Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:36786' (ECDSA) to the list of known hosts. 2022/09/12 16:43:01 fuzzer started 2022/09/12 16:43:01 dialing manager at localhost:38027 syzkaller login: [ 46.211447] cgroup: Unknown subsys name 'net' [ 46.331577] cgroup: Unknown subsys name 'rlimit' 2022/09/12 16:43:16 syscalls: 2215 2022/09/12 16:43:16 code coverage: enabled 2022/09/12 16:43:16 comparison tracing: enabled 2022/09/12 16:43:16 extra coverage: enabled 2022/09/12 16:43:16 setuid sandbox: enabled 2022/09/12 16:43:16 namespace sandbox: enabled 2022/09/12 16:43:16 Android sandbox: enabled 2022/09/12 16:43:16 fault injection: enabled 2022/09/12 16:43:16 leak checking: enabled 2022/09/12 16:43:16 net packet injection: enabled 2022/09/12 16:43:16 net device setup: enabled 2022/09/12 16:43:16 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/12 16:43:16 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/12 16:43:16 USB emulation: enabled 2022/09/12 16:43:16 hci packet injection: enabled 2022/09/12 16:43:16 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220912) 2022/09/12 16:43:16 802.15.4 emulation: enabled 2022/09/12 16:43:17 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/12 16:43:17 fetching corpus: 50, signal 29732/33240 (executing program) 2022/09/12 16:43:17 fetching corpus: 100, signal 45065/49926 (executing program) 2022/09/12 16:43:18 fetching corpus: 150, signal 56768/62910 (executing program) 2022/09/12 16:43:18 fetching corpus: 200, signal 62545/69968 (executing program) 2022/09/12 16:43:18 fetching corpus: 250, signal 68638/77242 (executing program) 2022/09/12 16:43:18 fetching corpus: 300, signal 72649/82460 (executing program) 2022/09/12 16:43:18 fetching corpus: 350, signal 76692/87602 (executing program) 2022/09/12 16:43:18 fetching corpus: 400, signal 83880/95614 (executing program) 2022/09/12 16:43:19 fetching corpus: 450, signal 86753/99532 (executing program) 2022/09/12 16:43:19 fetching corpus: 500, signal 91581/105230 (executing program) 2022/09/12 16:43:19 fetching corpus: 550, signal 95445/109953 (executing program) 2022/09/12 16:43:19 fetching corpus: 600, signal 97970/113487 (executing program) 2022/09/12 16:43:19 fetching corpus: 650, signal 101339/117714 (executing program) 2022/09/12 16:43:19 fetching corpus: 700, signal 104658/121858 (executing program) 2022/09/12 16:43:20 fetching corpus: 750, signal 106957/124937 (executing program) 2022/09/12 16:43:20 fetching corpus: 800, signal 110009/128677 (executing program) 2022/09/12 16:43:20 fetching corpus: 850, signal 112730/132121 (executing program) 2022/09/12 16:43:20 fetching corpus: 900, signal 114657/134835 (executing program) 2022/09/12 16:43:20 fetching corpus: 950, signal 116939/137849 (executing program) 2022/09/12 16:43:20 fetching corpus: 1000, signal 119678/141107 (executing program) 2022/09/12 16:43:21 fetching corpus: 1050, signal 122597/144492 (executing program) 2022/09/12 16:43:21 fetching corpus: 1100, signal 124294/146882 (executing program) 2022/09/12 16:43:21 fetching corpus: 1150, signal 127321/150290 (executing program) 2022/09/12 16:43:21 fetching corpus: 1200, signal 128670/152387 (executing program) 2022/09/12 16:43:21 fetching corpus: 1250, signal 130500/154829 (executing program) 2022/09/12 16:43:21 fetching corpus: 1300, signal 132054/156956 (executing program) 2022/09/12 16:43:22 fetching corpus: 1350, signal 134479/159800 (executing program) 2022/09/12 16:43:22 fetching corpus: 1400, signal 136313/162093 (executing program) 2022/09/12 16:43:22 fetching corpus: 1450, signal 137920/164250 (executing program) 2022/09/12 16:43:22 fetching corpus: 1500, signal 139699/166455 (executing program) 2022/09/12 16:43:22 fetching corpus: 1550, signal 141432/168594 (executing program) 2022/09/12 16:43:23 fetching corpus: 1600, signal 143795/171178 (executing program) 2022/09/12 16:43:23 fetching corpus: 1650, signal 145033/172868 (executing program) 2022/09/12 16:43:23 fetching corpus: 1700, signal 146507/174768 (executing program) 2022/09/12 16:43:23 fetching corpus: 1750, signal 147945/176615 (executing program) 2022/09/12 16:43:23 fetching corpus: 1800, signal 149095/178257 (executing program) 2022/09/12 16:43:23 fetching corpus: 1850, signal 151016/180424 (executing program) 2022/09/12 16:43:24 fetching corpus: 1900, signal 152615/182254 (executing program) 2022/09/12 16:43:24 fetching corpus: 1950, signal 153727/183752 (executing program) 2022/09/12 16:43:24 fetching corpus: 2000, signal 154951/185381 (executing program) 2022/09/12 16:43:24 fetching corpus: 2050, signal 156148/186910 (executing program) 2022/09/12 16:43:24 fetching corpus: 2100, signal 157150/188317 (executing program) 2022/09/12 16:43:24 fetching corpus: 2150, signal 158687/190038 (executing program) 2022/09/12 16:43:25 