Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:32206' (ECDSA) to the list of known hosts. 2022/09/16 13:10:55 fuzzer started 2022/09/16 13:10:55 dialing manager at localhost:36051 syzkaller login: [ 40.186070] cgroup: Unknown subsys name 'net' [ 40.262531] cgroup: Unknown subsys name 'rlimit' 2022/09/16 13:11:12 syscalls: 2215 2022/09/16 13:11:12 code coverage: enabled 2022/09/16 13:11:12 comparison tracing: enabled 2022/09/16 13:11:12 extra coverage: enabled 2022/09/16 13:11:12 setuid sandbox: enabled 2022/09/16 13:11:12 namespace sandbox: enabled 2022/09/16 13:11:12 Android sandbox: enabled 2022/09/16 13:11:12 fault injection: enabled 2022/09/16 13:11:12 leak checking: enabled 2022/09/16 13:11:12 net packet injection: enabled 2022/09/16 13:11:12 net device setup: enabled 2022/09/16 13:11:12 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/16 13:11:12 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/16 13:11:12 USB emulation: enabled 2022/09/16 13:11:12 hci packet injection: enabled 2022/09/16 13:11:12 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220916) 2022/09/16 13:11:12 802.15.4 emulation: enabled 2022/09/16 13:11:12 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/16 13:11:12 fetching corpus: 48, signal 23255/26866 (executing program) 2022/09/16 13:11:12 fetching corpus: 98, signal 41388/46384 (executing program) 2022/09/16 13:11:12 fetching corpus: 145, signal 51148/57472 (executing program) 2022/09/16 13:11:12 fetching corpus: 193, signal 59916/67433 (executing program) 2022/09/16 13:11:12 fetching corpus: 242, signal 65920/74655 (executing program) 2022/09/16 13:11:13 fetching corpus: 291, signal 70119/80069 (executing program) 2022/09/16 13:11:13 fetching corpus: 339, signal 76399/87365 (executing program) 2022/09/16 13:11:13 fetching corpus: 388, signal 82890/94702 (executing program) 2022/09/16 13:11:13 fetching corpus: 438, signal 86421/99295 (executing program) 2022/09/16 13:11:13 fetching corpus: 488, signal 89545/103404 (executing program) 2022/09/16 13:11:13 fetching corpus: 538, signal 92971/107733 (executing program) 2022/09/16 13:11:13 fetching corpus: 588, signal 97233/112740 (executing program) 2022/09/16 13:11:14 fetching corpus: 638, signal 102217/118348 (executing program) 2022/09/16 13:11:14 fetching corpus: 688, signal 104726/121714 (executing program) 2022/09/16 13:11:14 fetching corpus: 738, signal 109500/126977 (executing program) 2022/09/16 13:11:14 fetching corpus: 788, signal 111422/129722 (executing program) 2022/09/16 13:11:14 fetching corpus: 838, signal 113204/132322 (executing program) 2022/09/16 13:11:14 fetching corpus: 888, signal 115850/135611 (executing program) 2022/09/16 13:11:14 fetching corpus: 938, signal 119062/139266 (executing program) 2022/09/16 13:11:15 fetching corpus: 988, signal 122898/143405 (executing program) 2022/09/16 13:11:15 fetching corpus: 1036, signal 125296/146369 (executing program) 2022/09/16 13:11:15 fetching corpus: 1086, signal 127797/149344 (executing program) 2022/09/16 13:11:15 fetching corpus: 1136, signal 130269/152259 (executing program) 2022/09/16 13:11:15 fetching corpus: 1186, signal 133640/155849 (executing program) 2022/09/16 13:11:15 fetching corpus: 1236, signal 135290/158005 (executing program) 2022/09/16 13:11:15 fetching corpus: 1286, signal 136910/160164 (executing program) 2022/09/16 13:11:15 fetching corpus: 1334, signal 139431/162988 (executing program) 2022/09/16 13:11:16 fetching corpus: 1384, signal 141799/165605 (executing program) 2022/09/16 13:11:16 fetching corpus: 1434, signal 144200/168214 (executing program) 2022/09/16 13:11:16 fetching corpus: 1484, signal 147398/171371 (executing program) 2022/09/16 13:11:16 fetching corpus: 1533, signal 149627/173734 (executing program) 2022/09/16 13:11:16 fetching corpus: 1583, signal 152277/176368 (executing program) 2022/09/16 13:11:16 fetching corpus: 1633, signal 153201/177709 (executing program) 2022/09/16 13:11:17 fetching corpus: 1683, signal 154980/179726 (executing program) 2022/09/16 13:11:17 fetching corpus: 1733, signal 157487/182222 (executing program) 2022/09/16 13:11:17 fetching corpus: 1783, signal 158847/183878 (executing program) 2022/09/16 13:11:17 fetching corpus: 1833, signal 160260/185450 (executing program) 2022/09/16 13:11:17 fetching corpus: 1883, signal 161462/186865 (executing program) 2022/09/16 13:11:17 fetching corpus: 1932, signal 162242/187982 (executing program) 2022/09/16 13:11:17 fetching corpus: 1982, signal 163927/189862 (executing program) 2022/09/16 13:11:18 fetching corpus: 2032, signal 165653/191635 (executing program) 2022/09/16 13:11:18 fetching corpus: 2082, signal 167525/193433 (executing program) 2022/09/16 13:11:18 fetching corpus: 2132, signal 169275/195094 (executing program) 2022/09/16 13:11:18 fetching corpus: 2182, signal 170074/196138 (executing program) 2022/09/16 13:11:18 fetching corpus: 2232, signal 170905/197244 (executing program) 2022/09/16 13:11:18 fetching corpus: 2281, signal 172507/198736 (executing program) 2022/09/16 13:11:19 fetching corpus: 2331, signal 173201/199709 (executing program) 2022/09/16 13:11:19 fetching corpus: 2380, signal 174391/201015 (executing program) 2022/09/16 13:11:19 fetching corpus: 2430, signal 175369/202134 (executing program) 2022/09/16 13:11:19 fetching corpus: 2480, signal 176462/203273 (executing program) 2022/09/16 13:11:19 fetching corpus: 2530, signal 177357/204300 (executing program) 2022/09/16 13:11:19 fetching corpus: 2580, signal 178166/205251 (executing program) 2022/09/16 13:11:19 fetching corpus: 2630, signal 179328/206411 (executing program) 2022/09/16 13:11:19 fetching corpus: 2680, signal 180547/207559 (executing program) 2022/09/16 13:11:20 fetching corpus: 2730, signal 181272/208425 (executing program) 2022/09/16 13:11:20 fetching corpus: 2779, signal 183199/209931 (executing program) 2022/09/16 13:11:20 fetching corpus: 2829, signal 184050/210817 (executing program) 2022/09/16 13:11:20 fetching corpus: 2879, signal 185504/212033 (executing program) 2022/09/16 13:11:20 fetching corpus: 2929, signal 186375/212912 (executing program) 2022/09/16 13:11:20 fetching corpus: 2979, signal 187226/213735 (executing program) 2022/09/16 13:11:20 fetching corpus: 3029, signal 188338/214725 (executing program) 2022/09/16 13:11:21 fetching corpus: 3079, signal 189223/215572 (executing program) 2022/09/16 13:11:21 fetching corpus: 3129, signal 190398/216486 (executing program) 2022/09/16 13:11:21 fetching corpus: 3179, signal 190991/217212 (executing program) 2022/09/16 13:11:21 fetching corpus: 3229, signal 191940/218071 (executing program) 2022/09/16 13:11:21 fetching corpus: 3279, signal 192627/218764 (executing program) 2022/09/16 13:11:21 fetching corpus: 3329, signal 193410/219439 (executing program) 2022/09/16 13:11:22 fetching corpus: 3379, signal 194555/220314 (executing program) 2022/09/16 13:11:22 fetching corpus: 3429, signal 195582/221117 (executing program) 2022/09/16 13:11:22 fetching corpus: 3479, signal 196660/221921 (executing program) 2022/09/16 13:11:22 fetching corpus: 3529, signal 197459/222580 (executing program) 2022/09/16 13:11:22 fetching corpus: 3579, signal 198393/223280 (executing program) 2022/09/16 13:11:22 fetching corpus: 3629, signal 199412/223997 (executing program) 2022/09/16 13:11:23 fetching corpus: 3679, signal 200314/224663 (executing program) 2022/09/16 13:11:23 fetching corpus: 3729, signal 201237/225358 (executing program) 2022/09/16 13:11:23 fetching corpus: 3779, signal 202481/226080 (executing program) 2022/09/16 13:11:23 fetching corpus: 3829, signal 203421/226683 (executing program) 2022/09/16 13:11:23 fetching corpus: 3879, signal 204113/227225 (executing program) 2022/09/16 13:11:23 fetching corpus: 3929, signal 204983/227807 (executing program) 2022/09/16 13:11:23 fetching corpus: 3979, signal 205910/228418 (executing program) 2022/09/16 13:11:24 fetching corpus: 4029, signal 206991/229007 (executing program) 2022/09/16 13:11:24 fetching corpus: 4079, signal 207688/229451 (executing program) 2022/09/16 13:11:24 fetching corpus: 4129, signal 208604/229993 (executing program) 2022/09/16 13:11:24 fetching corpus: 4179, signal 209423/230447 (executing program) 2022/09/16 13:11:24 fetching corpus: 4229, signal 211016/231183 (executing program) 2022/09/16 13:11:24 fetching corpus: 4279, signal 211620/231603 (executing program) 2022/09/16 13:11:24 fetching corpus: 4329, signal 212211/232016 (executing program) 2022/09/16 13:11:25 fetching corpus: 4379, signal 212997/232443 (executing program) 2022/09/16 13:11:25 fetching corpus: 4429, signal 213865/232846 (executing program) 2022/09/16 13:11:25 fetching corpus: 4479, signal 214844/233297 (executing program) 2022/09/16 13:11:25 fetching corpus: 4529, signal 215677/233694 (executing program) 2022/09/16 13:11:25 fetching corpus: 4579, signal 216312/234029 (executing program) 2022/09/16 13:11:25 fetching corpus: 4629, signal 217062/234375 (executing program) 2022/09/16 13:11:26 fetching corpus: 4679, signal 217712/234709 (executing program) 2022/09/16 13:11:26 fetching corpus: 4729, signal 218164/234993 (executing program) 2022/09/16 13:11:26 fetching corpus: 4779, signal 218974/235334 (executing program) 2022/09/16 13:11:26 fetching corpus: 4829, signal 219436/235570 (executing program) 2022/09/16 13:11:26 fetching corpus: 4879, signal 219765/235784 (executing program) 2022/09/16 13:11:26 fetching corpus: 4929, signal 220579/236067 (executing program) 2022/09/16 13:11:26 fetching corpus: 4979, signal 221108/236270 (executing program) 2022/09/16 13:11:26 fetching corpus: 5029, signal 221542/236515 (executing program) 2022/09/16 13:11:27 fetching corpus: 5079, signal 222082/236698 (executing program) 2022/09/16 13:11:27 fetching corpus: 5129, signal 222515/236880 (executing program) 2022/09/16 13:11:27 fetching corpus: 5179, signal 223373/237111 (executing program) 2022/09/16 13:11:27 fetching corpus: 5229, signal 224258/237388 (executing program) 2022/09/16 13:11:27 fetching corpus: 5279, signal 225079/237614 (executing program) 2022/09/16 13:11:27 fetching corpus: 5329, signal 225707/237863 (executing program) 2022/09/16 13:11:27 fetching corpus: 5379, signal 226480/238026 (executing program) 2022/09/16 13:11:27 fetching corpus: 5429, signal 227290/238185 (executing program) 2022/09/16 13:11:28 fetching corpus: 5479, signal 227790/238313 (executing program) 2022/09/16 13:11:28 fetching corpus: 5529, signal 228349/238453 (executing program) 2022/09/16 13:11:28 fetching corpus: 5579, signal 229113/238565 (executing program) 2022/09/16 13:11:28 fetching corpus: 5629, signal 229607/238778 (executing program) 2022/09/16 13:11:28 fetching corpus: 5679, signal 230448/238869 (executing program) 2022/09/16 13:11:28 fetching corpus: 5729, signal 230840/238953 (executing program) 2022/09/16 13:11:28 fetching corpus: 5779, signal 231312/238964 (executing program) 2022/09/16 13:11:28 fetching corpus: 5829, signal 231974/238991 (executing program) 2022/09/16 13:11:29 fetching corpus: 5839, signal 232047/238991 (executing program) 2022/09/16 13:11:29 fetching corpus: 5839, signal 232047/238991 (executing program) 2022/09/16 13:11:31 starting 8 fuzzer processes 13:11:31 executing program 0: sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/uts\x00') 13:11:31 executing program 3: flock(0xffffffffffffffff, 0x0) 13:11:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r0, 0x1, 0x3c, 0x0, &(0x7f0000001300)) 13:11:31 executing program 2: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.pending_reads\x00', 0x48000, 0x100) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54010000100001000000000000000000200156d80000000000000005000000000000000000000000000000a100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x154}}, 0x0) r4 = perf_event_open$cgroup(&(0x7f00000012c0)={0x4, 0x80, 0x1, 0xf9, 0xcc, 0x7, 0x0, 0x100, 0x41500, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x80, 0x9}, 0x40002, 0x8, 0x4, 0x1, 0x0, 0x3, 0x3ff, 0x0, 0xce9d, 0x0, 0x5}, r1, 0xb, 0xffffffffffffffff, 0xc) sendfile(r3, r4, &(0x7f0000001340)=0x3, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000101) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000001c0)=[r0, 0xffffffffffffffff], 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) 13:11:31 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, 0x0, 0x0) [ 73.821224] audit: type=1400 audit(1663333891.264:6): avc: denied { execmem } for pid=286 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:11:31 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 13:11:31 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/icmp6\x00') pread64(r0, &(0x7f0000000000)=""/185, 0xb9, 0x0) 13:11:31 executing program 7: ioperm(0x0, 0x8, 0x8000) ioperm(0x0, 0x1, 0x200) [ 75.050209] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.053872] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.055342] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.059359] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.061521] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.062818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.068633] Bluetooth: hci0: HCI_REQ-0x0c1a [ 75.122659] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.124543] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.133969] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.141561] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.143482] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.144837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 75.146469] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.151863] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 75.152076] Bluetooth: hci3: HCI_REQ-0x0c1a [ 75.157291] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 75.162550] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 75.164861] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 75.166663] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 75.172647] Bluetooth: hci5: HCI_REQ-0x0c1a [ 75.175558] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.180437] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.182596] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.185157] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.191275] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.195354] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.197398] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.200396] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.208362] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.208449] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 75.211779] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 75.213423] Bluetooth: hci1: HCI_REQ-0x0c1a [ 75.213638] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 75.274341] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 75.276310] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 75.295352] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 75.299142] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 75.301561] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.307600] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 75.318004] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 75.318398] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.322194] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 75.323712] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 75.323841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.326441] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 75.339797] Bluetooth: hci4: HCI_REQ-0x0c1a [ 75.344139] Bluetooth: hci6: HCI_REQ-0x0c1a [ 75.353066] Bluetooth: hci7: HCI_REQ-0x0c1a [ 77.133985] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 77.135847] Bluetooth: hci0: command 0x0409 tx timeout [ 77.197951] Bluetooth: hci5: command 0x0409 tx timeout [ 77.197966] Bluetooth: hci3: command 0x0409 tx timeout [ 77.376988] Bluetooth: hci1: command 0x0409 tx timeout [ 77.389974] Bluetooth: hci7: command 0x0409 tx timeout [ 77.390647] Bluetooth: hci4: command 0x0409 tx timeout [ 77.391542] Bluetooth: hci6: command 0x0409 tx timeout [ 79.181966] Bluetooth: hci0: command 0x041b tx timeout [ 79.245975] Bluetooth: hci3: command 0x041b tx timeout [ 79.246478] Bluetooth: hci5: command 0x041b tx timeout [ 79.437978] Bluetooth: hci6: command 0x041b tx timeout [ 79.438459] Bluetooth: hci4: command 0x041b tx timeout [ 79.442929] Bluetooth: hci7: command 0x041b tx timeout [ 79.444020] Bluetooth: hci1: command 0x041b tx timeout [ 