Warning: Permanently added '[localhost]:32703' (ECDSA) to the list of known hosts.
2022/09/12 15:55:58 fuzzer started
2022/09/12 15:55:58 dialing manager at localhost:38027
syzkaller login: [   40.993133] cgroup: Unknown subsys name 'net'
[   41.085309] cgroup: Unknown subsys name 'rlimit'
2022/09/12 15:56:12 syscalls: 2215
2022/09/12 15:56:12 code coverage: enabled
2022/09/12 15:56:12 comparison tracing: enabled
2022/09/12 15:56:12 extra coverage: enabled
2022/09/12 15:56:12 setuid sandbox: enabled
2022/09/12 15:56:12 namespace sandbox: enabled
2022/09/12 15:56:12 Android sandbox: enabled
2022/09/12 15:56:12 fault injection: enabled
2022/09/12 15:56:12 leak checking: enabled
2022/09/12 15:56:12 net packet injection: enabled
2022/09/12 15:56:12 net device setup: enabled
2022/09/12 15:56:12 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/09/12 15:56:12 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/09/12 15:56:12 USB emulation: enabled
2022/09/12 15:56:12 hci packet injection: enabled
2022/09/12 15:56:12 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220912                                          )
2022/09/12 15:56:12 802.15.4 emulation: enabled
2022/09/12 15:56:12 fetching corpus: 0, signal 0/2000 (executing program)
2022/09/12 15:56:12 fetching corpus: 50, signal 31116/34586 (executing program)
2022/09/12 15:56:12 fetching corpus: 100, signal 42189/47136 (executing program)
2022/09/12 15:56:13 fetching corpus: 150, signal 51279/57515 (executing program)
2022/09/12 15:56:13 fetching corpus: 200, signal 59516/66970 (executing program)
2022/09/12 15:56:13 fetching corpus: 250, signal 65645/74251 (executing program)
2022/09/12 15:56:13 fetching corpus: 300, signal 72292/82000 (executing program)
2022/09/12 15:56:13 fetching corpus: 350, signal 78042/88759 (executing program)
2022/09/12 15:56:13 fetching corpus: 400, signal 82385/94041 (executing program)
2022/09/12 15:56:13 fetching corpus: 450, signal 88077/100561 (executing program)
2022/09/12 15:56:14 fetching corpus: 500, signal 91408/104873 (executing program)
2022/09/12 15:56:14 fetching corpus: 550, signal 93821/108288 (executing program)
2022/09/12 15:56:14 fetching corpus: 600, signal 97334/112618 (executing program)
2022/09/12 15:56:14 fetching corpus: 650, signal 99631/115814 (executing program)
2022/09/12 15:56:14 fetching corpus: 700, signal 102205/119214 (executing program)
2022/09/12 15:56:14 fetching corpus: 750, signal 105235/122942 (executing program)
2022/09/12 15:56:14 fetching corpus: 800, signal 109090/127352 (executing program)
2022/09/12 15:56:14 fetching corpus: 850, signal 112125/130974 (executing program)
2022/09/12 15:56:15 fetching corpus: 900, signal 114083/133664 (executing program)
2022/09/12 15:56:15 fetching corpus: 950, signal 116360/136579 (executing program)
2022/09/12 15:56:15 fetching corpus: 1000, signal 119030/139838 (executing program)
2022/09/12 15:56:15 fetching corpus: 1050, signal 121812/143063 (executing program)
2022/09/12 15:56:15 fetching corpus: 1100, signal 124769/146419 (executing program)
2022/09/12 15:56:15 fetching corpus: 1150, signal 127490/149606 (executing program)
2022/09/12 15:56:16 fetching corpus: 1200, signal 129215/151915 (executing program)
2022/09/12 15:56:16 fetching corpus: 1250, signal 131131/154379 (executing program)
2022/09/12 15:56:16 fetching corpus: 1300, signal 133540/157177 (executing program)
2022/09/12 15:56:16 fetching corpus: 1350, signal 134967/159120 (executing program)
2022/09/12 15:56:16 fetching corpus: 1400, signal 137464/161873 (executing program)
2022/09/12 15:56:16 fetching corpus: 1450, signal 139483/164258 (executing program)
2022/09/12 15:56:16 fetching corpus: 1500, signal 141397/166533 (executing program)
2022/09/12 15:56:16 fetching corpus: 1550, signal 143435/168861 (executing program)
2022/09/12 15:56:17 fetching corpus: 1600, signal 144741/170616 (executing program)
2022/09/12 15:56:17 fetching corpus: 1650, signal 145916/172244 (executing program)
2022/09/12 15:56:17 fetching corpus: 1700, signal 147102/173822 (executing program)
2022/09/12 15:56:17 fetching corpus: 1750, signal 148404/175470 (executing program)
2022/09/12 15:56:17 fetching corpus: 1800, signal 149623/177087 (executing program)
2022/09/12 15:56:17 fetching corpus: 1850, signal 151456/179082 (executing program)
2022/09/12 15:56:17 fetching corpus: 1900, signal 152740/180588 (executing program)
2022/09/12 15:56:17 fetching corpus: 1950, signal 154096/182209 (executing program)
2022/09/12 15:56:18 fetching corpus: 2000, signal 155052/183551 (executing program)
2022/09/12 15:56:18 fetching corpus: 2050, signal 156605/185223 (executing program)
2022/09/12 15:56:18 fetching corpus: 2100, signal 157592/186503 (executing program)
2022/09/12 15:56:18 fetching corpus: 2150, signal 158367/187699 (executing program)
2022/09/12 15:56:18 fetching corpus: 2200, signal 159511/189097 (executing program)
2022/09/12 15:56:18 fetching corpus: 2250, signal 160526/190383 (executing program)
2022/09/12 15:56:18 fetching corpus: 2300, signal 162323/192131 (executing program)
2022/09/12 15:56:18 fetching corpus: 2350, signal 163296/193321 (executing program)
2022/09/12 15:56:18 fetching corpus: 2400, signal 164007/194351 (executing program)
2022/09/12 15:56:19 fetching corpus: 2450, signal 165733/195979 (executing program)
2022/09/12 15:56:19 fetching corpus: 2500, signal 166998/197308 (executing program)
2022/09/12 15:56:19 fetching corpus: 2550, signal 167974/198431 (executing program)
2022/09/12 15:56:19 fetching corpus: 2600, signal 169120/199630 (executing program)
2022/09/12 15:56:19 fetching corpus: 2650, signal 170276/200877 (executing program)
2022/09/12 15:56:19 fetching corpus: 2700, signal 171283/202001 (executing program)
2022/09/12 15:56:19 fetching corpus: 2750, signal 172273/203127 (executing program)
2022/09/12 15:56:20 fetching corpus: 2800, signal 173357/204267 (executing program)
2022/09/12 15:56:20 fetching corpus: 2850, signal 174776/205640 (executing program)
2022/09/12 15:56:20 fetching corpus: 2900, signal 175706/206642 (executing program)
2022/09/12 15:56:20 fetching corpus: 2950, signal 177047/207826 (executing program)
2022/09/12 15:56:20 fetching corpus: 3000, signal 177795/208718 (executing program)
2022/09/12 15:56:20 fetching corpus: 3050, signal 179085/209816 (executing program)
2022/09/12 15:56:20 fetching corpus: 3100, signal 179877/210699 (executing program)
2022/09/12 15:56:21 fetching corpus: 3150, signal 180972/211690 (executing program)
2022/09/12 15:56:21 fetching corpus: 3200, signal 181976/212630 (executing program)
2022/09/12 15:56:21 fetching corpus: 3250, signal 183005/213560 (executing program)
2022/09/12 15:56:21 fetching corpus: 3300, signal 184051/214438 (executing program)
2022/09/12 15:56:21 fetching corpus: 3350, signal 184784/215261 (executing program)
2022/09/12 15:56:21 fetching corpus: 3400, signal 185532/216046 (executing program)
2022/09/12 15:56:21 fetching corpus: 3450, signal 186341/216830 (executing program)
2022/09/12 15:56:21 fetching corpus: 3500, signal 186934/217498 (executing program)
2022/09/12 15:56:22 fetching corpus: 3550, signal 188223/218449 (executing program)
2022/09/12 15:56:22 fetching corpus: 3600, signal 189031/219186 (executing program)
2022/09/12 15:56:22 fetching corpus: 3650, signal 190129/220012 (executing program)
2022/09/12 15:56:22 fetching corpus: 3700, signal 191158/220811 (executing program)
2022/09/12 15:56:22 fetching corpus: 3750, signal 192471/221687 (executing program)
2022/09/12 15:56:22 fetching corpus: 3800, signal 193226/222365 (executing program)
2022/09/12 15:56:23 fetching corpus: 3850, signal 193891/222984 (executing program)
2022/09/12 15:56:23 fetching corpus: 3900, signal 195614/223929 (executing program)
2022/09/12 15:56:23 fetching corpus: 3950, signal 196261/224528 (executing program)
2022/09/12 15:56:23 fetching corpus: 4000, signal 197276/225179 (executing program)
2022/09/12 15:56:23 fetching corpus: 4050, signal 198514/225901 (executing program)
2022/09/12 15:56:23 fetching corpus: 4100, signal 199197/226446 (executing program)
2022/09/12 15:56:24 fetching corpus: 4150, signal 200059/227041 (executing program)
2022/09/12 15:56:24 fetching corpus: 4200, signal 200770/227537 (executing program)
2022/09/12 15:56:24 fetching corpus: 4250, signal 201710/228114 (executing program)
2022/09/12 15:56:24 fetching corpus: 4300, signal 202503/228631 (executing program)
2022/09/12 15:56:24 fetching corpus: 4350, signal 203154/229094 (executing program)
2022/09/12 15:56:24 fetching corpus: 4400, signal 203965/229587 (executing program)
2022/09/12 15:56:24 fetching corpus: 4450, signal 204477/229996 (executing program)
2022/09/12 15:56:25 fetching corpus: 4500, signal 205391/230524 (executing program)
2022/09/12 15:56:25 fetching corpus: 4550, signal 206163/230964 (executing program)
2022/09/12 15:56:25 fetching corpus: 4600, signal 206938/231386 (executing program)
2022/09/12 15:56:25 fetching corpus: 4650, signal 207507/231794 (executing program)
2022/09/12 15:56:25 fetching corpus: 4700, signal 208354/232227 (executing program)
2022/09/12 15:56:25 fetching corpus: 4750, signal 209159/232762 (executing program)
2022/09/12 15:56:25 fetching corpus: 4800, signal 209895/233122 (executing program)
2022/09/12 15:56:26 fetching corpus: 4850, signal 210687/233528 (executing program)
2022/09/12 15:56:26 fetching corpus: 4900, signal 211459/233883 (executing program)
2022/09/12 15:56:26 fetching corpus: 4950, signal 212171/234252 (executing program)
2022/09/12 15:56:26 fetching corpus: 5000, signal 212707/234530 (executing program)
2022/09/12 15:56:26 fetching corpus: 5050, signal 213343/234826 (executing program)
2022/09/12 15:56:26 fetching corpus: 5100, signal 213837/235100 (executing program)
2022/09/12 15:56:26 fetching corpus: 5150, signal 214584/235417 (executing program)
2022/09/12 15:56:27 fetching corpus: 5200, signal 215012/235668 (executing program)
2022/09/12 15:56:27 fetching corpus: 5250, signal 215464/235876 (executing program)
2022/09/12 15:56:27 fetching corpus: 5300, signal 216204/236132 (executing program)
2022/09/12 15:56:27 fetching corpus: 5350, signal 216685/236386 (executing program)
2022/09/12 15:56:27 fetching corpus: 5400, signal 217233/236616 (executing program)
2022/09/12 15:56:27 fetching corpus: 5450, signal 217783/236841 (executing program)
2022/09/12 15:56:27 fetching corpus: 5500, signal 218574/237089 (executing program)
2022/09/12 15:56:28 fetching corpus: 5550, signal 219178/237303 (executing program)
2022/09/12 15:56:28 fetching corpus: 5600, signal 219935/237498 (executing program)
2022/09/12 15:56:28 fetching corpus: 5650, signal 220507/237666 (executing program)
2022/09/12 15:56:28 fetching corpus: 5700, signal 221144/237855 (executing program)
2022/09/12 15:56:28 fetching corpus: 5750, signal 221870/237991 (executing program)
2022/09/12 15:56:28 fetching corpus: 5800, signal 222403/238091 (executing program)
2022/09/12 15:56:29 fetching corpus: 5850, signal 222953/238097 (executing program)
2022/09/12 15:56:29 fetching corpus: 5900, signal 223433/238099 (executing program)
2022/09/12 15:56:29 fetching corpus: 5950, signal 224000/238108 (executing program)
2022/09/12 15:56:29 fetching corpus: 6000, signal 224268/238114 (executing program)
2022/09/12 15:56:29 fetching corpus: 6050, signal 224790/238114 (executing program)
2022/09/12 15:56:29 fetching corpus: 6100, signal 225732/238114 (executing program)
2022/09/12 15:56:29 fetching corpus: 6150, signal 226380/238125 (executing program)
2022/09/12 15:56:29 fetching corpus: 6200, signal 227165/238263 (executing program)
2022/09/12 15:56:30 fetching corpus: 6250, signal 227663/238270 (executing program)
2022/09/12 15:56:30 fetching corpus: 6300, signal 228241/238273 (executing program)
2022/09/12 15:56:30 fetching corpus: 6350, signal 228828/238288 (executing program)
2022/09/12 15:56:30 fetching corpus: 6400, signal 229319/238344 (executing program)
2022/09/12 15:56:30 fetching corpus: 6408, signal 229385/238351 (executing program)
2022/09/12 15:56:30 fetching corpus: 6408, signal 229385/238351 (executing program)
2022/09/12 15:56:33 starting 8 fuzzer processes
15:56:33 executing program 0:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, r0)
keyctl$revoke(0x3, r0)

