0x7f00000017c0)=""/200, 0xc8)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000000c0)=@abs={0x1}, 0x6e)
listen(r3, 0x0)
shutdown(r3, 0x0)
accept$unix(r3, 0x0, 0x0)
signalfd4(r3, &(0x7f0000000500)={[0xe46]}, 0x8, 0x0)
getdents(r2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

12:49:47 executing program 1:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}, {&(0x7f0000000000)=""/12, 0xc}], 0x2, 0x7, 0xfbd1)
pidfd_open(0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540))
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000300)=""/251, 0xfb}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000400)=""/139, 0x8b}], 0x4, 0x10000, 0x81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xfffffdcd)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents64(r2, &(0x7f00000017c0)=""/200, 0xc8)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000000c0)=@abs={0x1}, 0x6e)
listen(r3, 0x0)
shutdown(r3, 0x0)
accept$unix(r3, 0x0, 0x0)
signalfd4(r3, &(0x7f0000000500)={[0xe46]}, 0x8, 0x0)
getdents(r2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

12:49:48 executing program 5:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}, {&(0x7f0000000000)=""/12, 0xc}], 0x2, 0x7, 0xfbd1)
pidfd_open(0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540))
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000300)=""/251, 0xfb}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000400)=""/139, 0x8b}], 0x4, 0x10000, 0x81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xfffffdcd)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents64(r2, &(0x7f00000017c0)=""/200, 0xc8)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000000c0)=@abs={0x1}, 0x6e)
listen(r3, 0x0)
shutdown(r3, 0x0)
accept$unix(r3, 0x0, 0x0)
signalfd4(r3, &(0x7f0000000500)={[0xe46]}, 0x8, 0x0)
getdents(r2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

12:49:48 executing program 1:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}, {&(0x7f0000000000)=""/12, 0xc}], 0x2, 0x7, 0xfbd1)
pidfd_open(0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540))
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000300)=""/251, 0xfb}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000400)=""/139, 0x8b}], 0x4, 0x10000, 0x81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xfffffdcd)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents64(r2, &(0x7f00000017c0)=""/200, 0xc8)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000000c0)=@abs={0x1}, 0x6e)
listen(r3, 0x0)
shutdown(r3, 0x0)
accept$unix(r3, 0x0, 0x0)
signalfd4(r3, &(0x7f0000000500)={[0xe46]}, 0x8, 0x0)
getdents(r2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

12:49:48 executing program 2:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}, {&(0x7f0000000000)=""/12, 0xc}], 0x2, 0x7, 0xfbd1)
pidfd_open(0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540))
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000300)=""/251, 0xfb}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000400)=""/139, 0x8b}], 0x4, 0x10000, 0x81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xfffffdcd)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents64(r2, &(0x7f00000017c0)=""/200, 0xc8)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000000c0)=@abs={0x1}, 0x6e)
listen(r3, 0x0)
shutdown(r3, 0x0)
accept$unix(r3, 0x0, 0x0)
signalfd4(r3, &(0x7f0000000500)={[0xe46]}, 0x8, 0x0)
getdents(r2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

12:49:48 executing program 0:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}, {&(0x7f0000000000)=""/12, 0xc}], 0x2, 0x7, 0xfbd1)
pidfd_open(0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540))
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000300)=""/251, 0xfb}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000400)=""/139, 0x8b}], 0x4, 0x10000, 0x81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xfffffdcd)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents64(r2, &(0x7f00000017c0)=""/200, 0xc8)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000000c0)=@abs={0x1}, 0x6e)
listen(r3, 0x0)
shutdown(r3, 0x0)
accept$unix(r3, 0x0, 0x0)
signalfd4(r3, &(0x7f0000000500)={[0xe46]}, 0x8, 0x0)
getdents(r2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

12:49:48 executing program 4:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}, {&(0x7f0000000000)=""/12, 0xc}], 0x2, 0x7, 0xfbd1)
pidfd_open(0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540))
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000300)=""/251, 0xfb}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000400)=""/139, 0x8b}], 0x4, 0x10000, 0x81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xfffffdcd)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents64(r2, &(0x7f00000017c0)=""/200, 0xc8)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000000c0)=@abs={0x1}, 0x6e)
listen(r3, 0x0)
shutdown(r3, 0x0)
accept$unix(r3, 0x0, 0x0)
signalfd4(r3, &(0x7f0000000500)={[0xe46]}, 0x8, 0x0)
getdents(r2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

12:49:48 executing program 2:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}, {&(0x7f0000000000)=""/12, 0xc}], 0x2, 0x7, 0xfbd1)
pidfd_open(0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540))
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000300)=""/251, 0xfb}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000400)=""/139, 0x8b}], 0x4, 0x10000, 0x81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xfffffdcd)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents64(r2, &(0x7f00000017c0)=""/200, 0xc8)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000000c0)=@abs={0x1}, 0x6e)
listen(r3, 0x0)
shutdown(r3, 0x0)
accept$unix(r3, 0x0, 0x0)
signalfd4(r3, &(0x7f0000000500)={[0xe46]}, 0x8, 0x0)
getdents(r2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