80.300558] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.305332] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.306396] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.312804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.314146] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.315398] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.319934] Bluetooth: hci2: HCI_REQ-0x0c1a [ 81.230028] Bluetooth: hci0: command 0x040f tx timeout [ 81.294530] Bluetooth: hci5: command 0x040f tx timeout [ 81.295235] Bluetooth: hci3: command 0x040f tx timeout [ 81.486135] Bluetooth: hci1: command 0x040f tx timeout [ 81.486683] Bluetooth: hci7: command 0x040f tx timeout [ 81.487521] Bluetooth: hci4: command 0x040f tx timeout [ 81.488737] Bluetooth: hci6: command 0x040f tx timeout [ 82.381947] Bluetooth: hci2: command 0x0409 tx timeout [ 83.277980] Bluetooth: hci0: command 0x0419 tx timeout [ 83.341944] Bluetooth: hci3: command 0x0419 tx timeout [ 83.342367] Bluetooth: hci5: command 0x0419 tx timeout [ 83.533996] Bluetooth: hci6: command 0x0419 tx timeout [ 83.534454] Bluetooth: hci4: command 0x0419 tx timeout [ 83.534852] Bluetooth: hci7: command 0x0419 tx timeout [ 83.535282] Bluetooth: hci1: command 0x0419 tx timeout [ 84.431122] Bluetooth: hci2: command 0x041b tx timeout [ 86.478107] Bluetooth: hci2: command 0x040f tx timeout [ 88.526001] Bluetooth: hci2: command 0x0419 tx timeout [ 130.863254] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 130.874613] audit: type=1400 audit(1663333948.317:7): avc: denied { open } for pid=3887 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 130.918705] audit: type=1400 audit(1663333948.361:8): avc: denied { kernel } for pid=3887 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 130.924815] ------------[ cut here ]------------ [ 130.924836] [ 130.924839] ====================================================== [ 130.924842] WARNING: possible circular locking dependency detected [ 130.924847] 6.0.0-rc5-next-20220916 #1 Not tainted [ 130.924853] ------------------------------------------------------ [ 130.924856] syz-executor.2/3888 is trying to acquire lock: [ 130.924863] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 130.924900] [ 130.924900] but task is already holding lock: [ 130.924903] ffff88800f988420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 130.924930] [ 130.924930] which lock already depends on the new lock. [ 130.924930] [ 130.924933] [ 130.924933] the existing dependency chain (in reverse order) is: [ 130.924937] [ 130.924937] -> #3 (&ctx->lock){....}-{2:2}: [ 130.924950] _raw_spin_lock+0x2a/0x40 [ 130.924967] __perf_event_task_sched_out+0x53b/0x18d0 [ 130.924979] __schedule+0xedd/0x2470 [ 130.924990] schedule+0xda/0x1b0 [ 130.925000] futex_wait_queue+0xf5/0x1e0 [ 130.925011] futex_wait+0x28e/0x690 [ 130.925021] do_futex+0x2ff/0x380 [ 130.925030] __x64_sys_futex+0x1c6/0x4d0 [ 130.925040] do_syscall_64+0x3b/0x90 [ 130.925054] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 130.925071] [ 130.925071] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 130.925085] _raw_spin_lock_nested+0x30/0x40 [ 130.925100] raw_spin_rq_lock_nested+0x1e/0x30 [ 130.925113] task_fork_fair+0x63/0x4d0 [ 130.925129] sched_cgroup_fork+0x3d0/0x540 [ 130.925143] copy_process+0x4183/0x6e20 [ 130.925153] kernel_clone+0xe7/0x890 [ 130.925162] user_mode_thread+0xad/0xf0 [ 130.925172] rest_init+0x24/0x250 [ 130.925189] arch_call_rest_init+0xf/0x14 [ 130.925201] start_kernel+0x4c1/0x4e6 [ 130.925211] secondary_startup_64_no_verify+0xe0/0xeb [ 130.925225] [ 130.925225] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 130.925238] _raw_spin_lock_irqsave+0x39/0x60 [ 130.925253] try_to_wake_up+0xab/0x1920 [ 130.925266] up+0x75/0xb0 [ 130.925277] __up_console_sem+0x6e/0x80 [ 130.925293] console_unlock+0x46a/0x590 [ 130.925308] con_install+0x14e/0x5d0 [ 130.925319] tty_init_dev.part.0+0xa0/0x610 [ 130.925332] tty_open+0xbc0/0x1370 [ 130.925343] chrdev_open+0x268/0x6e0 [ 130.925356] do_dentry_open+0x6ca/0x12b0 [ 130.925369] path_openat+0x19e1/0x2800 [ 130.925381] do_filp_open+0x1b6/0x410 [ 130.925392] do_sys_openat2+0x171/0x4c0 [ 130.925406] __x64_sys_openat+0x13f/0x1f0 [ 130.925421] do_syscall_64+0x3b/0x90 [ 130.925434] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 130.925451] [ 130.925451] -> #0 ((console_sem).lock){....}-{2:2}: [ 130.925464] __lock_acquire+0x2a02/0x5e70 [ 130.925480] lock_acquire+0x1a2/0x530 [ 130.925495] _raw_spin_lock_irqsave+0x39/0x60 [ 130.925510] down_trylock+0xe/0x70 [ 130.925522] __down_trylock_console_sem+0x3b/0xd0 [ 130.925538] vprintk_emit+0x16b/0x560 [ 130.925554] vprintk+0x84/0xa0 [ 130.925569] _printk+0xba/0xf1 [ 130.925587] report_bug.cold+0x72/0xab [ 130.925599] handle_bug+0x3c/0x70 [ 130.925612] exc_invalid_op+0x14/0x50 [ 130.925625] asm_exc_invalid_op+0x16/0x20 [ 130.925641] group_sched_out.part.0+0x2c7/0x460 [ 130.925651] ctx_sched_out+0x8f1/0xc10 [ 130.925661] __perf_event_task_sched_out+0x6d0/0x18d0 [ 130.925673] __schedule+0xedd/0x2470 [ 130.925683] schedule+0xda/0x1b0 [ 130.925693] futex_wait_queue+0xf5/0x1e0 [ 130.925703] futex_wait+0x28e/0x690 [ 130.925712] do_futex+0x2ff/0x380 [ 130.925721] __x64_sys_futex+0x1c6/0x4d0 [ 130.925730] do_syscall_64+0x3b/0x90 [ 130.925743] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 130.925760] [ 130.925760] other info that might help us debug this: [ 130.925760] [ 130.925763] Chain exists of: [ 130.925763] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 130.925763] [ 130.925778] Possible unsafe locking scenario: [ 130.925778] [ 130.925780] CPU0 CPU1 [ 130.925783] ---- ---- [ 130.925785] lock(&ctx->lock); [ 130.925790] lock(&rq->__lock); [ 130.925797] lock(&ctx->lock); [ 130.925803] lock((console_sem).lock); [ 130.925809] [ 130.925809] *** DEADLOCK *** [ 130.925809] [ 130.925810] 2 locks held by syz-executor.2/3888: [ 130.925817] #0: ffff88806cf37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 130.925843] #1: ffff88800f988420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 130.925870] [ 130.925870] stack backtrace: [ 130.925873] CPU: 1 PID: 3888 Comm: syz-executor.2 Not tainted 6.0.0-rc5-next-20220916 #1 [ 130.925886] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 130.925894] Call Trace: [ 130.925897] [ 130.925901] dump_stack_lvl+0x8b/0xb3 [ 130.925916] check_noncircular+0x263/0x2e0 [ 130.925932] ? format_decode+0x26c/0xb50 [ 130.925948] ? print_circular_bug+0x450/0x450 [ 130.925964] ? enable_ptr_key_workfn+0x20/0x20 [ 130.925978] ? __lockdep_reset_lock+0x180/0x180 [ 130.925995] ? format_decode+0x26c/0xb50 [ 130.926010] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 130.926027] __lock_acquire+0x2a02/0x5e70 [ 130.926048] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 130.926070] lock_acquire+0x1a2/0x530 [ 130.926087] ? down_trylock+0xe/0x70 [ 130.926101] ? rcu_read_unlock+0x40/0x40 [ 130.926119] ? find_held_lock+0x2c/0x110 [ 130.926135] ? vprintk+0x84/0xa0 [ 130.926152] _raw_spin_lock_irqsave+0x39/0x60 [ 130.926168] ? down_trylock+0xe/0x70 [ 130.926181] down_trylock+0xe/0x70 [ 130.926194] ? vprintk+0x84/0xa0 [ 130.926211] __down_trylock_console_sem+0x3b/0xd0 [ 130.926227] vprintk_emit+0x16b/0x560 [ 130.926246] vprintk+0x84/0xa0 [ 130.926263] _printk+0xba/0xf1 [ 130.926280] ? record_print_text.cold+0x16/0x16 [ 130.926300] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 130.926314] ? lock_downgrade+0x6d0/0x6d0 [ 130.926331] ? report_bug.cold+0x66/0xab [ 130.926345] ? group_sched_out.part.0+0x2c7/0x460 [ 130.926356] report_bug.cold+0x72/0xab [ 130.926372] handle_bug+0x3c/0x70 [ 130.926385] exc_invalid_op+0x14/0x50 [ 130.926400] asm_exc_invalid_op+0x16/0x20 [ 130.926417] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 130.926430] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 130.926442] RSP: 0018:ffff888015fdf8f8 EFLAGS: 00010006 [ 130.926451] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 130.926458] RDX: ffff888010355040 RSI: ffffffff81566027 RDI: 0000000000000005 [ 130.926466] RBP: ffff888040478000 R08: 0000000000000005 R09: 0000000000000001 [ 130.926474] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800f988400 [ 130.926481] R13: ffff88806cf3d100 R14: ffffffff8547bfc0 R15: 0000000000000002 [ 130.926492] ? group_sched_out.part.0+0x2c7/0x460 [ 130.926505] ? group_sched_out.part.0+0x2c7/0x460 [ 130.926518] ctx_sched_out+0x8f1/0xc10 [ 130.926530] __perf_event_task_sched_out+0x6d0/0x18d0 [ 130.926546] ? lock_is_held_type+0xd7/0x130 [ 130.926564] ? __perf_cgroup_move+0x160/0x160 [ 130.926576] ? set_next_entity+0x304/0x550 [ 130.926593] ? update_curr+0x267/0x740 [ 130.926610] ? lock_is_held_type+0xd7/0x130 [ 130.926629] __schedule+0xedd/0x2470 [ 130.926642] ? io_schedule_timeout+0x150/0x150 [ 130.926654] ? futex_wait_setup+0x166/0x230 [ 130.926668] schedule+0xda/0x1b0 [ 130.926679] futex_wait_queue+0xf5/0x1e0 [ 130.926691] futex_wait+0x28e/0x690 [ 130.926703] ? futex_wait_setup+0x230/0x230 [ 130.926716] ? wake_up_q+0x8b/0xf0 [ 130.926729] ? do_raw_spin_unlock+0x4f/0x220 [ 130.926748] ? futex_wake+0x158/0x490 [ 130.926762] ? lock_downgrade+0x6d0/0x6d0 [ 130.926779] ? lock_is_held_type+0xd7/0x130 [ 130.926798] do_futex+0x2ff/0x380 [ 130.926809] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 130.926821] ? ktime_get+0x153/0x1f0 [ 130.926837] __x64_sys_futex+0x1c6/0x4d0 [ 130.926848] ? hrtimer_interrupt+0x5b0/0x770 [ 130.926861] ? __x64_sys_futex_time32+0x480/0x480 [ 130.926874] ? syscall_enter_from_user_mode+0x1d/0x50 [ 130.926892] ? syscall_enter_from_user_mode+0x1d/0x50 [ 130.926912] do_syscall_64+0x3b/0x90 [ 130.926927] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 130.926944] RIP: 0033:0x7ff5ffabab19 [ 130.926953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 130.926963] RSP: 002b:00007ff5fd030218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 130.926974] RAX: ffffffffffffffda RBX: 00007ff5ffbcdf68 RCX: 00007ff5ffabab19 [ 130.926982] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff5ffbcdf68 [ 130.926990] RBP: 00007ff5ffbcdf60 R08: 0000000000000000 R09: 0000000000000000 [ 130.926999] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff5ffbcdf6c [ 130.927006] R13: 00007ffc3aada3bf R14: 00007ff5fd030300 R15: 0000000000022000 [ 130.927021] [ 130.991317] WARNING: CPU: 1 PID: 3888 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 130.991996] Modules linked in: [ 130.992243] CPU: 1 PID: 3888 Comm: syz-executor.2 Not tainted 6.0.0-rc5-next-20220916 #1 [ 130.992849] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 130.993685] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 130.994092] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 130.995438] RSP: 0018:ffff888015fdf8f8 EFLAGS: 00010006 [ 130.995836] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 130.996367] RDX: ffff888010355040 RSI: ffffffff81566027 RDI: 0000000000000005 [ 130.996917] RBP: ffff888040478000 R08: 0000000000000005 R09: 0000000000000001 [ 130.997444] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800f988400 [ 130.997980] R13: ffff88806cf3d100 R14: ffffffff8547bfc0 R15: 0000000000000002 [ 130.998512] FS: 00007ff5fd030700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 130.999100] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.999526] CR2: 000055a3da435080 CR3: 000000003f532000 CR4: 0000000000350ee0 [ 131.000053] Call Trace: [ 131.000251] [ 131.000425] ctx_sched_out+0x8f1/0xc10 [ 131.000726] __perf_event_task_sched_out+0x6d0/0x18d0 [ 131.001122] ? lock_is_held_type+0xd7/0x130 [ 131.001453] ? __perf_cgroup_move+0x160/0x160 [ 131.001798] ? set_next_entity+0x304/0x550 [ 131.002120] ? update_curr+0x267/0x740 [ 131.002419] ? lock_is_held_type+0xd7/0x130 [ 131.002746] __schedule+0xedd/0x2470 [ 131.003032] ? io_schedule_timeout+0x150/0x150 [ 131.003383] ? futex_wait_setup+0x166/0x230 [ 131.003711] schedule+0xda/0x1b0 [ 131.003979] futex_wait_queue+0xf5/0x1e0 [ 131.004291] futex_wait+0x28e/0x690 [ 131.004569] ? futex_wait_setup+0x230/0x230 [ 131.004903] ? wake_up_q+0x8b/0xf0 [ 131.005171] ? do_raw_spin_unlock+0x4f/0x220 [ 131.005516] ? futex_wake+0x158/0x490 [ 131.005810] ? lock_downgrade+0x6d0/0x6d0 [ 131.006133] ? lock_is_held_type+0xd7/0x130 [ 131.006469] do_futex+0x2ff/0x380 [ 131.006738] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 131.007171] ? ktime_get+0x153/0x1f0 [ 131.007458] __x64_sys_futex+0x1c6/0x4d0 [ 131.007762] ? hrtimer_interrupt+0x5b0/0x770 [ 131.008101] ? __x64_sys_futex_time32+0x480/0x480 [ 131.008467] ? syscall_enter_from_user_mode+0x1d/0x50 [ 131.008866] ? syscall_enter_from_user_mode+0x1d/0x50 [ 131.009267] do_syscall_64+0x3b/0x90 [ 131.009556] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 131.009945] RIP: 0033:0x7ff5ffabab19 [ 131.010229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 131.011566] RSP: 002b:00007ff5fd030218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 131.012124] RAX: ffffffffffffffda RBX: 00007ff5ffbcdf68 RCX: 00007ff5ffabab19 [ 131.012673] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff5ffbcdf68 [ 131.013207] RBP: 00007ff5ffbcdf60 R08: 0000000000000000 R09: 0000000000000000 [ 131.013737] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff5ffbcdf6c [ 131.014263] R13: 00007ffc3aada3bf R14: 00007ff5fd030300 R15: 0000000000022000 [ 131.014803] [ 131.014985] irq event stamp: 3962 [ 131.015245] hardirqs last enabled at (3961): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 131.015990] hardirqs last disabled at (3962): [] __schedule+0x1225/0x2470 [ 131.016618] softirqs last enabled at (3566): [] __irq_exit_rcu+0x11b/0x180 [ 131.017258] softirqs last disabled at (3535): [] __irq_exit_rcu+0x11b/0x180 [ 131.017901] ---[ end trace 0000000000000000 ]--- [ 131.220932] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 13:12:29 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, 0x0, 0x0) 13:12:29 executing program 7: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r0, 0xffffffffffffffff, 0xee01) 13:12:29 executing program 0: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.pending_reads\x00', 0x48000, 0x100) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54010000100001000000000000000000200156d80000000000000005000000000000000000000000000000a100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x154}}, 0x0) r4 = perf_event_open$cgroup(&(0x7f00000012c0)={0x4, 0x80, 0x1, 0xf9, 0xcc, 0x7, 0x0, 0x100, 0x41500, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x80, 0x9}, 0x40002, 0x8, 0x4, 0x1, 0x0, 0x3, 0x3ff, 0x0, 0xce9d, 0x0, 0x5}, r1, 0xb, 0xffffffffffffffff, 0xc) sendfile(r3, r4, &(0x7f0000001340)=0x3, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000101) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000001c0)=[r0, 0xffffffffffffffff], 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) 13:12:29 executing program 2: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.pending_reads\x00', 0x48000, 0x100) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54010000100001000000000000000000200156d80000000000000005000000000000000000000000000000a100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x154}}, 0x0) r4 = perf_event_open$cgroup(&(0x7f00000012c0)={0x4, 0x80, 0x1, 0xf9, 0xcc, 0x7, 0x0, 0x100, 0x41500, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x80, 0x9}, 0x40002, 0x8, 0x4, 0x1, 0x0, 0x3, 0x3ff, 0x0, 0xce9d, 0x0, 0x5}, r1, 0xb, 0xffffffffffffffff, 0xc) sendfile(r3, r4, &(0x7f0000001340)=0x3, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000101) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000001c0)=[r0, 0xffffffffffffffff], 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) 13:12:29 executing program 5: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.pending_reads\x00', 0x48000, 0x100) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54010000100001000000000000000000200156d80000000000000005000000000000000000000000000000a100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x154}}, 0x0) r4 = perf_event_open$cgroup(&(0x7f00000012c0)={0x4, 0x80, 0x1, 0xf9, 0xcc, 0x7, 0x0, 0x100, 0x41500, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x80, 0x9}, 0x40002, 0x8, 0x4, 0x1, 0x0, 0x3, 0x3ff, 0x0, 0xce9d, 0x0, 0x5}, r1, 0xb, 0xffffffffffffffff, 0xc) sendfile(r3, r4, &(0x7f0000001340)=0x3, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000101) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000001c0)=[r0, 0xffffffffffffffff], 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) 13:12:29 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r0, r0, 0x0, 0x100000) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) r2 = getuid() lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r1}, {0x2, 0x1, r2}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', r3, 0x0) recvmsg$unix(r0, &(0x7f00000009c0)={&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f00000004c0)=""/47, 0x2f}, {&(0x7f0000000500)=""/112, 0x70}, {&(0x7f0000000580)=""/152, 0x98}, {&(0x7f0000000640)=""/89, 0x59}, {&(0x7f00000006c0)=""/228, 0xe4}, {&(0x7f00000007c0)=""/55, 0x37}], 0x6, &(0x7f0000000880)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110}, 0x10001) getpid() syncfs(0xffffffffffffffff) 13:12:29 executing program 3: flock(0xffffffffffffffff, 0x0) 13:12:29 executing program 6: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.pending_reads\x00', 0x48000, 0x100) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54010000100001000000000000000000200156d80000000000000005000000000000000000000000000000a100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x154}}, 0x0) r4 = perf_event_open$cgroup(&(0x7f00000012c0)={0x4, 0x80, 0x1, 0xf9, 0xcc, 0x7, 0x0, 0x100, 0x41500, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x80, 0x9}, 0x40002, 0x8, 0x4, 0x1, 0x0, 0x3, 0x3ff, 0x0, 0xce9d, 0x0, 0x5}, r1, 0xb, 0xffffffffffffffff, 0xc) sendfile(r3, r4, &(0x7f0000001340)=0x3, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000101) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000001c0)=[r0, 0xffffffffffffffff], 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) [ 132.369368] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 132.372921] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.6'. [ 132.374777] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 13:12:29 executing program 7: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r0, 0xffffffffffffffff, 0xee01) [ 132.405982] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 13:12:29 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, 0x0, 0x0) 13:12:30 executing program 7: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r0, 0xffffffffffffffff, 0xee01) 13:12:30 executing program 2: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.pending_reads\x00', 0x48000, 0x100) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54010000100001000000000000000000200156d80000000000000005000000000000000000000000000000a100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff0100000000000004000000000000010000000032000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000da0000f5ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480002007863962b15ef7eaa956c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000000000000000000000000000000000000debc3f38dd1ca2aaef108e651d000000005eeac0e8ec56711ffac325818722985065bfd1e7ad5d448aecde99601de1e587eb0e76d1"], 0x154}}, 0x0) r4 = perf_event_open$cgroup(&(0x7f00000012c0)={0x4, 0x80, 0x1, 0xf9, 0xcc, 0x7, 0x0, 0x100, 0x41500, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x80, 0x9}, 0x40002, 0x8, 0x4, 0x1, 0x0, 0x3, 0x3ff, 0x0, 0xce9d, 0x0, 0x5}, r1, 0xb, 0xffffffffffffffff, 0xc) sendfile(r3, r4, &(0x7f0000001340)=0x3, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000101) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000001c0)=[r0, 0xffffffffffffffff], 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) 13:12:30 executing program 3: flock(0xffffffffffffffff, 0x0) 13:12:30 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r0, r0, 0x0, 0x100000) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) r2 = getuid() lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r1}, {0x2, 0x1, r2}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', r3, 0x0) recvmsg$unix(r0, &(0x7f00000009c0)={&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f00000004c0)=""/47, 0x2f}, {&(0x7f0000000500)=""/112, 0x70}, {&(0x7f0000000580)=""/152, 0x98}, {&(0x7f0000000640)=""/89, 0x59}, {&(0x7f00000006c0)=""/228, 0xe4}, {&(0x7f00000007c0)=""/55, 0x37}], 0x6, &(0x7f0000000880)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110}, 0x10001) getpid() syncfs(0xffffffffffffffff) 13:12:30 executing program 6: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.pending_reads\x00', 0x48000, 0x100) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54010000100001000000000000000000200156d80000000000000005000000000000000000000000000000a100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x154}}, 0x0) r4 = perf_event_open$cgroup(&(0x7f00000012c0)={0x4, 0x80, 0x1, 0xf9, 0xcc, 0x7, 0x0, 0x100, 0x41500, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x80, 0x9}, 0x40002, 0x8, 0x4, 0x1, 0x0, 0x3, 0x3ff, 0x0, 0xce9d, 0x0, 0x5}, r1, 0xb, 0xffffffffffffffff, 0xc) sendfile(r3, r4, &(0x7f0000001340)=0x3, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000101) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000001c0)=[r0, 0xffffffffffffffff], 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) 13:12:30 executing program 0: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.pending_reads\x00', 0x48000, 0x100) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54010000100001000000000000000000200156d80000000000000005000000000000000000000000000000a100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x154}}, 0x0) r4 = perf_event_open$cgroup(&(0x7f00000012c0)={0x4, 0x80, 0x1, 0xf9, 0xcc, 0x7, 0x0, 0x100, 0x41500, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x80, 0x9}, 0x40002, 0x8, 0x4, 0x1, 0x0, 0x3, 0x3ff, 0x0, 0xce9d, 0x0, 0x5}, r1, 0xb, 0xffffffffffffffff, 0xc) sendfile(r3, r4, &(0x7f0000001340)=0x3, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000101) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000001c0)=[r0, 0xffffffffffffffff], 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) 13:12:30 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4a, 0x0, 0x0) 13:12:30 executing program 5: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.pending_reads\x00', 0x48000, 0x100) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54010000100001000000000000000000200156d80000000000000005000000000000000000000000000000a100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x154}}, 0x0) r4 = perf_event_open$cgroup(&(0x7f00000012c0)={0x4, 0x80, 0x1, 0xf9, 0xcc, 0x7, 0x0, 0x100, 0x41500, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x80, 0x9}, 0x40002, 0x8, 0x4, 0x1, 0x0, 0x3, 0x3ff, 0x0, 0xce9d, 0x0, 0x5}, r1, 0xb, 0xffffffffffffffff, 0xc) sendfile(r3, r4, &(0x7f0000001340)=0x3, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000101) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000001c0)=[r0, 0xffffffffffffffff], 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) [ 132.669711] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.6'. 13:12:30 executing program 3: flock(0xffffffffffffffff, 0x0) [ 132.684257] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 132.694480] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 13:12:30 executing program 7: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r0, 0xffffffffffffffff, 0xee01) [ 132.709732] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 132.711901] hrtimer: interrupt took 18395 ns 13:12:30 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r0, r0, 0x0, 0x100000) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) r2 = getuid() lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r1}, {0x2, 0x1, r2}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', r3, 0x0) recvmsg$unix(r0, &(0x7f00000009c0)={&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f00000004c0)=""/47, 0x2f}, {&(0x7f0000000500)=""/112, 0x70}, {&(0x7f0000000580)=""/152, 0x98}, {&(0x7f0000000640)=""/89, 0x59}, {&(0x7f00000006c0)=""/228, 0xe4}, {&(0x7f00000007c0)=""/55, 0x37}], 0x6, &(0x7f0000000880)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110}, 0x10001) getpid() syncfs(0xffffffffffffffff) 13:12:30 executing program 2: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.pending_reads\x00', 0x48000, 0x100) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54010000100001000000000000000000200156d80000000000000005000000000000000000000000000000a100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x154}}, 0x0) r4 = perf_event_open$cgroup(&(0x7f00000012c0)={0x4, 0x80, 0x1, 0xf9, 0xcc, 0x7, 0x0, 0x100, 0x41500, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x80, 