15:56:33 executing program 1:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$getown(r0, 0x9)
r2 = dup(r1)
setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8)
sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0)
getsockname$packet(r2, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000001c0)={{}, 0x9, 0x100000000, 0x100000001})

15:56:33 executing program 2:
ustat(0x1, &(0x7f0000000000))
ustat(0x5, &(0x7f0000000300))
r0 = open(0x0, 0x0, 0x22)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000500)={0x0, 0x2, 0xffffffffffffffff, 0x6})
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000040)=0x3)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x8, 0x8, 0x7f, 0x0, 0x20, 0x40, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x7, 0x7fff}, 0x2050, 0x0, 0x3, 0x5, 0xcb6, 0x1, 0x7ff, 0x0, 0x10000, 0x0, 0x9}, 0x0, 0x1, r1, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000140)={{0x7, 0x3}, 0x100, './file1\x00'})

15:56:33 executing program 3:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
read(r0, &(0x7f0000000140)=""/138, 0x8a)

15:56:33 executing program 4:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1)
renameat2(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000180)='./file1\x00', 0x2)

15:56:33 executing program 5:
r0 = perf_event_open(&(0x7f0000001840)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/160, 0xa0}], 0x1)

15:56:33 executing program 6:
syz_io_uring_complete(0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_io_uring_setup(0x6526, &(0x7f0000000480), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000500), &(0x7f0000000540))
syz_io_uring_setup(0x5514, &(0x7f0000000580)={0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000c00)={0x1, &(0x7f0000000bc0)=[{}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

15:56:33 executing program 7:
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00')
open_by_handle_at(r0, &(0x7f00000005c0)=@FILEID_BTRFS_WITH_PARENT_ROOT={0x28}, 0x0)