fetching corpus: 2200, signal 161235/192342 (executing program) 2022/09/12 16:43:25 fetching corpus: 2250, signal 162601/193930 (executing program) 2022/09/12 16:43:25 fetching corpus: 2300, signal 163812/195333 (executing program) 2022/09/12 16:43:25 fetching corpus: 2350, signal 165140/196803 (executing program) 2022/09/12 16:43:25 fetching corpus: 2400, signal 166715/198499 (executing program) 2022/09/12 16:43:25 fetching corpus: 2450, signal 167895/199868 (executing program) 2022/09/12 16:43:26 fetching corpus: 2500, signal 168995/201153 (executing program) 2022/09/12 16:43:26 fetching corpus: 2550, signal 170567/202721 (executing program) 2022/09/12 16:43:26 fetching corpus: 2600, signal 171779/204019 (executing program) 2022/09/12 16:43:26 fetching corpus: 2650, signal 172927/205279 (executing program) 2022/09/12 16:43:26 fetching corpus: 2700, signal 174700/206847 (executing program) 2022/09/12 16:43:27 fetching corpus: 2750, signal 175725/207998 (executing program) 2022/09/12 16:43:27 fetching corpus: 2800, signal 176992/209293 (executing program) 2022/09/12 16:43:27 fetching corpus: 2850, signal 177951/210353 (executing program) 2022/09/12 16:43:27 fetching corpus: 2900, signal 178715/211317 (executing program) 2022/09/12 16:43:27 fetching corpus: 2950, signal 179956/212496 (executing program) 2022/09/12 16:43:28 fetching corpus: 3000, signal 181266/213679 (executing program) 2022/09/12 16:43:28 fetching corpus: 3050, signal 182115/214640 (executing program) 2022/09/12 16:43:28 fetching corpus: 3100, signal 182807/215506 (executing program) 2022/09/12 16:43:28 fetching corpus: 3150, signal 183707/216458 (executing program) 2022/09/12 16:43:28 fetching corpus: 3200, signal 184630/217428 (executing program) 2022/09/12 16:43:29 fetching corpus: 3250, signal 185514/218323 (executing program) 2022/09/12 16:43:29 fetching corpus: 3300, signal 185973/219012 (executing program) 2022/09/12 16:43:29 fetching corpus: 3350, signal 186798/219859 (executing program) 2022/09/12 16:43:29 fetching corpus: 3400, signal 187396/220585 (executing program) 2022/09/12 16:43:29 fetching corpus: 3450, signal 188523/221530 (executing program) 2022/09/12 16:43:29 fetching corpus: 3500, signal 189987/222578 (executing program) 2022/09/12 16:43:30 fetching corpus: 3550, signal 190631/223303 (executing program) 2022/09/12 16:43:30 fetching corpus: 3600, signal 191661/224168 (executing program) 2022/09/12 16:43:30 fetching corpus: 3650, signal 192603/224994 (executing program) 2022/09/12 16:43:30 fetching corpus: 3700, signal 194458/226227 (executing program) 2022/09/12 16:43:30 fetching corpus: 3750, signal 195323/227001 (executing program) 2022/09/12 16:43:31 fetching corpus: 3800, signal 195979/227637 (executing program) 2022/09/12 16:43:31 fetching corpus: 3850, signal 196718/228333 (executing program) 2022/09/12 16:43:31 fetching corpus: 3900, signal 197591/229067 (executing program) 2022/09/12 16:43:31 fetching corpus: 3950, signal 198560/229820 (executing program) 2022/09/12 16:43:31 fetching corpus: 4000, signal 199355/230462 (executing program) 2022/09/12 16:43:31 fetching corpus: 4050, signal 200208/231121 (executing program) 2022/09/12 16:43:32 fetching corpus: 4100, signal 201081/231780 (executing program) 2022/09/12 16:43:32 fetching corpus: 4150, signal 201755/232343 (executing program) 2022/09/12 16:43:32 fetching corpus: 4200, signal 202661/232999 (executing program) 2022/09/12 16:43:32 fetching corpus: 4250, signal 203432/233579 (executing program) 2022/09/12 16:43:32 fetching corpus: 4300, signal 204386/234215 (executing program) 2022/09/12 16:43:33 fetching corpus: 4350, signal 205167/234784 (executing program) 2022/09/12 16:43:33 fetching corpus: 4400, signal 205754/235293 (executing program) 2022/09/12 16:43:33 fetching corpus: 4450, signal 206672/235861 (executing program) 2022/09/12 16:43:33 fetching corpus: 4500, signal 207643/236501 (executing program) 2022/09/12 16:43:33 fetching corpus: 4550, signal 208391/236989 (executing program) 2022/09/12 16:43:34 fetching corpus: 4600, signal 208869/237506 (executing program) 2022/09/12 16:43:34 fetching corpus: 4650, signal 209204/237881 (executing program) 2022/09/12 16:43:34 fetching corpus: 4700, signal 209821/238294 (executing program) 2022/09/12 16:43:34 fetching corpus: 4750, signal 210685/238789 (executing program) 2022/09/12 16:43:34 fetching corpus: 4800, signal 211340/239184 (executing program) 2022/09/12 16:43:34 fetching corpus: 4850, signal 211806/239550 (executing program) 2022/09/12 16:43:35 fetching corpus: 4900, signal 212700/239995 (executing program) 2022/09/12 16:43:35 fetching corpus: 4950, signal 213995/240517 (executing program) 2022/09/12 16:43:35 fetching corpus: 5000, signal 215018/240958 (executing program) 2022/09/12 16:43:35 fetching corpus: 