0x9}, 0x40002, 0x8, 0x4, 0x1, 0x0, 0x3, 0x3ff, 0x0, 0xce9d, 0x0, 0x5}, r1, 0xb, 0xffffffffffffffff, 0xc) sendfile(r3, r4, &(0x7f0000001340)=0x3, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000101) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000001c0)=[r0, 0xffffffffffffffff], 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) 13:12:30 executing program 6: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.pending_reads\x00', 0x48000, 0x100) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54010000100001000000000000000000200156d80000000000000005000000000000000000000000000000a100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x154}}, 0x0) r4 = perf_event_open$cgroup(&(0x7f00000012c0)={0x4, 0x80, 0x1, 0xf9, 0xcc, 0x7, 0x0, 0x100, 0x41500, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x80, 0x9}, 0x40002, 0x8, 0x4, 0x1, 0x0, 0x3, 0x3ff, 0x0, 0xce9d, 0x0, 0x5}, r1, 0xb, 0xffffffffffffffff, 0xc) sendfile(r3, r4, &(0x7f0000001340)=0x3, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000101) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000001c0)=[r0, 0xffffffffffffffff], 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) 13:12:30 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r0, r0, 0x0, 0x100000) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) r2 = getuid() lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r1}, {0x2, 0x1, r2}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', r3, 0x0) recvmsg$unix(r0, &(0x7f00000009c0)={&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f00000004c0)=""/47, 0x2f}, {&(0x7f0000000500)=""/112, 0x70}, {&(0x7f0000000580)=""/152, 0x98}, {&(0x7f0000000640)=""/89, 0x59}, {&(0x7f00000006c0)=""/228, 0xe4}, {&(0x7f00000007c0)=""/55, 0x37}], 0x6, &(0x7f0000000880)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110}, 0x10001) getpid() syncfs(0xffffffffffffffff) 13:12:30 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r0, r0, 0x0, 0x100000) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) r2 = getuid() lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r1}, {0x2, 0x1, r2}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', r3, 0x0) recvmsg$unix(r0, &(0x7f00000009c0)={&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f00000004c0)=""/47, 0x2f}, {&(0x7f0000000500)=""/112, 0x70}, {&(0x7f0000000580)=""/152, 0x98}, {&(0x7f0000000640)=""/89, 0x59}, {&(0x7f00000006c0)=""/228, 0xe4}, {&(0x7f00000007c0)=""/55, 0x37}], 0x6, &(0x7f0000000880)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110}, 0x10001) getpid() syncfs(0xffffffffffffffff) 13:12:30 executing program 7: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.pending_reads\x00', 0x48000, 0x100) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54010000100001000000000000000000200156d80000000000000005000000000000000000000000000000a100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x154}}, 0x0) r4 = perf_event_open$cgroup(&(0x7f00000012c0)={0x4, 0x80, 0x1, 0xf9, 0xcc, 0x7, 0x0, 0x100, 0x41500, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x80, 0x9}, 0x40002, 0x8, 0x4, 0x1, 0x0, 0x3, 0x3ff, 0x0, 0xce9d, 0x0, 0x5}, r1, 0xb, 0xffffffffffffffff, 0xc) sendfile(r3, r4, &(0x7f0000001340)=0x3, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000101) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000001c0)=[r0, 0xffffffffffffffff], 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) 13:12:30 executing program 0: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.pending_reads\x00', 0x48000, 0x100) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54010000100001000000000000000000200156d80000000000000005000000000000000000000000000000a100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x154}}, 0x0) r4 = perf_event_open$cgroup(&(0x7f00000012c0)={0x4, 0x80, 0x1, 0xf9, 0xcc, 0x7, 0x0, 0x100, 0x41500, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x80, 0x9}, 0x40002, 0x8, 0x4, 0x1, 0x0, 0x3, 0x3ff, 0x0, 0xce9d, 0x0, 0x5}, r1, 0xb, 0xffffffffffffffff, 0xc) sendfile(r3, r4, &(0x7f0000001340)=0x3, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000101) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000001c0)=[r0, 0xffffffffffffffff], 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) 13:12:30 executing program 5: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.pending_reads\x00', 0x48000, 0x100) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54010000100001000000000000000000200156d80000000000000005000000000000000000000000000000a100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x154}}, 0x0) r4 = perf_event_open$cgroup(&(0x7f00000012c0)={0x4, 0x80, 0x1, 0xf9, 0xcc, 0x7, 0x0, 0x100, 0x41500, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x80, 0x9}, 0x40002, 0x8, 0x4, 0x1, 0x0, 0x3, 0x3ff, 0x0, 0xce9d, 0x0, 0x5}, r1, 0xb, 0xffffffffffffffff, 0xc) sendfile(r3, r4, &(0x7f0000001340)=0x3, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000101) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000001c0)=[r0, 0xffffffffffffffff], 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) 13:12:30 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r0, r0, 0x0, 0x100000) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) r2 = getuid() lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r1}, {0x2, 0x1, r2}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', r3, 0x0) recvmsg$unix(r0, &(0x7f00000009c0)={&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f00000004c0)=""/47, 0x2f}, {&(0x7f0000000500)=""/112, 0x70}, {&(0x7f0000000580)=""/152, 0x98}, {&(0x7f0000000640)=""/89, 0x59}, {&(0x7f00000006c0)=""/228, 0xe4}, {&(0x7f00000007c0)=""/55, 0x37}], 0x6, &(0x7f0000000880)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110}, 0x10001) getpid() syncfs(0xffffffffffffffff) 13:12:30 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r0, r0, 0x0, 0x100000) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) r2 = getuid() lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r1}, {0x2, 0x1, r2}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', r3, 0x0) recvmsg$unix(r0, &(0x7f00000009c0)={&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f00000004c0)=""/47, 0x2f}, {&(0x7f0000000500)=""/112, 0x70}, {&(0x7f0000000580)=""/152, 0x98}, {&(0x7f0000000640)=""/89, 0x59}, {&(0x7f00000006c0)=""/228, 0xe4}, {&(0x7f00000007c0)=""/55, 0x37}], 0x6, &(0x7f0000000880)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110}, 0x10001) getpid() syncfs(0xffffffffffffffff) 13:12:30 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) vmsplice(r0, &(0x7f0000000440)=[{0x0}], 0x1, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x1, 0x2, 0x5, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x4, 0x2}]}, 0x18}}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000004c0)=0x33f) r2 = open(&(0x7f0000000400)='./file1\x00', 0x117c80, 0x48) r3 = open_tree(r2, &(0x7f0000000480)='./file1\x00', 0x8100) mount_setattr(r3, &(0x7f00000000c0)='./file1\x00', 0x1000, &(0x7f0000000180)={0x8, 0x80, 0x1e0000}, 0x20) syz_mount_image$vfat(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @broadcast}}}], 0x20}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x80200, 0x2) 13:12:30 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r0, r0, 0x0, 0x100000) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) r2 = getuid() lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r1}, {0x2, 0x1, r2}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', r3, 0x0) recvmsg$unix(r0, &(0x7f00000009c0)={&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f00000004c0)=""/47, 0x2f}, {&(0x7f0000000500)=""/112, 0x70}, {&(0x7f0000000580)=""/152, 0x98}, {&(0x7f0000000640)=""/89, 0x59}, {&(0x7f00000006c0)=""/228, 0xe4}, {&(0x7f00000007c0)=""/55, 0x37}], 0x6, &(0x7f0000000880)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110}, 0x10001) getpid() syncfs(0xffffffffffffffff) [ 133.109049] loop6: detected capacity change from 0 to 592 13:12:30 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r0, r0, 0x0, 0x100000) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) r2 = getuid() lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r1}, {0x2, 0x1, r2}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', r3, 