[   75.564518] audit: type=1400 audit(1662998193.269:6): avc:  denied  { execmem } for  pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[   76.881193] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   76.883281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   76.886015] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   76.888514] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   76.892909] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   76.895380] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   76.896589] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   76.897865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   76.899864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   76.901895] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   76.903439] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   76.905164] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   76.907514] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   76.909065] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   76.910169] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   76.912475] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   76.914457] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   76.915602] Bluetooth: hci2: HCI_REQ-0x0c1a
[   76.926820] Bluetooth: hci3: HCI_REQ-0x0c1a
[   76.935819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   76.942565] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   76.944097] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   76.946005] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   76.947772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   76.948926] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   76.954044] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   76.956461] Bluetooth: hci0: HCI_REQ-0x0c1a
[   76.967816] Bluetooth: hci1: HCI_REQ-0x0c1a
[   77.018205] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   77.020016] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   77.021523] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   77.024552] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   77.026354] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   77.027723] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   77.032504] Bluetooth: hci7: HCI_REQ-0x0c1a
[   78.948133] Bluetooth: hci3: command 0x0409 tx timeout
[   78.948785] Bluetooth: hci2: command 0x0409 tx timeout
[   79.012022] Bluetooth: hci5: Opcode 0x c03 failed: -110
[   79.012095] Bluetooth: hci1: command 0x0409 tx timeout
[   79.013573] Bluetooth: hci0: command 0x0409 tx timeout
[   79.015671] Bluetooth: hci6: Opcode 0x c03 failed: -110
[   79.016406] Bluetooth: hci4: Opcode 0x c03 failed: -110
[   79.075696] Bluetooth: hci7: command 0x0409 tx timeout
[   80.996711] Bluetooth: hci2: command 0x041b tx timeout
[   80.997178] Bluetooth: hci3: command 0x041b tx timeout
[   81.060758] Bluetooth: hci0: command 0x041b tx timeout
[   81.061296] Bluetooth: hci1: command 0x041b tx timeout
[   81.123738] Bluetooth: hci7: command 0x041b tx timeout
[   82.622799] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   82.626100] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   82.627752] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   82.654998] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   82.658847] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   82.661130] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   82.671756] Bluetooth: hci6: HCI_REQ-0x0c1a
[   83.043727] Bluetooth: hci3: command 0x040f tx timeout
[   83.044286] Bluetooth: hci2: command 0x040f tx timeout
[   83.107727] Bluetooth: hci1: command 0x040f tx timeout
[   83.108285] Bluetooth: hci0: command 0x040f tx timeout
[   83.171731] Bluetooth: hci7: command 0x040f tx timeout
[   84.323717] Bluetooth: hci4: Opcode 0x c03 failed: -110
[   84.515839] Bluetooth: hci5: Opcode 0x c03 failed: -110
[   84.708979] Bluetooth: hci6: command 0x0409 tx timeout
[   85.092696] Bluetooth: hci2: command 0x0419 tx timeout
[   85.093206] Bluetooth: hci3: command 0x0419 tx timeout
[   85.155710] Bluetooth: hci0: command 0x0419 tx timeout
[   85.156176] Bluetooth: hci1: command 0x0419 tx timeout
[   85.219744] Bluetooth: hci7: command 0x0419 tx timeout
[   86.755706] Bluetooth: hci6: command 0x041b tx timeout
[   87.270901] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   87.273089] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   87.274172] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   87.277164] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   87.278304] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   87.279452] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   87.282910] Bluetooth: hci5: HCI_REQ-0x0c1a
[   88.803713] Bluetooth: hci6: command 0x040f tx timeout
[   89.059795] Bluetooth: hci4: Opcode 0x c03 failed: -110
[   89.315728] Bluetooth: hci5: command 0x0409 tx timeout
[   90.852706] Bluetooth: hci6: command 0x0419 tx timeout
[   91.363721] Bluetooth: hci5: command 0x041b tx timeout
[   91.804191] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   91.805929] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   91.807794] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   91.809714] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   91.810694] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   91.811505] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   91.814759] Bluetooth: hci4: HCI_REQ-0x0c1a
[   93.411745] Bluetooth: hci5: command 0x040f tx timeout
[   93.859749] Bluetooth: hci4: command 0x0409 tx timeout
[   95.459774] Bluetooth: hci5: command 0x0419 tx timeout
[   95.907697] Bluetooth: hci4: command 0x041b tx timeout
[   97.955750] Bluetooth: hci4: command 0x040f tx timeout
[  100.003700] Bluetooth: hci4: command 0x0419 tx timeout
[  125.694953] audit: type=1400 audit(1662998243.399:7): avc:  denied  { open } for  pid=3568 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  125.697026] audit: type=1400 audit(1662998243.399:8): avc:  denied  { kernel } for  pid=3568 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  125.711343] ------------[ cut here ]------------
[  125.711363] 
[  125.711366] ======================================================
[  125.711369] WARNING: possible circular locking dependency detected
[  125.711373] 6.0.0-rc5-next-20220912 #1 Not tainted
[  125.711380] ------------------------------------------------------
[  125.711383] syz-executor.1/3573 is trying to acquire lock:
[  125.711389] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70
[  125.711427] 
[  125.711427] but task is already holding lock:
[  125.711430] ffff88800ee03c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  125.711458] 
[  125.711458] which lock already depends on the new lock.
[  125.711458] 
[  125.711461] 
[  125.711461] the existing dependency chain (in reverse order) is:
[  125.711464] 
[  125.711464] -> #3 (&ctx->lock){....}-{2:2}:
[  125.711478]        _raw_spin_lock+0x2a/0x40
[  125.711495]        __perf_event_task_sched_out+0x53b/0x18d0
[  125.711507]        __schedule+0xedd/0x2470
[  125.711517]        schedule+0xda/0x1b0
[  125.711526]        futex_wait_queue+0xf5/0x1e0
[  125.711538]        futex_wait+0x28e/0x690
[  125.711548]        do_futex+0x2ff/0x380
[  125.711558]        __x64_sys_futex+0x1c6/0x4d0
[  125.711567]        do_syscall_64+0x3b/0x90
[  125.711581]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  125.711599] 
[  125.711599] -> #2 (&rq->__lock){-.-.}-{2:2}:
[  125.711613]        _raw_spin_lock_nested+0x30/0x40
[  125.711630]        raw_spin_rq_lock_nested+0x1e/0x30
[  125.711644]        task_fork_fair+0x63/0x4d0
[  125.711661]        sched_cgroup_fork+0x3d0/0x540
[  125.711675]        copy_process+0x3f9e/0x6df0
[  125.711686]        kernel_clone+0xe7/0x890
[  125.711695]        user_mode_thread+0xad/0xf0
[  125.711706]        rest_init+0x24/0x250
[  125.711722]        arch_call_rest_init+0xf/0x14
[  125.711745]        start_kernel+0x4c1/0x4e6
[  125.711761]        secondary_startup_64_no_verify+0xe0/0xeb
[  125.711776] 
[  125.711776] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[  125.711790]        _raw_spin_lock_irqsave+0x39/0x60
[  125.711805]        try_to_wake_up+0xab/0x1920
[  125.711818]        up+0x75/0xb0
[  125.711829]        __up_console_sem+0x6e/0x80
[  125.711847]        console_unlock+0x46a/0x590
[  125.711864]        vt_ioctl+0x2822/0x2ca0
[  125.711882]        tty_ioctl+0x7c4/0x1700
[  125.711897]        __x64_sys_ioctl+0x19a/0x210
[  125.711913]        do_syscall_64+0x3b/0x90
[  125.711925]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  125.711942] 
[  125.711942] -> #0 ((console_sem).lock){....}-{2:2}:
[  125.711956]        __lock_acquire+0x2a02/0x5e70
[  125.711973]        lock_acquire+0x1a2/0x530
[  125.711989]        _raw_spin_lock_irqsave+0x39/0x60
[  125.712004]        down_trylock+0xe/0x70
[  125.712016]        __down_trylock_console_sem+0x3b/0xd0
[  125.712033]        vprintk_emit+0x16b/0x560
[  125.712050]        vprintk+0x84/0xa0
[  125.712066]        _printk+0xba/0xf1