12:49:48 executing program 4:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}, {&(0x7f0000000000)=""/12, 0xc}], 0x2, 0x7, 0xfbd1)
pidfd_open(0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540))
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000300)=""/251, 0xfb}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000400)=""/139, 0x8b}], 0x4, 0x10000, 0x81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xfffffdcd)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents64(r2, &(0x7f00000017c0)=""/200, 0xc8)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000000c0)=@abs={0x1}, 0x6e)
listen(r3, 0x0)
shutdown(r3, 0x0)
accept$unix(r3, 0x0, 0x0)
signalfd4(r3, &(0x7f0000000500)={[0xe46]}, 0x8, 0x0)
getdents(r2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

12:49:48 executing program 2:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}, {&(0x7f0000000000)=""/12, 0xc}], 0x2, 0x7, 0xfbd1)
pidfd_open(0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540))
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000300)=""/251, 0xfb}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000400)=""/139, 0x8b}], 0x4, 0x10000, 0x81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xfffffdcd)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents64(r2, &(0x7f00000017c0)=""/200, 0xc8)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000000c0)=@abs={0x1}, 0x6e)
listen(r3, 0x0)
shutdown(r3, 0x0)
accept$unix(r3, 0x0, 0x0)
signalfd4(r3, &(0x7f0000000500)={[0xe46]}, 0x8, 0x0)
getdents(r2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

12:49:48 executing program 7:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}, {&(0x7f0000000000)=""/12, 0xc}], 0x2, 0x7, 0xfbd1)
pidfd_open(0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540))
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000300)=""/251, 0xfb}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000400)=""/139, 0x8b}], 0x4, 0x10000, 0x81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xfffffdcd)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents64(r2, &(0x7f00000017c0)=""/200, 0xc8)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000000c0)=@abs={0x1}, 0x6e)
listen(r3, 0x0)
shutdown(r3, 0x0)
accept$unix(r3, 0x0, 0x0)
signalfd4(r3, &(0x7f0000000500)={[0xe46]}, 0x8, 0x0)
getdents(r2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

12:49:48 executing program 0:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}, {&(0x7f0000000000)=""/12, 0xc}], 0x2, 0x7, 0xfbd1)
pidfd_open(0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540))
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000300)=""/251, 0xfb}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000400)=""/139, 0x8b}], 0x4, 0x10000, 0x81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xfffffdcd)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents64(r2, &(0x7f00000017c0)=""/200, 0xc8)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000000c0)=@abs={0x1}, 0x6e)
listen(r3, 0x0)
shutdown(r3, 0x0)
accept$unix(r3, 0x0, 0x0)
signalfd4(r3, &(0x7f0000000500)={[0xe46]}, 0x8, 0x0)
getdents(r2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

12:49:48 executing program 3:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}, {&(0x7f0000000000)=""/12, 0xc}], 0x2, 0x7, 0xfbd1)
pidfd_open(0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540))
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000300)=""/251, 0xfb}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000400)=""/139, 0x8b}], 0x4, 0x10000, 0x81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xfffffdcd)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents64(r2, &(0x7f00000017c0)=""/200, 0xc8)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000000c0)=@abs={0x1}, 0x6e)
listen(r3, 0x0)
shutdown(r3, 0x0)
accept$unix(r3, 0x0, 0x0)
signalfd4(r3, &(0x7f0000000500)={[0xe46]}, 0x8, 0x0)
getdents(r2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

12:49:48 executing program 1:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}, {&(0x7f0000000000)=""/12, 0xc}], 0x2, 0x7, 0xfbd1)
pidfd_open(0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540))
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000300)=""/251, 0xfb}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000400)=""/139, 0x8b}], 0x4, 0x10000, 0x81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xfffffdcd)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents64(r2, &(0x7f00000017c0)=""/200, 0xc8)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000000c0)=@abs={0x1}, 0x6e)
listen(r3, 0x0)
shutdown(r3, 0x0)
accept$unix(r3, 0x0, 0x0)
signalfd4(r3, &(0x7f0000000500)={[0xe46]}, 0x8, 0x0)
getdents(r2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

12:49:48 executing program 5:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}, {&(0x7f0000000000)=""/12, 0xc}], 0x2, 0x7, 0xfbd1)
pidfd_open(0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540))
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000300)=""/251, 0xfb}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000400)=""/139, 0x8b}], 0x4, 0x10000, 0x81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xfffffdcd)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents64(r2, &(0x7f00000017c0)=""/200, 0xc8)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000000c0)=@abs={0x1}, 0x6e)
listen(r3, 0x0)
shutdown(r3, 0x0)
accept$unix(r3, 0x0, 0x0)
signalfd4(r3, &(0x7f0000000500)={[0xe46]}, 0x8, 0x0)
getdents(r2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

12:49:48 executing program 4:
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
io_setup(0x5, &(0x7f0000001540))

12:49:48 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x34, 0x2, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_ID={0x8}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}]}, 0x34}}, 0x0)

12:49:48 executing program 4:
r0 = syz_io_uring_setup(0x4efe, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd)
syz_io_uring_submit(r1, r2, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x6c64, 0x0, 0x0, 0x0, 0x0)

12:49:48 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x34, 0x2, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_ID={0x8}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}]}, 0x34}}, 0x0)