5050, signal 215406/241267 (executing program) 2022/09/12 16:43:35 fetching corpus: 5100, signal 216008/241625 (executing program) 2022/09/12 16:43:35 fetching corpus: 5150, signal 216536/241976 (executing program) 2022/09/12 16:43:36 fetching corpus: 5200, signal 217162/242318 (executing program) 2022/09/12 16:43:36 fetching corpus: 5250, signal 217715/242625 (executing program) 2022/09/12 16:43:36 fetching corpus: 5300, signal 218269/242929 (executing program) 2022/09/12 16:43:36 fetching corpus: 5350, signal 218722/243233 (executing program) 2022/09/12 16:43:37 fetching corpus: 5400, signal 219374/243524 (executing program) 2022/09/12 16:43:37 fetching corpus: 5450, signal 220482/243866 (executing program) 2022/09/12 16:43:37 fetching corpus: 5500, signal 221324/244138 (executing program) 2022/09/12 16:43:37 fetching corpus: 5550, signal 221878/244400 (executing program) 2022/09/12 16:43:37 fetching corpus: 5600, signal 222637/244670 (executing program) 2022/09/12 16:43:38 fetching corpus: 5650, signal 223119/244897 (executing program) 2022/09/12 16:43:38 fetching corpus: 5700, signal 223553/245211 (executing program) 2022/09/12 16:43:38 fetching corpus: 5750, signal 224251/245441 (executing program) 2022/09/12 16:43:38 fetching corpus: 5800, signal 224719/245658 (executing program) 2022/09/12 16:43:38 fetching corpus: 5850, signal 225153/245940 (executing program) 2022/09/12 16:43:38 fetching corpus: 5900, signal 225829/246152 (executing program) 2022/09/12 16:43:39 fetching corpus: 5950, signal 226420/246366 (executing program) 2022/09/12 16:43:39 fetching corpus: 6000, signal 226918/246404 (executing program) 2022/09/12 16:43:39 fetching corpus: 6050, signal 227556/246405 (executing program) 2022/09/12 16:43:39 fetching corpus: 6100, signal 228323/246585 (executing program) 2022/09/12 16:43:39 fetching corpus: 6150, signal 229015/246599 (executing program) 2022/09/12 16:43:39 fetching corpus: 6200, signal 229574/246616 (executing program) 2022/09/12 16:43:40 fetching corpus: 6250, signal 229881/246621 (executing program) 2022/09/12 16:43:40 fetching corpus: 6300, signal 230485/246630 (executing program) 2022/09/12 16:43:40 fetching corpus: 6350, signal 231048/246632 (executing program) 2022/09/12 16:43:40 fetching corpus: 6400, signal 231521/246668 (executing program) 2022/09/12 16:43:40 fetching corpus: 6450, signal 232052/246681 (executing program) 2022/09/12 16:43:40 fetching corpus: 6500, signal 232497/246690 (executing program) 2022/09/12 16:43:41 fetching corpus: 6550, signal 233026/246690 (executing program) 2022/09/12 16:43:41 fetching corpus: 6600, signal 233428/246722 (executing program) 2022/09/12 16:43:41 fetching corpus: 6650, signal 233812/246748 (executing program) 2022/09/12 16:43:41 fetching corpus: 6700, signal 234186/246758 (executing program) 2022/09/12 16:43:41 fetching corpus: 6750, signal 234731/246774 (executing program) 2022/09/12 16:43:41 fetching corpus: 6800, signal 235238/246774 (executing program) 2022/09/12 16:43:41 fetching corpus: 6850, signal 235883/246782 (executing program) 2022/09/12 16:43:42 fetching corpus: 6900, signal 236232/246838 (executing program) 2022/09/12 16:43:42 fetching corpus: 6950, signal 236505/246878 (executing program) 2022/09/12 16:43:42 fetching corpus: 7000, signal 236926/246924 (executing program) 2022/09/12 16:43:42 fetching corpus: 7015, signal 237014/246924 (executing program) 2022/09/12 16:43:42 fetching corpus: 7015, signal 237014/246924 (executing program) 2022/09/12 16:43:44 starting 8 fuzzer processes 16:43:44 executing program 0: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) setresuid(0x0, r0, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') 16:43:44 executing program 5: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000000c0)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 16:43:44 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x2000, 0x1) 16:43:44 executing program 2: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 16:43:44 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) 16:43:44 executing program 4: mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x3000, 0x6, &(0x7f0000ffb000/0x3000)=nil) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x6000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x7000) r1 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ffa000/0x1000)=nil) shmat(r1, &(0x7f0000ffa000/0x1000)=nil, 0x4000) 16:43:44 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000006840)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000e0000000000000000000000b952781cebcdde7700"/92], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x7fff, 0xffffffffffffffff, &(0x7f0000000180)="c65d865493306000f705db76609d70bb0a536fbf7e8a5c5cc9348854fec6564ed990c9dac2c496ada8a163b9e281de9859f3526c9bfb9f2c6d1bcd3fa7fbb094b669a507a1e71682b38d819f01c535924ebf029752a887d7e59680193c70be5596dc97544a", 