[  125.712084]        report_bug.cold+0x72/0xab
[  125.712096]        handle_bug+0x3c/0x70
[  125.712108]        exc_invalid_op+0x14/0x50
[  125.712121]        asm_exc_invalid_op+0x16/0x20
[  125.712138]        group_sched_out.part.0+0x2c7/0x460
[  125.712148]        ctx_sched_out+0x8f1/0xc10
[  125.712158]        __perf_event_task_sched_out+0x6d0/0x18d0
[  125.712170]        __schedule+0xedd/0x2470
[  125.712179]        schedule+0xda/0x1b0
[  125.712188]        futex_wait_queue+0xf5/0x1e0
[  125.712198]        futex_wait+0x28e/0x690
[  125.712208]        do_futex+0x2ff/0x380
[  125.712217]        __x64_sys_futex+0x1c6/0x4d0
[  125.712227]        do_syscall_64+0x3b/0x90
[  125.712239]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  125.712256] 
[  125.712256] other info that might help us debug this:
[  125.712256] 
[  125.712259] Chain exists of:
[  125.712259]   (console_sem).lock --> &rq->__lock --> &ctx->lock
[  125.712259] 
[  125.712274]  Possible unsafe locking scenario:
[  125.712274] 
[  125.712276]        CPU0                    CPU1
[  125.712279]        ----                    ----
[  125.712281]   lock(&ctx->lock);
[  125.712287]                                lock(&rq->__lock);
[  125.712293]                                lock(&ctx->lock);
[  125.712300]   lock((console_sem).lock);
[  125.712305] 
[  125.712305]  *** DEADLOCK ***
[  125.712305] 
[  125.712307] 2 locks held by syz-executor.1/3573:
[  125.712314]  #0: ffff88806cf37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[  125.712339]  #1: ffff88800ee03c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  125.712367] 
[  125.712367] stack backtrace:
[  125.712370] CPU: 1 PID: 3573 Comm: syz-executor.1 Not tainted 6.0.0-rc5-next-20220912 #1
[  125.712383] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  125.712391] Call Trace:
[  125.712394]  <TASK>
[  125.712398]  dump_stack_lvl+0x8b/0xb3
[  125.712412]  check_noncircular+0x263/0x2e0
[  125.712429]  ? format_decode+0x26c/0xb50
[  125.712444]  ? print_circular_bug+0x450/0x450
[  125.712462]  ? enable_ptr_key_workfn+0x20/0x20
[  125.712476]  ? format_decode+0x26c/0xb50
[  125.712492]  ? alloc_chain_hlocks+0x1ec/0x5a0
[  125.712510]  __lock_acquire+0x2a02/0x5e70
[  125.712532]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  125.712555]  lock_acquire+0x1a2/0x530
[  125.712572]  ? down_trylock+0xe/0x70
[  125.712587]  ? rcu_read_unlock+0x40/0x40
[  125.712608]  ? vprintk+0x84/0xa0
[  125.712626]  _raw_spin_lock_irqsave+0x39/0x60
[  125.712641]  ? down_trylock+0xe/0x70
[  125.712655]  down_trylock+0xe/0x70
[  125.712669]  ? vprintk+0x84/0xa0
[  125.712686]  __down_trylock_console_sem+0x3b/0xd0
[  125.712704]  vprintk_emit+0x16b/0x560
[  125.712723]  vprintk+0x84/0xa0
[  125.712741]  _printk+0xba/0xf1
[  125.712759]  ? record_print_text.cold+0x16/0x16
[  125.712781]  ? report_bug.cold+0x66/0xab
[  125.712795]  ? group_sched_out.part.0+0x2c7/0x460
[  125.712806]  report_bug.cold+0x72/0xab
[  125.712821]  handle_bug+0x3c/0x70
[  125.712834]  exc_invalid_op+0x14/0x50
[  125.712849]  asm_exc_invalid_op+0x16/0x20
[  125.712868] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  125.712887] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  125.712903] RSP: 0018:ffff88804156f8f8 EFLAGS: 00010006
[  125.712913] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  125.712920] RDX: ffff8880087fb580 RSI: ffffffff81566027 RDI: 0000000000000005
[  125.712928] RBP: ffff8880207d0000 R08: 0000000000000005 R09: 0000000000000001
[  125.712936] R10: 0000000000000000 R11: ffffffff865aa05b R12: ffff88800ee03c00
[  125.712944] R13: ffff88806cf3d100 R14: ffffffff8547c660 R15: 0000000000000002
[  125.712955]  ? group_sched_out.part.0+0x2c7/0x460
[  125.712968]  ? group_sched_out.part.0+0x2c7/0x460
[  125.712981]  ctx_sched_out+0x8f1/0xc10
[  125.712994]  __perf_event_task_sched_out+0x6d0/0x18d0
[  125.713009]  ? lock_is_held_type+0xd7/0x130
[  125.713028]  ? __perf_cgroup_move+0x160/0x160
[  125.713040]  ? set_next_entity+0x304/0x550
[  125.713060]  ? lock_is_held_type+0xd7/0x130
[  125.713078]  __schedule+0xedd/0x2470
[  125.713091]  ? io_schedule_timeout+0x150/0x150
[  125.713103]  ? futex_wait_setup+0x166/0x230
[  125.713117]  schedule+0xda/0x1b0
[  125.713128]  futex_wait_queue+0xf5/0x1e0
[  125.713140]  futex_wait+0x28e/0x690
[  125.713152]  ? futex_wait_setup+0x230/0x230
[  125.713165]  ? wake_up_q+0x8b/0xf0
[  125.713179]  ? do_raw_spin_unlock+0x4f/0x220
[  125.713199]  ? futex_wake+0x158/0x490
[  125.713215]  ? fd_install+0x1f9/0x640
[  125.713231]  do_futex+0x2ff/0x380
[  125.713242]  ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0
[  125.713258]  __x64_sys_futex+0x1c6/0x4d0
[  125.713271]  ? __x64_sys_futex_time32+0x480/0x480
[  125.713284]  ? syscall_enter_from_user_mode+0x1d/0x50
[  125.713302]  ? syscall_enter_from_user_mode+0x1d/0x50
[  125.713322]  do_syscall_64+0x3b/0x90
[  125.713336]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  125.713353] RIP: 0033:0x7f5e8b028b19
[  125.713362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  125.713373] RSP: 002b:00007f5e8859e218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  125.713384] RAX: ffffffffffffffda RBX: 00007f5e8b13bf68 RCX: 00007f5e8b028b19
[  125.713392] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5e8b13bf68
[  125.713399] RBP: 00007f5e8b13bf60 R08: 0000000000000000 R09: 0000000000000000
[  125.713406] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5e8b13bf6c
[  125.713414] R13: 00007ffd535e170f R14: 00007f5e8859e300 R15: 0000000000022000
[  125.713427]  </TASK>
[  125.771571] WARNING: CPU: 1 PID: 3573 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[  125.772265] Modules linked in:
[  125.772519] CPU: 1 PID: 3573 Comm: syz-executor.1 Not tainted 6.0.0-rc5-next-20220912 #1
[  125.773134] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  125.773987] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  125.774400] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  125.775936] RSP: 0018:ffff88804156f8f8 EFLAGS: 00010006
[  125.776443] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  125.777117] RDX: ffff8880087fb580 RSI: ffffffff81566027 RDI: 0000000000000005
[  125.777680] RBP: ffff8880207d0000 R08: 0000000000000005 R09: 0000000000000001
[  125.778273] R10: 0000000000000000 R11: ffffffff865aa05b R12: ffff88800ee03c00
[  125.778803] R13: ffff88806cf3d100 R14: ffffffff8547c660 R15: 0000000000000002
[  125.779357] FS:  00007f5e8859e700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[  125.779994] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  125.780451] CR2: 00007f54fe7d9028 CR3: 000000003f922000 CR4: 0000000000350ee0
[  125.780997] Call Trace:
[  125.781178]  <TASK>
[  125.781334]  ctx_sched_out+0x8f1/0xc10
[  125.781604]  __perf_event_task_sched_out+0x6d0/0x18d0
[  125.781966]  ? lock_is_held_type+0xd7/0x130
[  125.782266]  ? __perf_cgroup_move+0x160/0x160
[  125.782571]  ? set_next_entity+0x304/0x550
[  125.782864]  ? lock_is_held_type+0xd7/0x130
[  125.783176]  __schedule+0xedd/0x2470
[  125.783432]  ? io_schedule_timeout+0x150/0x150
[  125.783740]  ? futex_wait_setup+0x166/0x230
[  125.784041]  schedule+0xda/0x1b0
[  125.784276]  futex_wait_queue+0xf5/0x1e0
[  125.784554]  futex_wait+0x28e/0x690
[  125.784805]  ? futex_wait_setup+0x230/0x230
[  125.785103]  ? wake_up_q+0x8b/0xf0
[  125.785348]  ? do_raw_spin_unlock+0x4f/0x220
[  125.785655]  ? futex_wake+0x158/0x490
[  125.785926]  ? fd_install+0x1f9/0x640
[  125.786196]  do_futex+0x2ff/0x380
[  125.786433]  ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0
[  125.786820]  __x64_sys_futex+0x1c6/0x4d0
[  125.787111]  ? __x64_sys_futex_time32+0x480/0x480
[  125.787434]  ? syscall_enter_from_user_mode+0x1d/0x50
[  125.787782]  ? syscall_enter_from_user_mode+0x1d/0x50
[  125.788146]  do_syscall_64+0x3b/0x90
[  125.788402]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  125.788749] RIP: 0033:0x7f5e8b028b19
[  125.789008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  125.790197] RSP: 002b:00007f5e8859e218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  125.790697] RAX: ffffffffffffffda RBX: 00007f5e8b13bf68 RCX: 00007f5e8b028b19
[  125.791182] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5e8b13bf68
[  125.791647] RBP: 00007f5e8b13bf60 R08: 0000000000000000 R09: 0000000000000000
[  125.792120] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5e8b13bf6c
[  125.792581] R13: 00007ffd535e170f R14: 00007f5e8859e300 R15: 0000000000022000
[  125.793063]  </TASK>
[  125.793225] irq event stamp: 996
[  125.793447] hardirqs last  enabled at (995): [<ffffffff8423e76d>] syscall_enter_from_user_mode+0x1d/0x50
[  125.794081] hardirqs last disabled at (996): [<ffffffff84247a45>] __schedule+0x1225/0x2470
[  125.794617] softirqs last  enabled at (720): [<ffffffff8117060b>] __irq_exit_rcu+0x11b/0x180
[  125.795184] softirqs last disabled at (355): [<ffffffff8117060b>] __irq_exit_rcu+0x11b/0x180
[  125.795741] ---[ end trace 0000000000000000 ]---
15:57:23 executing program 4:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1)
renameat2(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000180)='./file1\x00', 0x2)