12:49:48 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000140))
openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80))
fcntl$setlease(r1, 0x402, 0x3)
openat(r1, &(0x7f00000001c0)='./file1\x00', 0x0, 0x149)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r3, 0x10, 0x0, 0x7ffc)
r4 = fcntl$dupfd(r3, 0x0, r2)
sendfile(r2, r4, 0x0, 0x1ff)
perf_event_open$cgroup(&(0x7f0000000400)={0x5, 0x80, 0x45, 0xfe, 0x80, 0x4, 0x0, 0x8, 0x80000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x81, 0x4, @perf_config_ext={0x4, 0x2}, 0x100b2, 0x5, 0x0, 0x7, 0x81f5, 0x8000, 0x81, 0x0, 0x9, 0x0, 0x7}, r4, 0xe, 0xffffffffffffffff, 0x0)
syncfs(r0)

12:49:48 executing program 5:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}, {&(0x7f0000000000)=""/12, 0xc}], 0x2, 0x7, 0xfbd1)
pidfd_open(0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540))
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000300)=""/251, 0xfb}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000400)=""/139, 0x8b}], 0x4, 0x10000, 0x81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xfffffdcd)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents64(r2, &(0x7f00000017c0)=""/200, 0xc8)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000000c0)=@abs={0x1}, 0x6e)
listen(r3, 0x0)
shutdown(r3, 0x0)
accept$unix(r3, 0x0, 0x0)
signalfd4(r3, &(0x7f0000000500)={[0xe46]}, 0x8, 0x0)
getdents(r2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

12:49:48 executing program 7:
clone3(&(0x7f00000030c0)={0x0, 0x0, 0x0, 0x0, {0x3b}, &(0x7f0000000880)=""/4096, 0x1000, 0x0, &(0x7f0000003080)=[0x0, 0x0], 0x2}, 0x58)

12:49:48 executing program 3:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}, {&(0x7f0000000000)=""/12, 0xc}], 0x2, 0x7, 0xfbd1)
pidfd_open(0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540))
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000300)=""/251, 0xfb}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000400)=""/139, 0x8b}], 0x4, 0x10000, 0x81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xfffffdcd)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents64(r2, &(0x7f00000017c0)=""/200, 0xc8)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000000c0)=@abs={0x1}, 0x6e)
listen(r3, 0x0)
shutdown(r3, 0x0)
accept$unix(r3, 0x0, 0x0)
signalfd4(r3, &(0x7f0000000500)={[0xe46]}, 0x8, 0x0)
getdents(r2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

12:49:48 executing program 4:
r0 = syz_io_uring_setup(0x4efe, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd)
syz_io_uring_submit(r1, r2, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x6c64, 0x0, 0x0, 0x0, 0x0)

12:49:48 executing program 0:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}, {&(0x7f0000000000)=""/12, 0xc}], 0x2, 0x7, 0xfbd1)
pidfd_open(0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540))
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000300)=""/251, 0xfb}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000400)=""/139, 0x8b}], 0x4, 0x10000, 0x81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xfffffdcd)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents64(r2, &(0x7f00000017c0)=""/200, 0xc8)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000000c0)=@abs={0x1}, 0x6e)
listen(r3, 0x0)
shutdown(r3, 0x0)
accept$unix(r3, 0x0, 0x0)
signalfd4(r3, &(0x7f0000000500)={[0xe46]}, 0x8, 0x0)
getdents(r2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

12:49:48 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]})
msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0)

12:49:48 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x34, 0x2, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_ID={0x8}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}]}, 0x34}}, 0x0)

12:49:48 executing program 4:
r0 = syz_io_uring_setup(0x4efe, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd)
syz_io_uring_submit(r1, r2, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x6c64, 0x0, 0x0, 0x0, 0x0)

12:49:48 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]})
msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0)

12:49:49 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x34, 0x2, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_ID={0x8}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}]}, 0x34}}, 0x0)

12:49:49 executing program 7:
r0 = fsopen(&(0x7f0000000440)='tracefs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='\x00', &(0x7f00000001c0)='*./#\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

12:49:49 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]})
msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0)

12:49:49 executing program 3:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}, {&(0x7f0000000000)=""/12, 0xc}], 0x2, 0x7, 0xfbd1)
pidfd_open(0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000540))
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000300)=""/251, 0xfb}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000400)=""/139, 0x8b}], 0x4, 0x10000, 0x81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xfffffdcd)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents64(r2, &(0x7f00000017c0)=""/200, 0xc8)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000000c0)=@abs={0x1}, 0x6e)
listen(r3, 0x0)
shutdown(r3, 0x0)
accept$unix(r3, 0x0, 0x0)
signalfd4(r3, &(0x7f0000000500)={[0xe46]}, 0x8, 0x0)
getdents(r2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

12:49:49 executing program 4:
r0 = syz_io_uring_setup(0x4efe, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0xd)
syz_io_uring_submit(r1, r2, &(0x7f0000002980)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x6c64, 0x0, 0x0, 0x0, 0x0)

12:49:49 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]})
msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0)

[  135.412067] syz-executor.6 (4137) used greatest stack depth: 24264 bytes left
12:49:49 executing program 5:
io_setup(0x1, &(0x7f0000001980)=<r0=>0x0)
io_pgetevents(r0, 0x0, 0x0, 0x0, &(0x7f0000001a00), 0x0)