0x0) recvmsg$unix(r0, &(0x7f00000009c0)={&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f00000004c0)=""/47, 0x2f}, {&(0x7f0000000500)=""/112, 0x70}, {&(0x7f0000000580)=""/152, 0x98}, {&(0x7f0000000640)=""/89, 0x59}, {&(0x7f00000006c0)=""/228, 0xe4}, {&(0x7f00000007c0)=""/55, 0x37}], 0x6, &(0x7f0000000880)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110}, 0x10001) getpid() syncfs(0xffffffffffffffff) 13:12:30 executing program 7: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.pending_reads\x00', 0x48000, 0x100) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54010000100001000000000000000000200156d80000000000000005000000000000000000000000000000a100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x154}}, 0x0) r4 = perf_event_open$cgroup(&(0x7f00000012c0)={0x4, 0x80, 0x1, 0xf9, 0xcc, 0x7, 0x0, 0x100, 0x41500, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x80, 0x9}, 0x40002, 0x8, 0x4, 0x1, 0x0, 0x3, 0x3ff, 0x0, 0xce9d, 0x0, 0x5}, r1, 0xb, 0xffffffffffffffff, 0xc) sendfile(r3, r4, &(0x7f0000001340)=0x3, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000101) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000001c0)=[r0, 0xffffffffffffffff], 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) 13:12:30 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x40000, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366cef82e00080820000200008000f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000010100)='RRaA\x00'/32, 0x20, 0x800}, {&(0x7f0000010200)="00000000727241610500000007000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010300)="601c6d6b646f7366cef82e00080820000200008000f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10800}, {&(0x7f0000010600)="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", 0x120, 0x11000}, {&(0x7f0000010800)="2e2020202020202020202010007ae770325132510000e77032510300000000002e2e20202020202020202010007ae770325132510000e770325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202020007ae770325132510000e770325104001a040000", 0x80, 0x15000}, {&(0x7f0000010900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x19000}, {&(0x7f0000010e00)='syzkallers\x00'/32, 0x20, 0x1d000}, {&(0x7f0000010f00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x25000}], 0x0, &(0x7f0000011000)) 13:12:30 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r0, r0, 0x0, 0x100000) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) r2 = getuid() lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r1}, {0x2, 0x1, r2}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', r3, 0x0) recvmsg$unix(r0, &(0x7f00000009c0)={&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f00000004c0)=""/47, 0x2f}, {&(0x7f0000000500)=""/112, 0x70}, {&(0x7f0000000580)=""/152, 0x98}, {&(0x7f0000000640)=""/89, 0x59}, {&(0x7f00000006c0)=""/228, 0xe4}, {&(0x7f00000007c0)=""/55, 0x37}], 0x6, &(0x7f0000000880)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110}, 0x10001) getpid() syncfs(0xffffffffffffffff) 13:12:30 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) vmsplice(r0, &(0x7f0000000440)=[{0x0}], 0x1, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x1, 0x2, 0x5, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x4, 0x2}]}, 0x18}}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000004c0)=0x33f) r2 = open(&(0x7f0000000400)='./file1\x00', 0x117c80, 0x48) r3 = open_tree(r2, &(0x7f0000000480)='./file1\x00', 0x8100) mount_setattr(r3, &(0x7f00000000c0)='./file1\x00', 0x1000, &(0x7f0000000180)={0x8, 0x80, 0x1e0000}, 0x20) syz_mount_image$vfat(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @broadcast}}}], 0x20}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x80200, 0x2) 13:12:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x21) mount(&(0x7f00000019c0)=ANY=[@ANYBLOB="2f64000000001d2f6e06643000511f3bf81447e3056b18ee9f448a8a044f433597c62bc2e819a3f8f402d111a58155d9ce0ea22e0b20b62df998baf62ae163aa5ee56e9849138cd1db4cd15ed89a04f8294745caa43c2cdb8e7cefcb8bff04dddcad931d3fae342023e287fe37dada1fd6178ce16468a7252eef3ef6a584c8ed6de0a372e456adf89f7d5ae7fe517479922bb163440b198d9194fffad1d046990af81dcc5bdcdffa1fef0092ce868e30d837b8bc81854ca93ca805a7d708f43c20dc61765a0a6e9ad04740c27d40e10d9db96d2b0f53cd1c839c2dc3297c8a6645c38f405999542739ce28cc639a74fb1997a74388da801dde6936ce33b5cd24b34c09b18bb82518fafa2c75d41da2818964947571e890f573b611c904bb095c41aeb10cd75effcbbfe31869097038185094e4ed89a4fc43f7c804fe4e7332509246953cd2"], &(0x7f0000000300)='./file1\x00', &(0x7f00000003c0)='cramfs\x00', 0x1000, &(0x7f0000000400)='\x00') pwritev(r0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e1", 0x12}, {&(0x7f0000000240)}], 0x3, 0x8001, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x40) r3 = syz_io_uring_setup(0x15971, &(0x7f0000000180)={0x0, 0x4494, 0x2, 0x1, 0x254, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000200)) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480), 0x20002, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc0605345, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f00000007c0)={0x0, ""/256, 0x0, 0x0}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000009c0)={r7, 0x0, "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", "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"}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r5) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x203}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x100000) 13:12:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100)="bd", 0x1) 13:12:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100)="bd", 0x1) 13:12:30 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001a0001000000000000000000026b02bb7feb773f70d5"], 0x1c}], 0x1}, 0x0) 13:12:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) dup3(r1, r0, 0x0) sendmmsg$unix(r1, &(0x7f000000adc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 13:12:30 executing program 7: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.pending_reads\x00', 0x48000, 0x100) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54010000100001000000000000000000200156d80000000000000005000000000000000000000000000000a100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x154}}, 0x0) r4 = perf_event_open$cgroup(&(0x7f00000012c0)={0x4, 0x80, 0x1, 0xf9, 0xcc, 0x7, 0x0, 0x100, 0x41500, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x80, 0x9}, 0x40002, 0x8, 0x4, 0x1, 0x0, 0x3, 0x3ff, 0x0, 0xce9d, 0x0, 0x5}, r1, 0xb, 0xffffffffffffffff, 0xc) sendfile(r3, r4, &(0x7f0000001340)=0x3, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000101) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000001c0)=[r0, 0xffffffffffffffff], 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) 13:12:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100)="bd", 0x1) [ 133.248766] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) 13:12:30 executing program 3: r0 = socket(0x2, 0xa, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={0x0}}, 0x0) [ 133.330861] syz-executor.0 (4023) used greatest stack depth: 24568 bytes left 13:12:30 executing program 6: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2) finit_module(0xffffffffffffffff, 0x0, 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x3, 0x7, 0x9, 0x1, 0x0, 0x7, 0x20, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000003c0), 0x6}, 0x42, 0x4, 0x200, 0x2, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x8000, 0x0, 0x7}, 0xffffffffffffffff, 0xe49, 0xffffffffffffffff, 0xe) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) shmget(0x0, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r4 = signalfd(r1, &(0x7f0000000000)={[0x8]}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x24004805) 13:12:30 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) vmsplice(r0, &(0x7f0000000440)=[{0x0}], 0x1, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x1, 0x2, 0x5, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x4, 0x2}]}, 0x18}}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000004c0)=0x33f) r2 = open(&(0x7f0000000400)='./file1\x00', 0x117c80, 0x48) r3 = open_tree(r2, &(0x7f0000000480)='./file1\x00', 0x8100) mount_setattr(r3, &(0x7f00000000c0)='./file1\x00', 0x1000, &(0x7f0000000180)={0x8, 0x80, 0x1e0000}, 0x20) syz_mount_image$vfat(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @broadcast}}}], 