15:57:23 executing program 1:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$getown(r0, 0x9)
r2 = dup(r1)
setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8)
sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0)
getsockname$packet(r2, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000001c0)={{}, 0x9, 0x100000000, 0x100000001})

15:57:23 executing program 4:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1)
renameat2(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000180)='./file1\x00', 0x2)

[  126.311649] hrtimer: interrupt took 19366 ns
15:57:24 executing program 4:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1)
renameat2(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000180)='./file1\x00', 0x2)

15:57:24 executing program 4:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$getown(r0, 0x9)
r2 = dup(r1)
setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8)
sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0)
getsockname$packet(r2, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000001c0)={{}, 0x9, 0x100000000, 0x100000001})

15:57:24 executing program 4:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$getown(r0, 0x9)
r2 = dup(r1)
setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8)
sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0)
getsockname$packet(r2, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000001c0)={{}, 0x9, 0x100000000, 0x100000001})

15:57:24 executing program 1:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$getown(r0, 0x9)
r2 = dup(r1)
setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8)
sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0)
getsockname$packet(r2, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000001c0)={{}, 0x9, 0x100000000, 0x100000001})

15:57:24 executing program 7:
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00')
open_by_handle_at(r0, &(0x7f00000005c0)=@FILEID_BTRFS_WITH_PARENT_ROOT={0x28}, 0x0)

[  131.983160] audit: type=1400 audit(1662998249.688:9): avc:  denied  { read } for  pid=3982 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
15:57:29 executing program 0:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, r0)
keyctl$revoke(0x3, r0)

15:57:29 executing program 5:
r0 = perf_event_open(&(0x7f0000001840)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/160, 0xa0}], 0x1)

15:57:29 executing program 2:
ustat(0x1, &(0x7f0000000000))
ustat(0x5, &(0x7f0000000300))
r0 = open(0x0, 0x0, 0x22)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000500)={0x0, 0x2, 0xffffffffffffffff, 0x6})
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000040)=0x3)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x8, 0x8, 0x7f, 0x0, 0x20, 0x40, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x7, 0x7fff}, 0x2050, 0x0, 0x3, 0x5, 0xcb6, 0x1, 0x7ff, 0x0, 0x10000, 0x0, 0x9}, 0x0, 0x1, r1, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000140)={{0x7, 0x3}, 0x100, './file1\x00'})

15:57:29 executing program 1:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$getown(r0, 0x9)
r2 = dup(r1)
setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8)
sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0)
getsockname$packet(r2, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000001c0)={{}, 0x9, 0x100000000, 0x100000001})

15:57:29 executing program 7:
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00')
open_by_handle_at(r0, &(0x7f00000005c0)=@FILEID_BTRFS_WITH_PARENT_ROOT={0x28}, 0x0)

15:57:29 executing program 6:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$getown(r0, 0x9)
r2 = dup(r1)
setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8)
sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0)
getsockname$packet(r2, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000001c0)={{}, 0x9, 0x100000000, 0x100000001})

15:57:29 executing program 4:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$getown(r0, 0x9)
r2 = dup(r1)
setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8)
sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0)
getsockname$packet(r2, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000001c0)={{}, 0x9, 0x100000000, 0x100000001})

15:57:29 executing program 3:
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc8}}}, 0x7)

15:57:29 executing program 7:
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00')
open_by_handle_at(r0, &(0x7f00000005c0)=@FILEID_BTRFS_WITH_PARENT_ROOT={0x28}, 0x0)

15:57:29 executing program 3:
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc8}}}, 0x7)

15:57:30 executing program 0:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, r0)
keyctl$revoke(0x3, r0)

15:57:30 executing program 6:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$getown(r0, 0x9)
r2 = dup(r1)
setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8)
sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0)
getsockname$packet(r2, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000001c0)={{}, 0x9, 0x100000000, 0x100000001})

15:57:30 executing program 5:
r0 = perf_event_open(&(0x7f0000001840)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/160, 0xa0}], 0x1)

15:57:30 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x0, 0x0)

15:57:30 executing program 3:
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc8}}}, 0x7)

15:57:30 executing program 7:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
gettid()
sendmmsg$unix(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}}], 0x2, 0x0)

15:57:30 executing program 2:
ustat(0x1, &(0x7f0000000000))
ustat(0x5, &(0x7f0000000300))
r0 = open(0x0, 0x0, 0x22)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000500)={0x0, 0x2, 0xffffffffffffffff, 0x6})
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000040)=0x3)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x8, 0x8, 0x7f, 0x0, 0x20, 0x40, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x7, 0x7fff}, 0x2050, 0x0, 0x3, 0x5, 0xcb6, 0x1, 0x7ff, 0x0, 0x10000, 0x0, 0x9}, 0x0, 0x1, r1, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000140)={{0x7, 0x3}, 0x100, './file1\x00'})

15:57:30 executing program 1:
socketpair(0x11, 0x2, 0x0, &(0x7f0000000700))

15:57:30 executing program 0:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, r0)
keyctl$revoke(0x3, r0)

15:57:30 executing program 5:
r0 = perf_event_open(&(0x7f0000001840)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/160, 0xa0}], 0x1)

15:57:30 executing program 3:
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc8}}}, 0x7)

15:57:30 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
r1 = syz_io_uring_setup(0x4cdd, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x3, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000300))
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x501c, 0x2, 0x2, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), &(0x7f0000000800))
syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x3, 0x309, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
syz_io_uring_setup(0xf95, &(0x7f00000004c0)={0x0, 0x23d1, 0x20, 0x3, 0x316, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580))
pidfd_open(0x0, 0x0)
syz_io_uring_setup(0x2037bc, &(0x7f0000000400)={0x0, 0x82bf, 0x20, 0x1, 0x1f}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000006c0))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x200, 0x20, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0)
ftruncate(r1, 0xfffffffffffffff7)
openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x100000, 0x95)
close(r2)
syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000380))
finit_module(r0, &(0x7f00000005c0)='\x00', 0x0)
syz_open_dev$vcsa(&(0x7f0000000780), 0x2, 0xb447604bfb64757e)
syz_io_uring_setup(0x5e00, &(0x7f0000000840)={0x0, 0x595c, 0x10, 0x1, 0xff}, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000008c0), &(0x7f0000000900))

15:57:30 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x409c0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
writev(r0, &(0x7f0000000040), 0x0)
r1 = syz_io_uring_setup(0xe9a, &(0x7f0000000440)={0x0, 0x8e85, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CLOSE, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000240), &(0x7f0000000280)=0xfffffffffffffd02)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r4, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000180))
io_uring_enter(r1, 0x64d0, 0x48be, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x4400, 0x20, 0x14}, 0x18)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0xe4903, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x1f, 0x0, 0x9, 0x0, 0x5, 0x84208, 0xb84e01778a86e6ca, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0x100000000, 0xcf65}, 0x3108, 0x3000, 0x81, 0x0, 0x5, 0x7fffffff, 0xbc, 0x0, 0x1f, 0x0, 0x214}, 0xffffffffffffffff, 0x3, r5, 0xa)

15:57:30 executing program 1:
socketpair(0x11, 0x2, 0x0, &(0x7f0000000700))

15:57:30 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x0, 0x0)

15:57:30 executing program 0:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@name={'name', 0x3d, 'KK\xca\xdc\n\xb4\xd8\xeb\xb3M\x1b\xa7a\tm&\xc0U\x10\xd5ET\x8d\x01\xe3\xb5\xce\xcf\xc3\xe0\xb1\x0ft\x83@f\xc5\x18eG\x9d\xe8b\xdd\x91\xf2x=!\x94\x8e\xf6\x17\xf6\xbc+uv8\xe1\x84\x0e\xd4\xc8\xc2Z\\cg\xbc\x87o\xf7\x8fE\xe2\x19z\xa8*\xc4\xa1\xea\xd3H\xc4A\xc5\xa1l\x0f\x18\x9f\x89dy\xe3\x8c\tf\x15#\x93%n\x8a\rO:f\x8b,TS]ba\xb6\xc7\r\xe2\x9c\xc3\xbc+\x93\xa4<\x82\xc9_`\\\xb2\xe6\xfel\xc5\xf5\xee\xc8\"\xe9U\xde\xb1L\xferyJyZ\xd8\xff[\x18\xd9\x06(\xed;\rP\xac\xe1\xd6\xd0\xf5|\xbe\xf3\xf8\x98\x86\xb7`\xb5\x88\xb3KM\xce\xba\\\f\xfb\xedsn\xe1T*\xa2r\xf0\xa0\x93?S\xf4_\x84\x17 \xd4q\x14\xd9\xdd\xd8\x86\xb9\x9d\x9e\xd1X\xa7\xc0.vb\xa4\xbd\xad\xc0\x1dt'}}]})

15:57:30 executing program 2:
ustat(0x1, &(0x7f0000000000))
ustat(0x5, &(0x7f0000000300))
r0 = open(0x0, 0x0, 0x22)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000500)={0x0, 0x2, 0xffffffffffffffff, 0x6})
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000040)=0x3)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x40, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x8, 0x8, 0x7f, 0x0, 0x20, 0x40, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x7, 0x7fff}, 0x2050, 0x0, 0x3, 0x5, 0xcb6, 0x1, 0x7ff, 0x0, 0x10000, 0x0, 0x9}, 0x0, 0x1, r1, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000140)={{0x7, 0x3}, 0x100, './file1\x00'})