12:49:49 executing program 7:
r0 = fsopen(&(0x7f0000000440)='tracefs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='\x00', &(0x7f00000001c0)='*./#\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

12:49:49 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0))

12:49:49 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000140))
openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80))
fcntl$setlease(r1, 0x402, 0x3)
openat(r1, &(0x7f00000001c0)='./file1\x00', 0x0, 0x149)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r3, 0x10, 0x0, 0x7ffc)
r4 = fcntl$dupfd(r3, 0x0, r2)
sendfile(r2, r4, 0x0, 0x1ff)
perf_event_open$cgroup(&(0x7f0000000400)={0x5, 0x80, 0x45, 0xfe, 0x80, 0x4, 0x0, 0x8, 0x80000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x81, 0x4, @perf_config_ext={0x4, 0x2}, 0x100b2, 0x5, 0x0, 0x7, 0x81f5, 0x8000, 0x81, 0x0, 0x9, 0x0, 0x7}, r4, 0xe, 0xffffffffffffffff, 0x0)
syncfs(r0)

12:49:49 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000140))
openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80))
fcntl$setlease(r1, 0x402, 0x3)
openat(r1, &(0x7f00000001c0)='./file1\x00', 0x0, 0x149)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r3, 0x10, 0x0, 0x7ffc)
r4 = fcntl$dupfd(r3, 0x0, r2)
sendfile(r2, r4, 0x0, 0x1ff)
perf_event_open$cgroup(&(0x7f0000000400)={0x5, 0x80, 0x45, 0xfe, 0x80, 0x4, 0x0, 0x8, 0x80000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x81, 0x4, @perf_config_ext={0x4, 0x2}, 0x100b2, 0x5, 0x0, 0x7, 0x81f5, 0x8000, 0x81, 0x0, 0x9, 0x0, 0x7}, r4, 0xe, 0xffffffffffffffff, 0x0)
syncfs(r0)

12:49:49 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0))

12:49:49 executing program 7:
r0 = fsopen(&(0x7f0000000440)='tracefs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='\x00', &(0x7f00000001c0)='*./#\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

12:49:49 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000140))
openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80))
fcntl$setlease(r1, 0x402, 0x3)
openat(r1, &(0x7f00000001c0)='./file1\x00', 0x0, 0x149)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r3, 0x10, 0x0, 0x7ffc)
r4 = fcntl$dupfd(r3, 0x0, r2)
sendfile(r2, r4, 0x0, 0x1ff)
perf_event_open$cgroup(&(0x7f0000000400)={0x5, 0x80, 0x45, 0xfe, 0x80, 0x4, 0x0, 0x8, 0x80000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x81, 0x4, @perf_config_ext={0x4, 0x2}, 0x100b2, 0x5, 0x0, 0x7, 0x81f5, 0x8000, 0x81, 0x0, 0x9, 0x0, 0x7}, r4, 0xe, 0xffffffffffffffff, 0x0)
syncfs(r0)

12:49:49 executing program 7:
r0 = fsopen(&(0x7f0000000440)='tracefs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='\x00', &(0x7f00000001c0)='*./#\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

12:49:49 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0))

12:49:49 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000140))
openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80))
fcntl$setlease(r1, 0x402, 0x3)
openat(r1, &(0x7f00000001c0)='./file1\x00', 0x0, 0x149)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r3, 0x10, 0x0, 0x7ffc)
r4 = fcntl$dupfd(r3, 0x0, r2)
sendfile(r2, r4, 0x0, 0x1ff)
perf_event_open$cgroup(&(0x7f0000000400)={0x5, 0x80, 0x45, 0xfe, 0x80, 0x4, 0x0, 0x8, 0x80000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x81, 0x4, @perf_config_ext={0x4, 0x2}, 0x100b2, 0x5, 0x0, 0x7, 0x81f5, 0x8000, 0x81, 0x0, 0x9, 0x0, 0x7}, r4, 0xe, 0xffffffffffffffff, 0x0)
syncfs(r0)

12:49:49 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000140))
openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80))
fcntl$setlease(r1, 0x402, 0x3)
openat(r1, &(0x7f00000001c0)='./file1\x00', 0x0, 0x149)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r3, 0x10, 0x0, 0x7ffc)
r4 = fcntl$dupfd(r3, 0x0, r2)
sendfile(r2, r4, 0x0, 0x1ff)
perf_event_open$cgroup(&(0x7f0000000400)={0x5, 0x80, 0x45, 0xfe, 0x80, 0x4, 0x0, 0x8, 0x80000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x81, 0x4, @perf_config_ext={0x4, 0x2}, 0x100b2, 0x5, 0x0, 0x7, 0x81f5, 0x8000, 0x81, 0x0, 0x9, 0x0, 0x7}, r4, 0xe, 0xffffffffffffffff, 0x0)
syncfs(r0)

12:49:49 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000140))
openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80))
fcntl$setlease(r1, 0x402, 0x3)
openat(r1, &(0x7f00000001c0)='./file1\x00', 0x0, 0x149)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r3, 0x10, 0x0, 0x7ffc)
r4 = fcntl$dupfd(r3, 0x0, r2)
sendfile(r2, r4, 0x0, 0x1ff)
perf_event_open$cgroup(&(0x7f0000000400)={0x5, 0x80, 0x45, 0xfe, 0x80, 0x4, 0x0, 0x8, 0x80000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x81, 0x4, @perf_config_ext={0x4, 0x2}, 0x100b2, 0x5, 0x0, 0x7, 0x81f5, 0x8000, 0x81, 0x0, 0x9, 0x0, 0x7}, r4, 0xe, 0xffffffffffffffff, 0x0)
syncfs(r0)