0x20}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x80200, 0x2) [ 133.389972] tmpfs: Bad value for 'mpol' 13:12:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100)="bd", 0x1) 13:12:30 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000200), &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@nr_blocks={'nr_blocks', 0x3d, [0x30, 0x0]}}]}) mknodat$loop(r0, &(0x7f0000000540)='./file0\x00', 0xc000, 0x1) 13:12:30 executing program 3: ustat(0x8000000000201, &(0x7f0000000000)) ustat(0x7fffffff, &(0x7f0000000340)) ustat(0x5, &(0x7f0000000300)) r0 = open(0x0, 0x0, 0x22) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000500)={0x0, 0x2, 0xffffffffffffffff, 0x6}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(0xffffffffffffffff) write$binfmt_script(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB='\t'], 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) close(r4) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r2) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000140)={{0x7, 0x3}, 0x100, './file1\x00'}) pwritev(r3, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) 13:12:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x21) mount(&(0x7f00000019c0)=ANY=[@ANYBLOB="2f64000000001d2f6e06643000511f3bf81447e3056b18ee9f448a8a044f433597c62bc2e819a3f8f402d111a58155d9ce0ea22e0b20b62df998baf62ae163aa5ee56e9849138cd1db4cd15ed89a04f8294745caa43c2cdb8e7cefcb8bff04dddcad931d3fae342023e287fe37dada1fd6178ce16468a7252eef3ef6a584c8ed6de0a372e456adf89f7d5ae7fe517479922bb163440b198d9194fffad1d046990af81dcc5bdcdffa1fef0092ce868e30d837b8bc81854ca93ca805a7d708f43c20dc61765a0a6e9ad04740c27d40e10d9db96d2b0f53cd1c839c2dc3297c8a6645c38f405999542739ce28cc639a74fb1997a74388da801dde6936ce33b5cd24b34c09b18bb82518fafa2c75d41da2818964947571e890f573b611c904bb095c41aeb10cd75effcbbfe31869097038185094e4ed89a4fc43f7c804fe4e7332509246953cd2"], &(0x7f0000000300)='./file1\x00', &(0x7f00000003c0)='cramfs\x00', 0x1000, &(0x7f0000000400)='\x00') pwritev(r0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e1", 0x12}, {&(0x7f0000000240)}], 0x3, 0x8001, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x40) r3 = syz_io_uring_setup(0x15971, &(0x7f0000000180)={0x0, 0x4494, 0x2, 0x1, 0x254, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000200)) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480), 0x20002, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc0605345, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f00000007c0)={0x0, ""/256, 0x0, 0x0}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000009c0)={r7, 0x0, "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", "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"}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r5) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x203}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x3800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x100000) 13:12:30 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative'}}}]}) 13:12:30 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000001340)="e4eb8e5355feefc9b3c48a57cf1602a197c4b0087f7e5812368dc3bab70e0418263fc620b190aa02558bcfb0e65cb7786074964845b33e3618af6ae487cb258242e1e8731eec366954e0c20a64f07e48", 0x50}], 0x1, 0x8d, 0x7bf6) pwritev2(r0, &(0x7f0000000300)=[{&(0x7f0000000180)="3c05886344f6c1676463474261a3cd71268afe038e7d96f46fea5246194a21c0bca49aab4882c5e4b508f5caf019902800cc407c31ecca2126ec616e9ef51561c11fb6d5ad0dc0c03998e37daae333db1252ad0d6b210c26dc017bcd9eb7b3773f1ab930713c646093f3efac450fcd793d65bfca217cf1d1be3971f4b8bee2b4fd3876a9b065f04ff62603f3cffe0e3ead48226b756653faf696165c00c54890e8d4590f8c08e761926d1a367f7adaff0cd7a0a804aae86072e3866492eabdfbbf60d4a310dfda9cb5f679ca00946a01dd39236d72f2aa56bb3d9d47c042843926cfff2164e5df0e048b3a8d", 0xec}], 0x1, 0x6, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) signalfd4(r5, &(0x7f00000007c0)={[0xa62]}, 0x8, 0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="01000000000000002e2f66696c654c00054a7c50dffbc222e5b6e9661d619b72988db658d37fe263f61b308c01790b898f2b0e0b6c8ecf178ee1a0ca721ea14f26656683c113e7dc7d4394d9b93a5b63e92508"]) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000140)={0x0, 0x200}) r6 = fcntl$dupfd(r4, 0x0, r2) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x40200, 0x0) dup3(r6, r7, 0x80000) [ 133.400299] tmpfs: Bad value for 'mpol' 13:12:30 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, 0x0) syz_io_uring_complete(0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x204000, 0x0) syz_mount_image$nfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x401, 0x1, &(0x7f00000027c0)=[{&(0x7f0000000300)="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", 0xffd, 0x4}], 0x0, &(0x7f00000028c0)={[{']/('}], [{@obj_user={'obj_user', 0x3d, '/dev/vcsa\x00'}}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000002980)='./file0\x00', &(0x7f00000029c0)={0x2041, 0x0, 0x8}, 0x18) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000002b80)='./file0/file0\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000002ec0), &(0x7f0000002f00)='./file1\x00', 0x0, 0x2, &(0x7f0000003180)=[{&(0x7f0000002f40)="c6", 0x1}, {&(0x7f0000003040)="c0", 0x1, 0x80000000}], 0x40000, &(0x7f0000003200)) 13:12:30 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000001400)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '#\x00\b', 0x10, 0x2c, 0x0, @empty, @local, {[], {0x0, 0xfffc, 0x10, 0x0, @opaque="44e67c344da1a96c"}}}}}}, 0x0) [ 133.501601] loop1: detected capacity change from 0 to 8 [ 133.505866] nfs: Unknown parameter ']/(' [ 133.514841] loop1: detected capacity change from 0 to 264192 13:12:30 executing program 4: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) close(r0) [ 133.547471] loop1: detected capacity change from 0 to 8 [ 133.548221] nfs: Unknown parameter ']/(' [ 133.566856] loop1: detected capacity change from 0 to 264192 13:12:31 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x24, 0x0, 0x0) 13:12:31 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x24048800) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000180)=0x5, 0x4) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 13:12:31 executing program 4: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) close(r0) [ 133.733418] audit: type=1400 audit(1663333951.169:9): avc: denied { write } for pid=4053 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 13:12:31 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e3, 0x0) futimesat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000007c0)={{}, {0x0, 0x2710}}) 13:12:31 executing program 1: r0 = gettid() waitid(0x1, r0, 0x0, 0x4, &(0x7f0000000300)) 13:12:31 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r0, r1) 13:12:31 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, VM DIAGNOSIS: 13:12:28 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffffffff8135b390 RCX=0000000000000000 RDX=1ffff1100315df04 RSI=ffffffff8423ea9b RDI=ffff888018aef890 RBP=ffff888018aef860 RSP=ffff888018aef7c0 R8 =ffffffff85ecb1c0 R9 =ffffffff85ecb1c4 R10=ffffed100315df06 R11=ffff888018aef808 R12=ffff888018aef890 R13=0000000000000000 R14=ffff88803f7c8000 R15=0000000000000dc0 RIP=ffffffff8135b39a RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6545e2a260 CR3=000000000ed2a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 2e6f747079726362 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00312e312e6f732e 6f74707972636269 YMM03=0000000000000000 0000000000000000 6c2f756e672d7875 6e696c2d34365f36 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b3251 RDI=ffffffff87641ba0 RBP=ffffffff87641b60 RSP=ffff888015fdf348 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000039 R11=0000000000000001 R12=0000000000000039 R13=ffffffff87641b60 R14=0000000000000010 R15=ffffffff822b3240 RIP=ffffffff822b32a9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff5fd030700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055a3da435080 CR3=000000003f532000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007ff5ffba17c0 00007ff5ffba17c8 YMM02=0000000000000000 0000000000000000 00007ff5ffba17e0 00007ff5ffba17c0 YMM03=0000000000000000 0000000000000000 00007ff5ffba17c8 00007ff5ffba17c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000