15:57:30 executing program 6:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$getown(r0, 0x9)
r2 = dup(r1)
setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8)
sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0)
getsockname$packet(r2, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000001c0)={{}, 0x9, 0x100000000, 0x100000001})

15:57:30 executing program 3:
mlockall(0x2)
shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x7000)
shmctl$SHM_LOCK(0x0, 0xb)
shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x7000)

[  132.834568] cgroup: Name too long
15:57:30 executing program 0:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@name={'name', 0x3d, 'KK\xca\xdc\n\xb4\xd8\xeb\xb3M\x1b\xa7a\tm&\xc0U\x10\xd5ET\x8d\x01\xe3\xb5\xce\xcf\xc3\xe0\xb1\x0ft\x83@f\xc5\x18eG\x9d\xe8b\xdd\x91\xf2x=!\x94\x8e\xf6\x17\xf6\xbc+uv8\xe1\x84\x0e\xd4\xc8\xc2Z\\cg\xbc\x87o\xf7\x8fE\xe2\x19z\xa8*\xc4\xa1\xea\xd3H\xc4A\xc5\xa1l\x0f\x18\x9f\x89dy\xe3\x8c\tf\x15#\x93%n\x8a\rO:f\x8b,TS]ba\xb6\xc7\r\xe2\x9c\xc3\xbc+\x93\xa4<\x82\xc9_`\\\xb2\xe6\xfel\xc5\xf5\xee\xc8\"\xe9U\xde\xb1L\xferyJyZ\xd8\xff[\x18\xd9\x06(\xed;\rP\xac\xe1\xd6\xd0\xf5|\xbe\xf3\xf8\x98\x86\xb7`\xb5\x88\xb3KM\xce\xba\\\f\xfb\xedsn\xe1T*\xa2r\xf0\xa0\x93?S\xf4_\x84\x17 \xd4q\x14\xd9\xdd\xd8\x86\xb9\x9d\x9e\xd1X\xa7\xc0.vb\xa4\xbd\xad\xc0\x1dt'}}]})

15:57:30 executing program 1:
socketpair(0x11, 0x2, 0x0, &(0x7f0000000700))

[  132.918357] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  132.919173] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  132.919785] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  132.920320] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[  132.920947] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 25 prio class 2
[  132.927143] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  132.927618] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  132.928444] Buffer I/O error on dev sr0, logical block 0, async page read
[  132.932133] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  132.932598] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  132.933292] Buffer I/O error on dev sr0, logical block 1, async page read
[  132.935270] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  132.935936] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  132.936614] Buffer I/O error on dev sr0, logical block 2, async page read
[  132.943257] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  132.943742] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  132.944424] Buffer I/O error on dev sr0, logical block 3, async page read
[  132.945286] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  132.945754] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  132.946430] Buffer I/O error on dev sr0, logical block 4, async page read
[  132.948413] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  132.948892] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  132.949568] Buffer I/O error on dev sr0, logical block 5, async page read
[  132.951599] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  132.952136] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  132.952815] Buffer I/O error on dev sr0, logical block 6, async page read
[  132.953981] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  132.954435] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  132.955118] Buffer I/O error on dev sr0, logical block 7, async page read
15:57:30 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x0, 0x0)

15:57:30 executing program 3:
mlockall(0x2)
shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x7000)
shmctl$SHM_LOCK(0x0, 0xb)
shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x7000)

[  133.023356] cgroup: Name too long
15:57:30 executing program 0:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@name={'name', 0x3d, 'KK\xca\xdc\n\xb4\xd8\xeb\xb3M\x1b\xa7a\tm&\xc0U\x10\xd5ET\x8d\x01\xe3\xb5\xce\xcf\xc3\xe0\xb1\x0ft\x83@f\xc5\x18eG\x9d\xe8b\xdd\x91\xf2x=!\x94\x8e\xf6\x17\xf6\xbc+uv8\xe1\x84\x0e\xd4\xc8\xc2Z\\cg\xbc\x87o\xf7\x8fE\xe2\x19z\xa8*\xc4\xa1\xea\xd3H\xc4A\xc5\xa1l\x0f\x18\x9f\x89dy\xe3\x8c\tf\x15#\x93%n\x8a\rO:f\x8b,TS]ba\xb6\xc7\r\xe2\x9c\xc3\xbc+\x93\xa4<\x82\xc9_`\\\xb2\xe6\xfel\xc5\xf5\xee\xc8\"\xe9U\xde\xb1L\xferyJyZ\xd8\xff[\x18\xd9\x06(\xed;\rP\xac\xe1\xd6\xd0\xf5|\xbe\xf3\xf8\x98\x86\xb7`\xb5\x88\xb3KM\xce\xba\\\f\xfb\xedsn\xe1T*\xa2r\xf0\xa0\x93?S\xf4_\x84\x17 \xd4q\x14\xd9\xdd\xd8\x86\xb9\x9d\x9e\xd1X\xa7\xc0.vb\xa4\xbd\xad\xc0\x1dt'}}]})

15:57:30 executing program 2:
mlockall(0x2)
shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x7000)
shmctl$SHM_LOCK(0x0, 0xb)
shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x7000)

[  133.088621] cgroup: Name too long
15:57:30 executing program 0:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@name={'name', 0x3d, 'KK\xca\xdc\n\xb4\xd8\xeb\xb3M\x1b\xa7a\tm&\xc0U\x10\xd5ET\x8d\x01\xe3\xb5\xce\xcf\xc3\xe0\xb1\x0ft\x83@f\xc5\x18eG\x9d\xe8b\xdd\x91\xf2x=!\x94\x8e\xf6\x17\xf6\xbc+uv8\xe1\x84\x0e\xd4\xc8\xc2Z\\cg\xbc\x87o\xf7\x8fE\xe2\x19z\xa8*\xc4\xa1\xea\xd3H\xc4A\xc5\xa1l\x0f\x18\x9f\x89dy\xe3\x8c\tf\x15#\x93%n\x8a\rO:f\x8b,TS]ba\xb6\xc7\r\xe2\x9c\xc3\xbc+\x93\xa4<\x82\xc9_`\\\xb2\xe6\xfel\xc5\xf5\xee\xc8\"\xe9U\xde\xb1L\xferyJyZ\xd8\xff[\x18\xd9\x06(\xed;\rP\xac\xe1\xd6\xd0\xf5|\xbe\xf3\xf8\x98\x86\xb7`\xb5\x88\xb3KM\xce\xba\\\f\xfb\xedsn\xe1T*\xa2r\xf0\xa0\x93?S\xf4_\x84\x17 \xd4q\x14\xd9\xdd\xd8\x86\xb9\x9d\x9e\xd1X\xa7\xc0.vb\xa4\xbd\xad\xc0\x1dt'}}]})

15:57:30 executing program 1:
socketpair(0x11, 0x2, 0x0, &(0x7f0000000700))

[  133.164432] cgroup: Name too long
[  133.343045] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  133.344288] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  133.345165] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  133.346010] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[  133.346971] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2
[  133.348397] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  133.349110] Buffer I/O error on dev sr0, logical block 0, async page read
[  133.350137] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  133.350913] Buffer I/O error on dev sr0, logical block 1, async page read
[  133.351950] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  133.352822] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  133.353703] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  133.354554] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  133.355428] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  133.356295] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
15:57:31 executing program 3:
mlockall(0x2)
shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x7000)
shmctl$SHM_LOCK(0x0, 0xb)
shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x7000)

15:57:31 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x0, 0x0)

15:57:31 executing program 6:
mlockall(0x2)
shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x7000)
shmctl$SHM_LOCK(0x0, 0xb)
shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x7000)

15:57:31 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
lseek(r1, 0x0, 0x4)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040))
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x230, 0x0, 0x0, 0x4}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x3f, 0x0, 0xff, 0x7, 0x0, 0x7, 0x9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000180), 0x8}, 0x1300, 0x1000, 0xc1, 0x7, 0x7, 0x3b9d, 0xf504, 0x0, 0x5, 0x0, 0x3}, 0x0, 0x10, r2, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={<r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x0)
syncfs(r3)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)

15:57:31 executing program 2:
mlockall(0x2)
shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x7000)
shmctl$SHM_LOCK(0x0, 0xb)
shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x7000)

15:57:31 executing program 1:
madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1)
madvise(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x0)

15:57:31 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
r1 = syz_io_uring_setup(0x4cdd, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x3, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000300))
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x501c, 0x2, 0x2, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), &(0x7f0000000800))
syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x3, 0x309, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
syz_io_uring_setup(0xf95, &(0x7f00000004c0)={0x0, 0x23d1, 0x20, 0x3, 0x316, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580))
pidfd_open(0x0, 0x0)
syz_io_uring_setup(0x2037bc, &(0x7f0000000400)={0x0, 0x82bf, 0x20, 0x1, 0x1f}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000006c0))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x200, 0x20, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0)
ftruncate(r1, 0xfffffffffffffff7)
openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x100000, 0x95)
close(r2)
syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000380))
finit_module(r0, &(0x7f00000005c0)='\x00', 0x0)
syz_open_dev$vcsa(&(0x7f0000000780), 0x2, 0xb447604bfb64757e)
syz_io_uring_setup(0x5e00, &(0x7f0000000840)={0x0, 0x595c, 0x10, 0x1, 0xff}, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000008c0), &(0x7f0000000900))