12:49:49 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000140))
openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80))
fcntl$setlease(r1, 0x402, 0x3)
openat(r1, &(0x7f00000001c0)='./file1\x00', 0x0, 0x149)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r3, 0x10, 0x0, 0x7ffc)
r4 = fcntl$dupfd(r3, 0x0, r2)
sendfile(r2, r4, 0x0, 0x1ff)
perf_event_open$cgroup(&(0x7f0000000400)={0x5, 0x80, 0x45, 0xfe, 0x80, 0x4, 0x0, 0x8, 0x80000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x81, 0x4, @perf_config_ext={0x4, 0x2}, 0x100b2, 0x5, 0x0, 0x7, 0x81f5, 0x8000, 0x81, 0x0, 0x9, 0x0, 0x7}, r4, 0xe, 0xffffffffffffffff, 0x0)
syncfs(r0)

[  135.665132] audit: type=1400 audit(1663332589.456:10): avc:  denied  { watch_reads } for  pid=4188 comm="syz-executor.4" path="/syzkaller-testdir191208164/syzkaller.1zLtQS/17/file0" dev="tmpfs" ino=1 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=dir permissive=1
12:49:49 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0))

12:49:49 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000140))
openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80))
fcntl$setlease(r1, 0x402, 0x3)
openat(r1, &(0x7f00000001c0)='./file1\x00', 0x0, 0x149)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r3, 0x10, 0x0, 0x7ffc)
r4 = fcntl$dupfd(r3, 0x0, r2)
sendfile(r2, r4, 0x0, 0x1ff)
perf_event_open$cgroup(&(0x7f0000000400)={0x5, 0x80, 0x45, 0xfe, 0x80, 0x4, 0x0, 0x8, 0x80000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x81, 0x4, @perf_config_ext={0x4, 0x2}, 0x100b2, 0x5, 0x0, 0x7, 0x81f5, 0x8000, 0x81, 0x0, 0x9, 0x0, 0x7}, r4, 0xe, 0xffffffffffffffff, 0x0)
syncfs(r0)

12:49:49 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000140))
openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80))
fcntl$setlease(r1, 0x402, 0x3)
openat(r1, &(0x7f00000001c0)='./file1\x00', 0x0, 0x149)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r3, 0x10, 0x0, 0x7ffc)
r4 = fcntl$dupfd(r3, 0x0, r2)
sendfile(r2, r4, 0x0, 0x1ff)
perf_event_open$cgroup(&(0x7f0000000400)={0x5, 0x80, 0x45, 0xfe, 0x80, 0x4, 0x0, 0x8, 0x80000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x81, 0x4, @perf_config_ext={0x4, 0x2}, 0x100b2, 0x5, 0x0, 0x7, 0x81f5, 0x8000, 0x81, 0x0, 0x9, 0x0, 0x7}, r4, 0xe, 0xffffffffffffffff, 0x0)
syncfs(r0)

12:49:49 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000140))
openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80))
fcntl$setlease(r1, 0x402, 0x3)
openat(r1, &(0x7f00000001c0)='./file1\x00', 0x0, 0x149)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r3, 0x10, 0x0, 0x7ffc)
r4 = fcntl$dupfd(r3, 0x0, r2)
sendfile(r2, r4, 0x0, 0x1ff)
perf_event_open$cgroup(&(0x7f0000000400)={0x5, 0x80, 0x45, 0xfe, 0x80, 0x4, 0x0, 0x8, 0x80000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x81, 0x4, @perf_config_ext={0x4, 0x2}, 0x100b2, 0x5, 0x0, 0x7, 0x81f5, 0x8000, 0x81, 0x0, 0x9, 0x0, 0x7}, r4, 0xe, 0xffffffffffffffff, 0x0)
syncfs(r0)

12:49:49 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000140))
openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80))
fcntl$setlease(r1, 0x402, 0x3)
openat(r1, &(0x7f00000001c0)='./file1\x00', 0x0, 0x149)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r3, 0x10, 0x0, 0x7ffc)
r4 = fcntl$dupfd(r3, 0x0, r2)
sendfile(r2, r4, 0x0, 0x1ff)
perf_event_open$cgroup(&(0x7f0000000400)={0x5, 0x80, 0x45, 0xfe, 0x80, 0x4, 0x0, 0x8, 0x80000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x81, 0x4, @perf_config_ext={0x4, 0x2}, 0x100b2, 0x5, 0x0, 0x7, 0x81f5, 0x8000, 0x81, 0x0, 0x9, 0x0, 0x7}, r4, 0xe, 0xffffffffffffffff, 0x0)
syncfs(r0)

12:49:49 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000140))
openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80))
fcntl$setlease(r1, 0x402, 0x3)
openat(r1, &(0x7f00000001c0)='./file1\x00', 0x0, 0x149)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r3, 0x10, 0x0, 0x7ffc)
r4 = fcntl$dupfd(r3, 0x0, r2)
sendfile(r2, r4, 0x0, 0x1ff)
perf_event_open$cgroup(&(0x7f0000000400)={0x5, 0x80, 0x45, 0xfe, 0x80, 0x4, 0x0, 0x8, 0x80000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x81, 0x4, @perf_config_ext={0x4, 0x2}, 0x100b2, 0x5, 0x0, 0x7, 0x81f5, 0x8000, 0x81, 0x0, 0x9, 0x0, 0x7}, r4, 0xe, 0xffffffffffffffff, 0x0)
syncfs(r0)

12:49:49 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000140))
openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80))
fcntl$setlease(r1, 0x402, 0x3)
openat(r1, &(0x7f00000001c0)='./file1\x00', 0x0, 0x149)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r3, 0x10, 0x0, 0x7ffc)
r4 = fcntl$dupfd(r3, 0x0, r2)
sendfile(r2, r4, 0x0, 0x1ff)
perf_event_open$cgroup(&(0x7f0000000400)={0x5, 0x80, 0x45, 0xfe, 0x80, 0x4, 0x0, 0x8, 0x80000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x81, 0x4, @perf_config_ext={0x4, 0x2}, 0x100b2, 0x5, 0x0, 0x7, 0x81f5, 0x8000, 0x81, 0x0, 0x9, 0x0, 0x7}, r4, 0xe, 0xffffffffffffffff, 0x0)
syncfs(r0)

12:49:50 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000140))
openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80))
fcntl$setlease(r1, 0x402, 0x3)
openat(r1, &(0x7f00000001c0)='./file1\x00', 0x0, 0x149)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r3, 0x10, 0x0, 0x7ffc)
r4 = fcntl$dupfd(r3, 0x0, r2)
sendfile(r2, r4, 0x0, 0x1ff)
perf_event_open$cgroup(&(0x7f0000000400)={0x5, 0x80, 0x45, 0xfe, 0x80, 0x4, 0x0, 0x8, 0x80000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x81, 0x4, @perf_config_ext={0x4, 0x2}, 0x100b2, 0x5, 0x0, 0x7, 0x81f5, 0x8000, 0x81, 0x0, 0x9, 0x0, 0x7}, r4, 0xe, 0xffffffffffffffff, 0x0)
syncfs(r0)

12:49:50 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000140))
openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80))
fcntl$setlease(r1, 0x402, 0x3)
openat(r1, &(0x7f00000001c0)='./file1\x00', 0x0, 0x149)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r3, 0x10, 0x0, 0x7ffc)
r4 = fcntl$dupfd(r3, 0x0, r2)
sendfile(r2, r4, 0x0, 0x1ff)
perf_event_open$cgroup(&(0x7f0000000400)={0x5, 0x80, 0x45, 0xfe, 0x80, 0x4, 0x0, 0x8, 0x80000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x81, 0x4, @perf_config_ext={0x4, 0x2}, 0x100b2, 0x5, 0x0, 0x7, 0x81f5, 0x8000, 0x81, 0x0, 0x9, 0x0, 0x7}, r4, 0xe, 0xffffffffffffffff, 0x0)
syncfs(r0)

12:49:50 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000140))
openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80))
fcntl$setlease(r1, 0x402, 0x3)
openat(r1, &(0x7f00000001c0)='./file1\x00', 0x0, 0x149)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r3, 0x10, 0x0, 0x7ffc)
r4 = fcntl$dupfd(r3, 0x0, r2)
sendfile(r2, r4, 0x0, 0x1ff)
perf_event_open$cgroup(&(0x7f0000000400)={0x5, 0x80, 0x45, 0xfe, 0x80, 0x4, 0x0, 0x8, 0x80000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x81, 0x4, @perf_config_ext={0x4, 0x2}, 0x100b2, 0x5, 0x0, 0x7, 0x81f5, 0x8000, 0x81, 0x0, 0x9, 0x0, 0x7}, r4, 0xe, 0xffffffffffffffff, 0x0)
syncfs(r0)

12:49:50 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000140))
openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80))
fcntl$setlease(r1, 0x402, 0x3)
openat(r1, &(0x7f00000001c0)='./file1\x00', 0x0, 0x149)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r3, 0x10, 0x0, 0x7ffc)
r4 = fcntl$dupfd(r3, 0x0, r2)
sendfile(r2, r4, 0x0, 0x1ff)
perf_event_open$cgroup(&(0x7f0000000400)={0x5, 0x80, 0x45, 0xfe, 0x80, 0x4, 0x0, 0x8, 0x80000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x81, 0x4, @perf_config_ext={0x4, 0x2}, 0x100b2, 0x5, 0x0, 0x7, 0x81f5, 0x8000, 0x81, 0x0, 0x9, 0x0, 0x7}, r4, 0xe, 0xffffffffffffffff, 0x0)
syncfs(r0)