[  133.774826] audit: type=1400 audit(1662998251.479:10): avc:  denied  { write } for  pid=4078 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
15:57:31 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x409c0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
writev(r0, &(0x7f0000000040), 0x0)
r1 = syz_io_uring_setup(0xe9a, &(0x7f0000000440)={0x0, 0x8e85, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CLOSE, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000240), &(0x7f0000000280)=0xfffffffffffffd02)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r4, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000180))
io_uring_enter(r1, 0x64d0, 0x48be, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x4400, 0x20, 0x14}, 0x18)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0xe4903, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x1f, 0x0, 0x9, 0x0, 0x5, 0x84208, 0xb84e01778a86e6ca, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0x100000000, 0xcf65}, 0x3108, 0x3000, 0x81, 0x0, 0x5, 0x7fffffff, 0xbc, 0x0, 0x1f, 0x0, 0x214}, 0xffffffffffffffff, 0x3, r5, 0xa)

15:57:31 executing program 6:
mlockall(0x2)
shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x7000)
shmctl$SHM_LOCK(0x0, 0xb)
shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x7000)

15:57:31 executing program 3:
mlockall(0x2)
shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x7000)
shmctl$SHM_LOCK(0x0, 0xb)
shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x7000)

15:57:31 executing program 2:
mlockall(0x2)
shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x7000)
shmctl$SHM_LOCK(0x0, 0xb)
shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x7000)

15:57:31 executing program 1:
madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1)
madvise(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x0)

15:57:31 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x409c0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
writev(r0, &(0x7f0000000040), 0x0)
r1 = syz_io_uring_setup(0xe9a, &(0x7f0000000440)={0x0, 0x8e85, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CLOSE, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000240), &(0x7f0000000280)=0xfffffffffffffd02)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r4, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000180))
io_uring_enter(r1, 0x64d0, 0x48be, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x4400, 0x20, 0x14}, 0x18)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0xe4903, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x1f, 0x0, 0x9, 0x0, 0x5, 0x84208, 0xb84e01778a86e6ca, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0x100000000, 0xcf65}, 0x3108, 0x3000, 0x81, 0x0, 0x5, 0x7fffffff, 0xbc, 0x0, 0x1f, 0x0, 0x214}, 0xffffffffffffffff, 0x3, r5, 0xa)

15:57:31 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
lseek(r1, 0x0, 0x4)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040))
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x230, 0x0, 0x0, 0x4}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x3f, 0x0, 0xff, 0x7, 0x0, 0x7, 0x9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000180), 0x8}, 0x1300, 0x1000, 0xc1, 0x7, 0x7, 0x3b9d, 0xf504, 0x0, 0x5, 0x0, 0x3}, 0x0, 0x10, r2, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={<r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x0)
syncfs(r3)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)

15:57:31 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x409c0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
writev(r0, &(0x7f0000000040), 0x0)
r1 = syz_io_uring_setup(0xe9a, &(0x7f0000000440)={0x0, 0x8e85, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CLOSE, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000240), &(0x7f0000000280)=0xfffffffffffffd02)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r4, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000180))
io_uring_enter(r1, 0x64d0, 0x48be, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x4400, 0x20, 0x14}, 0x18)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0xe4903, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x1f, 0x0, 0x9, 0x0, 0x5, 0x84208, 0xb84e01778a86e6ca, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0x100000000, 0xcf65}, 0x3108, 0x3000, 0x81, 0x0, 0x5, 0x7fffffff, 0xbc, 0x0, 0x1f, 0x0, 0x214}, 0xffffffffffffffff, 0x3, r5, 0xa)

15:57:32 executing program 1:
madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1)
madvise(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x0)

15:57:32 executing program 6:
mlockall(0x2)
shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x7000)
shmctl$SHM_LOCK(0x0, 0xb)
shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x7000)

15:57:32 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
lseek(r1, 0x0, 0x4)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040))
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x230, 0x0, 0x0, 0x4}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x3f, 0x0, 0xff, 0x7, 0x0, 0x7, 0x9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000180), 0x8}, 0x1300, 0x1000, 0xc1, 0x7, 0x7, 0x3b9d, 0xf504, 0x0, 0x5, 0x0, 0x3}, 0x0, 0x10, r2, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={<r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x0)
syncfs(r3)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)

15:57:32 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x409c0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
writev(r0, &(0x7f0000000040), 0x0)
r1 = syz_io_uring_setup(0xe9a, &(0x7f0000000440)={0x0, 0x8e85, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CLOSE, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000240), &(0x7f0000000280)=0xfffffffffffffd02)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r4, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000180))
io_uring_enter(r1, 0x64d0, 0x48be, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x4400, 0x20, 0x14}, 0x18)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0xe4903, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x1f, 0x0, 0x9, 0x0, 0x5, 0x84208, 0xb84e01778a86e6ca, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0x100000000, 0xcf65}, 0x3108, 0x3000, 0x81, 0x0, 0x5, 0x7fffffff, 0xbc, 0x0, 0x1f, 0x0, 0x214}, 0xffffffffffffffff, 0x3, r5, 0xa)

15:57:32 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x409c0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
writev(r0, &(0x7f0000000040), 0x0)
r1 = syz_io_uring_setup(0xe9a, &(0x7f0000000440)={0x0, 0x8e85, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CLOSE, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000240), &(0x7f0000000280)=0xfffffffffffffd02)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r4, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000180))
io_uring_enter(r1, 0x64d0, 0x48be, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x4400, 0x20, 0x14}, 0x18)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0xe4903, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x1f, 0x0, 0x9, 0x0, 0x5, 0x84208, 0xb84e01778a86e6ca, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0x100000000, 0xcf65}, 0x3108, 0x3000, 0x81, 0x0, 0x5, 0x7fffffff, 0xbc, 0x0, 0x1f, 0x0, 0x214}, 0xffffffffffffffff, 0x3, r5, 0xa)

15:57:32 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x409c0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
writev(r0, &(0x7f0000000040), 0x0)
r1 = syz_io_uring_setup(0xe9a, &(0x7f0000000440)={0x0, 0x8e85, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CLOSE, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000240), &(0x7f0000000280)=0xfffffffffffffd02)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r4, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000180))
io_uring_enter(r1, 0x64d0, 0x48be, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x4400, 0x20, 0x14}, 0x18)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0xe4903, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x1f, 0x0, 0x9, 0x0, 0x5, 0x84208, 0xb84e01778a86e6ca, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0x100000000, 0xcf65}, 0x3108, 0x3000, 0x81, 0x0, 0x5, 0x7fffffff, 0xbc, 0x0, 0x1f, 0x0, 0x214}, 0xffffffffffffffff, 0x3, r5, 0xa)

15:57:32 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
lseek(r1, 0x0, 0x4)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040))
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x230, 0x0, 0x0, 0x4}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x3f, 0x0, 0xff, 0x7, 0x0, 0x7, 0x9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000180), 0x8}, 0x1300, 0x1000, 0xc1, 0x7, 0x7, 0x3b9d, 0xf504, 0x0, 0x5, 0x0, 0x3}, 0x0, 0x10, r2, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={<r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x0)
syncfs(r3)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)

15:57:32 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
r1 = syz_io_uring_setup(0x4cdd, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x3, 0x20f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000300))
syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x501c, 0x2, 0x2, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), &(0x7f0000000800))
syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x3, 0x309, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340))
getpid()
syz_io_uring_setup(0xf95, &(0x7f00000004c0)={0x0, 0x23d1, 0x20, 0x3, 0x316, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580))
pidfd_open(0x0, 0x0)
syz_io_uring_setup(0x2037bc, &(0x7f0000000400)={0x0, 0x82bf, 0x20, 0x1, 0x1f}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000006c0))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x200, 0x20, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0)
ftruncate(r1, 0xfffffffffffffff7)
openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x100000, 0x95)
close(r2)
syz_io_uring_setup(0xaaf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000380))
finit_module(r0, &(0x7f00000005c0)='\x00', 0x0)
syz_open_dev$vcsa(&(0x7f0000000780), 0x2, 0xb447604bfb64757e)
syz_io_uring_setup(0x5e00, &(0x7f0000000840)={0x0, 0x595c, 0x10, 0x1, 0xff}, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000008c0), &(0x7f0000000900))