12:49:50 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000140))
openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80))
fcntl$setlease(r1, 0x402, 0x3)
openat(r1, &(0x7f00000001c0)='./file1\x00', 0x0, 0x149)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r3, 0x10, 0x0, 0x7ffc)
r4 = fcntl$dupfd(r3, 0x0, r2)
sendfile(r2, r4, 0x0, 0x1ff)
perf_event_open$cgroup(&(0x7f0000000400)={0x5, 0x80, 0x45, 0xfe, 0x80, 0x4, 0x0, 0x8, 0x80000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x81, 0x4, @perf_config_ext={0x4, 0x2}, 0x100b2, 0x5, 0x0, 0x7, 0x81f5, 0x8000, 0x81, 0x0, 0x9, 0x0, 0x7}, r4, 0xe, 0xffffffffffffffff, 0x0)
syncfs(r0)

12:49:50 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000140))
openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80))
fcntl$setlease(r1, 0x402, 0x3)
openat(r1, &(0x7f00000001c0)='./file1\x00', 0x0, 0x149)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r3, 0x10, 0x0, 0x7ffc)
r4 = fcntl$dupfd(r3, 0x0, r2)
sendfile(r2, r4, 0x0, 0x1ff)
perf_event_open$cgroup(&(0x7f0000000400)={0x5, 0x80, 0x45, 0xfe, 0x80, 0x4, 0x0, 0x8, 0x80000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x81, 0x4, @perf_config_ext={0x4, 0x2}, 0x100b2, 0x5, 0x0, 0x7, 0x81f5, 0x8000, 0x81, 0x0, 0x9, 0x0, 0x7}, r4, 0xe, 0xffffffffffffffff, 0x0)
syncfs(r0)

12:49:50 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000140))
openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80))
fcntl$setlease(r1, 0x402, 0x3)
openat(r1, &(0x7f00000001c0)='./file1\x00', 0x0, 0x149)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r3, 0x10, 0x0, 0x7ffc)
r4 = fcntl$dupfd(r3, 0x0, r2)
sendfile(r2, r4, 0x0, 0x1ff)
perf_event_open$cgroup(&(0x7f0000000400)={0x5, 0x80, 0x45, 0xfe, 0x80, 0x4, 0x0, 0x8, 0x80000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x81, 0x4, @perf_config_ext={0x4, 0x2}, 0x100b2, 0x5, 0x0, 0x7, 0x81f5, 0x8000, 0x81, 0x0, 0x9, 0x0, 0x7}, r4, 0xe, 0xffffffffffffffff, 0x0)
syncfs(r0)

12:49:50 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000140))
openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80))
fcntl$setlease(r1, 0x402, 0x3)
openat(r1, &(0x7f00000001c0)='./file1\x00', 0x0, 0x149)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r3, 0x10, 0x0, 0x7ffc)
r4 = fcntl$dupfd(r3, 0x0, r2)
sendfile(r2, r4, 0x0, 0x1ff)
perf_event_open$cgroup(&(0x7f0000000400)={0x5, 0x80, 0x45, 0xfe, 0x80, 0x4, 0x0, 0x8, 0x80000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x81, 0x4, @perf_config_ext={0x4, 0x2}, 0x100b2, 0x5, 0x0, 0x7, 0x81f5, 0x8000, 0x81, 0x0, 0x9, 0x0, 0x7}, r4, 0xe, 0xffffffffffffffff, 0x0)
syncfs(r0)

12:49:50 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000140))
openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80))
fcntl$setlease(r1, 0x402, 0x3)
openat(r1, &(0x7f00000001c0)='./file1\x00', 0x0, 0x149)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r3, 0x10, 0x0, 0x7ffc)
r4 = fcntl$dupfd(r3, 0x0, r2)
sendfile(r2, r4, 0x0, 0x1ff)
perf_event_open$cgroup(&(0x7f0000000400)={0x5, 0x80, 0x45, 0xfe, 0x80, 0x4, 0x0, 0x8, 0x80000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x81, 0x4, @perf_config_ext={0x4, 0x2}, 0x100b2, 0x5, 0x0, 0x7, 0x81f5, 0x8000, 0x81, 0x0, 0x9, 0x0, 0x7}, r4, 0xe, 0xffffffffffffffff, 0x0)
syncfs(r0)

12:49:50 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000009c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4, 0x1}]}]}, 0x1c}}, 0x0)

12:49:50 executing program 5:
syz_mount_image$nfs(0x0, &(0x7f0000000380)='./file0\x00', 0x1, 0x0, 0x0, 0x840d, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_default\x00')
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="6e617418000000000000000000ffff00000000000000000000000000000000010000000000000000772e74db6f25cd900000000000000000000000001008d3ce610864f081ccc5f1f6bb9b1cca6ae7fa5b4f4a6cb5b6544a0a7fbeec944485229d76d8c4c0bb64d33d10"], 0x48)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x50480, 0x100)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000200)={0x2c, @private=0xa010102, 0x4e23, 0x4, 'wlc\x00', 0x16, 0x1, 0x5a}, 0x2c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff)
getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000140), &(0x7f0000000180)=0x4)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000280))
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0)

12:49:51 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000140))
openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80))
fcntl$setlease(r1, 0x402, 0x3)
openat(r1, &(0x7f00000001c0)='./file1\x00', 0x0, 0x149)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r3, 0x10, 0x0, 0x7ffc)
r4 = fcntl$dupfd(r3, 0x0, r2)
sendfile(r2, r4, 0x0, 0x1ff)
perf_event_open$cgroup(&(0x7f0000000400)={0x5, 0x80, 0x45, 0xfe, 0x80, 0x4, 0x0, 0x8, 0x80000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x81, 0x4, @perf_config_ext={0x4, 0x2}, 0x100b2, 0x5, 0x0, 0x7, 0x81f5, 0x8000, 0x81, 0x0, 0x9, 0x0, 0x7}, r4, 0xe, 0xffffffffffffffff, 0x0)
syncfs(r0)

12:49:51 executing program 5:
syz_mount_image$nfs(0x0, &(0x7f0000000380)='./file0\x00', 0x1, 0x0, 0x0, 0x840d, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_default\x00')
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="6e617418000000000000000000ffff00000000000000000000000000000000010000000000000000772e74db6f25cd900000000000000000000000001008d3ce610864f081ccc5f1f6bb9b1cca6ae7fa5b4f4a6cb5b6544a0a7fbeec944485229d76d8c4c0bb64d33d10"], 0x48)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x50480, 0x100)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000200)={0x2c, @private=0xa010102, 0x4e23, 0x4, 'wlc\x00', 0x16, 0x1, 0x5a}, 0x2c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff)
getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000140), &(0x7f0000000180)=0x4)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000280))
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0)

12:49:51 executing program 1:
syz_mount_image$nfs(0x0, &(0x7f0000000380)='./file0\x00', 0x1, 0x0, 0x0, 0x840d, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_default\x00')
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="6e617418000000000000000000ffff00000000000000000000000000000000010000000000000000772e74db6f25cd900000000000000000000000001008d3ce610864f081ccc5f1f6bb9b1cca6ae7fa5b4f4a6cb5b6544a0a7fbeec944485229d76d8c4c0bb64d33d10"], 0x48)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x50480, 0x100)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000200)={0x2c, @private=0xa010102, 0x4e23, 0x4, 'wlc\x00', 0x16, 0x1, 0x5a}, 0x2c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff)
getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000140), &(0x7f0000000180)=0x4)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000280))
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0)

12:49:51 executing program 2:
syz_mount_image$nfs(0x0, &(0x7f0000000380)='./file0\x00', 0x1, 0x0, 0x0, 0x840d, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_default\x00')
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="6e617418000000000000000000ffff00000000000000000000000000000000010000000000000000772e74db6f25cd900000000000000000000000001008d3ce610864f081ccc5f1f6bb9b1cca6ae7fa5b4f4a6cb5b6544a0a7fbeec944485229d76d8c4c0bb64d33d10"], 0x48)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x50480, 0x100)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000200)={0x2c, @private=0xa010102, 0x4e23, 0x4, 'wlc\x00', 0x16, 0x1, 0x5a}, 0x2c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff)
getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000140), &(0x7f0000000180)=0x4)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000280))
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0)

12:49:51 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000140))
openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80))
fcntl$setlease(r1, 0x402, 0x3)
openat(r1, &(0x7f00000001c0)='./file1\x00', 0x0, 0x149)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r3, 0x10, 0x0, 0x7ffc)
r4 = fcntl$dupfd(r3, 0x0, r2)
sendfile(r2, r4, 0x0, 0x1ff)
perf_event_open$cgroup(&(0x7f0000000400)={0x5, 0x80, 0x45, 0xfe, 0x80, 0x4, 0x0, 0x8, 0x80000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x81, 0x4, @perf_config_ext={0x4, 0x2}, 0x100b2, 0x5, 0x0, 0x7, 0x81f5, 0x8000, 0x81, 0x0, 0x9, 0x0, 0x7}, r4, 0xe, 0xffffffffffffffff, 0x0)
syncfs(r0)

12:49:51 executing program 5:
syz_mount_image$nfs(0x0, &(0x7f0000000380)='./file0\x00', 0x1, 0x0, 0x0, 0x840d, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_default\x00')
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffff
VM DIAGNOSIS:
12:49:42  Registers:
info registers vcpu 0
RAX=0000000000000007 RBX=ffffffff854ced80 RCX=ffffffff812aad3f RDX=0000000000000000
RSI=0000000000000004 RDI=ffffffff854ced80 RBP=ffffffff854ced80 RSP=ffff88801b847848
R8 =0000000000000000 R9 =ffffffff85b02f17 R10=0000000000000000 R11=0000000000000001
R12=ffff88801a241950 R13=ffff88801a2401f8 R14=ffff888008b3af78 R15=ffff888040a46200
RIP=ffffffff81789804 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa735198028 CR3=00000000413a4000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f
YMM01=0000000000000000 0000000000000000 6f732e616d7a6c62 696c2f756e672d78
YMM02=0000000000000000 0000000000000000 00352e6f732e616d 7a6c62696c2f756e
YMM03=0000000000000000 0000000000000000 672d78756e696c2d 34365f3638782f62
YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=000000000000003a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff822b3251 RDI=ffffffff87641ba0 RBP=ffffffff87641b60 RSP=ffff88804183f698
R8 =0000000000000001 R9 =000000000000000a R10=000000000000003a R11=0000000000000001
R12=000000000000003a R13=ffffffff87641b60 R14=0000000000000010 R15=ffffffff822b3240
RIP=ffffffff822b32a9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f0f16444700 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7086c52000 CR3=000000001b4ce000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 00000000000000ff
YMM01=0000000000000000 0000000000000000 2525252525252525 2525252525252525
YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000