15:57:32 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x409c0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
writev(r0, &(0x7f0000000040), 0x0)
r1 = syz_io_uring_setup(0xe9a, &(0x7f0000000440)={0x0, 0x8e85, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CLOSE, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000240), &(0x7f0000000280)=0xfffffffffffffd02)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r4, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000180))
io_uring_enter(r1, 0x64d0, 0x48be, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x4400, 0x20, 0x14}, 0x18)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0xe4903, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x1f, 0x0, 0x9, 0x0, 0x5, 0x84208, 0xb84e01778a86e6ca, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0x100000000, 0xcf65}, 0x3108, 0x3000, 0x81, 0x0, 0x5, 0x7fffffff, 0xbc, 0x0, 0x1f, 0x0, 0x214}, 0xffffffffffffffff, 0x3, r5, 0xa)

15:57:32 executing program 1:
madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1)
madvise(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x0)

15:57:32 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x409c0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
writev(r0, &(0x7f0000000040), 0x0)
r1 = syz_io_uring_setup(0xe9a, &(0x7f0000000440)={0x0, 0x8e85, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CLOSE, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000240), &(0x7f0000000280)=0xfffffffffffffd02)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r4, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000180))
io_uring_enter(r1, 0x64d0, 0x48be, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x4400, 0x20, 0x14}, 0x18)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0xe4903, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x1f, 0x0, 0x9, 0x0, 0x5, 0x84208, 0xb84e01778a86e6ca, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0x100000000, 0xcf65}, 0x3108, 0x3000, 0x81, 0x0, 0x5, 0x7fffffff, 0xbc, 0x0, 0x1f, 0x0, 0x214}, 0xffffffffffffffff, 0x3, r5, 0xa)

15:57:32 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x409c0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
writev(r0, &(0x7f0000000040), 0x0)
r1 = syz_io_uring_setup(0xe9a, &(0x7f0000000440)={0x0, 0x8e85, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CLOSE, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000240), &(0x7f0000000280)=0xfffffffffffffd02)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r4, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000180))
io_uring_enter(r1, 0x64d0, 0x48be, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x4400, 0x20, 0x14}, 0x18)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0xe4903, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x1f, 0x0, 0x9, 0x0, 0x5, 0x84208, 0xb84e01778a86e6ca, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0x100000000, 0xcf65}, 0x3108, 0x3000, 0x81, 0x0, 0x5, 0x7fffffff, 0xbc, 0x0, 0x1f, 0x0, 0x214}, 0xffffffffffffffff, 0x3, r5, 0xa)

15:57:32 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x409c0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
writev(r0, &(0x7f0000000040), 0x0)
r1 = syz_io_uring_setup(0xe9a, &(0x7f0000000440)={0x0, 0x8e85, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CLOSE, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000240), &(0x7f0000000280)=0xfffffffffffffd02)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r4, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000180))
io_uring_enter(r1, 0x64d0, 0x48be, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x4400, 0x20, 0x14}, 0x18)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0xe4903, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x1f, 0x0, 0x9, 0x0, 0x5, 0x84208, 0xb84e01778a86e6ca, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0x100000000, 0xcf65}, 0x3108, 0x3000, 0x81, 0x0, 0x5, 0x7fffffff, 0xbc, 0x0, 0x1f, 0x0, 0x214}, 0xffffffffffffffff, 0x3, r5, 0xa)

15:57:33 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x409c0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
writev(r0, &(0x7f0000000040), 0x0)
r1 = syz_io_uring_setup(0xe9a, &(0x7f0000000440)={0x0, 0x8e85, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CLOSE, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000240), &(0x7f0000000280)=0xfffffffffffffd02)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r4, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000180))
io_uring_enter(r1, 0x64d0, 0x48be, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x4400, 0x20, 0x14}, 0x18)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0xe4903, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x1f, 0x0, 0x9, 0x0, 0x5, 0x84208, 0xb84e01778a86e6ca, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0x100000000, 0xcf65}, 0x3108, 0x3000, 0x81, 0x0, 0x5, 0x7fffffff, 0xbc, 0x0, 0x1f, 0x0, 0x214}, 0xffffffffffffffff, 0x3, r5, 0xa)

15:57:33 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x409c0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
writev(r0, &(0x7f0000000040), 0x0)
r1 = syz_io_uring_setup(0xe9a, &(0x7f0000000440)={0x0, 0x8e85, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CLOSE, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000240), &(0x7f0000000280)=0xfffffffffffffd02)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r4, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000180))
io_uring_enter(r1, 0x64d0, 0x48be, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x4400, 0x20, 0x14}, 0x18)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0xe4903, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x1f, 0x0, 0x9, 0x0, 0x5, 0x84208, 0xb84e01778a86e6ca, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0x100000000, 0xcf65}, 0x3108, 0x3000, 0x81, 0x0, 0x5, 0x7fffffff, 0xbc, 0x0, 0x1f, 0x0, 0x214}, 0xffffffffffffffff, 0x3, r5, 0xa)

15:57:33 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
lseek(r1, 0x0, 0x4)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040))
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x230, 0x0, 0x0, 0x4}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x3f, 0x0, 0xff, 0x7, 0x0, 0x7, 0x9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000180), 0x8}, 0x1300, 0x1000, 0xc1, 0x7, 0x7, 0x3b9d, 0xf504, 0x0, 0x5, 0x0, 0x3}, 0x0, 0x10, r2, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={<r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x0)
syncfs(r3)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)

15:57:33 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x409c0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
writev(r0, &(0x7f0000000040), 0x0)
r1 = syz_io_uring_setup(0xe9a, &(0x7f0000000440)={0x0, 0x8e85, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CLOSE, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000240), &(0x7f0000000280)=0xfffffffffffffd02)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r4, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000180))
io_uring_enter(r1, 0x64d0, 0x48be, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x4400, 0x20, 0x14}, 0x18)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0xe4903, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x1f, 0x0, 0x9, 0x0, 0x5, 0x84208, 0xb84e01778a86e6ca, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0x100000000, 0xcf65}, 0x3108, 0x3000, 0x81, 0x0, 0x5, 0x7fffffff, 0xbc, 0x0, 0x1f, 0x0, 0x214}, 0xffffffffffffffff, 0x3, r5, 0xa)

15:57:33 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x409c0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
writev(r0, &(0x7f0000000040), 0x0)
r1 = syz_io_uring_setup(0xe9a, &(0x7f0000000440)={0x0, 0x8e85, 0x2, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CLOSE, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000240), &(0x7f0000000280)=0xfffffffffffffd02)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c)
sendmmsg(r4, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="e9", 0xfffffe8e}], 0x1}}], 0x1, 0x0)
recvfrom(r4, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000180))
io_uring_enter(r1, 0x64d0, 0x48be, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x4400, 0x20, 0x14}, 0x18)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0xe4903, 0x0)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x1f, 0x0, 0x9, 0x0, 0x5, 0x84208, 0xb84e01778a86e6ca, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0x100000000, 0xcf65}, 0x3108, 0x3000, 0x81, 0x0, 0x5, 0x7fffffff, 0xbc, 0x0, 0x1f, 0x0, 0x214}, 0xffffffffffffffff, 0x3, r5, 0xa)

15:57:33 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
lseek(r1, 0x0, 0x4)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040))
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x230, 0x0, 0x0, 0x4}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x3f, 0x0, 0xff, 0x7, 0x0, 0x7, 0x9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000180), 0x8}, 0x1300, 0x1000, 0xc1, 0x7, 0x7, 0x3b9d, 0xf504, 0x0, 0x5, 0x0, 0x3}, 0x0, 0x10, r2, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={<r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x0)
syncfs(r3)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)


VM DIAGNOSIS:
15:57:23  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffff88806cf3d420 RCX=0000000000000000 RDX=ffff88801d8f0000
RSI=ffffffff813bccdb RDI=0000000000000005 RBP=0000000000000003 RSP=ffff88804159f960
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=ffffed100d9e7a85 R13=ffff88806cf3d428 R14=0000000000000001 R15=dffffc0000000000
RIP=ffffffff813bccdd RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00005555565d7400 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5e8b13404c CR3=000000003f922000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 ff00000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 0100ff0000000000 0000000000000000
YMM02=0000000000000000 0000000000000000 7463656a6e695f31 313230385f7a7973
YMM03=0000000000000000 0000000000000000 00007f5e8b10f7c8 00007f5e8b10f7c0
YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff822b1e41 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff88804156f348
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000061 R11=0000000000000001
R12=0000000000000061 R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b1e30
RIP=ffffffff822b1e99 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f5e8859e700 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f54fe7d9028 CR3=000000003f922000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 00007f5e8b10f7c0 00007f5e8b10f7c8
YMM02=0000000000000000 0000000000000000 00007f5e8b10f7e0 00007f5e8b10f7c0
YMM03=0000000000000000 0000000000000000 00007f5e8b10f7c8 00007f5e8b10f7c0
YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000