0x65, 0x6, 0x0, 0x3}]) sendmsg$nl_xfrm(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000006840)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000e0000000000000000000000b952781cebcdde7700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b1e13d30c761ef"], 0xb8}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r3, 0x0, 0x3) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) [ 89.096577] audit: type=1400 audit(1663001024.845:6): avc: denied { execmem } for pid=287 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 16:43:44 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) close(r0) [ 90.433459] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.434951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.436131] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.437663] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.449100] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.450315] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.451616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.453971] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.454797] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.455549] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.456313] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.457710] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.459196] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.460148] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.461055] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.462022] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.463252] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.465278] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.466276] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.467179] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.469462] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.472884] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.473094] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.474409] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.474496] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.475559] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.476877] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.477670] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.478773] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.479561] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.480376] Bluetooth: hci3: HCI_REQ-0x0c1a [ 90.481544] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.482796] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.483967] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.485972] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 90.487641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.487830] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.489450] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 90.490547] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 90.491798] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 90.492712] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 90.493645] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.494027] Bluetooth: hci0: HCI_REQ-0x0c1a [ 90.494799] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.496163] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 90.496493] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.500395] Bluetooth: hci6: HCI_REQ-0x0c1a [ 90.501532] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.502432] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.509177] Bluetooth: hci5: HCI_REQ-0x0c1a [ 90.522669] Bluetooth: hci7: HCI_REQ-0x0c1a [ 90.527319] Bluetooth: hci4: HCI_REQ-0x0c1a [ 90.531245] Bluetooth: hci1: HCI_REQ-0x0c1a [ 90.531572] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.540198] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.546100] Bluetooth: hci2: HCI_REQ-0x0c1a [ 92.548356] Bluetooth: hci2: command 0x0409 tx timeout [ 92.548356] Bluetooth: hci5: command 0x0409 tx timeout [ 92.551560] Bluetooth: hci1: command 0x0409 tx timeout [ 92.552605] Bluetooth: hci3: command 0x0409 tx timeout [ 92.554531] Bluetooth: hci0: command 0x0409 tx timeout [ 92.611861] Bluetooth: hci6: command 0x0409 tx timeout [ 92.614273] Bluetooth: hci4: command 0x0409 tx timeout [ 92.615158] Bluetooth: hci7: command 0x0409 tx timeout [ 94.596006] Bluetooth: hci0: command 0x041b tx timeout [ 94.599222] Bluetooth: hci3: command 0x041b tx timeout [ 94.601117] Bluetooth: hci1: command 0x041b tx timeout [ 94.604020] Bluetooth: hci2: command 0x041b tx timeout [ 94.613742] Bluetooth: hci5: command 0x041b tx timeout [ 94.659945] Bluetooth: hci7: command 0x041b tx timeout [ 94.660650] Bluetooth: hci4: command 0x041b tx timeout [ 94.663156] Bluetooth: hci6: command 0x041b tx timeout [ 96.643803] Bluetooth: hci5: command 0x040f tx timeout [ 96.644439] Bluetooth: hci2: command 0x040f tx timeout [ 96.646417] Bluetooth: hci1: command 0x040f tx timeout [ 96.647025] Bluetooth: hci3: command 0x040f tx timeout [ 96.647574] Bluetooth: hci0: command 0x040f tx timeout [ 96.707781] Bluetooth: hci6: command 0x040f tx timeout [ 96.710318] Bluetooth: hci4: command 0x040f tx timeout [ 96.711037] Bluetooth: hci7: command 0x040f tx timeout [ 98.691844] Bluetooth: hci0: command 0x0419 tx timeout [ 98.693372] Bluetooth: hci3: command 0x0419 tx timeout [ 98.696241] Bluetooth: hci1: command 0x0419 tx timeout [ 98.698346] Bluetooth: hci2: command 0x0419 tx timeout [ 98.701772] Bluetooth: hci5: command 0x0419 tx timeout [ 98.755822] Bluetooth: hci7: command 0x0419 tx timeout [ 98.757371] Bluetooth: hci4: command 0x0419 tx timeout [ 98.760156] Bluetooth: hci6: command 0x0419 tx timeout [ 152.860368] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.866385] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.868394] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.872418] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.874284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 152.875310] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.881815] Bluetooth: hci0: HCI_REQ-0x0c1a [ 152.920459] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 152.923595] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 152.927706] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 152.939349] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 152.942187] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 152.943102] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 152.948382] Bluetooth: hci1: HCI_REQ-0x0c1a [ 152.992605] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.007372] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.011778] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.016475] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.018155] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 153.019109] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.023793] Bluetooth: hci5: HCI_REQ-0x0c1a [ 153.039419] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.039733] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.041557] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.042902] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.043728] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.046157] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.046271] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.048080] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.049068] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 153.050437] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.053846] Bluetooth: hci3: HCI_REQ-0x0c1a [ 153.054375] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.055657] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.059764] Bluetooth: hci4: HCI_REQ-0x0c1a [ 153.062446] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.063583] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 153.114499] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.118045] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.125024] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 153.127483] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 153.130760] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.131606] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.133416] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.135382] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 153.139102] Bluetooth: hci7: HCI_REQ-0x0c1a [ 153.168364] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 153.172478] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.189244] Bluetooth: hci6: HCI_REQ-0x0c1a [ 154.947908] Bluetooth: hci0: command 0x0409 tx timeout [ 155.011848] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 155.013220] Bluetooth: hci1: command 0x0409 tx timeout [ 155.075990] Bluetooth: hci4: command 0x0409 tx timeout [ 155.076635] Bluetooth: hci3: command 0x0409 tx timeout [ 155.081954] Bluetooth: hci5: command 0x0409 tx timeout [ 155.203745] Bluetooth: hci7: command 0x0409 tx timeout [ 155.204394] Bluetooth: hci6: command 0x0409 tx timeout [ 156.995758] Bluetooth: hci0: command 0x041b tx timeout [ 157.059742] Bluetooth: hci1: command 0x041b tx timeout [ 157.123832] Bluetooth: hci5: command 0x041b tx timeout [ 157.124396] Bluetooth: hci3: command 0x041b tx timeout [ 157.124947] Bluetooth: hci4: command 0x041b tx timeout [ 157.251820] Bluetooth: hci7: command 0x041b tx timeout [ 157.252840] Bluetooth: hci6: command 0x041b tx timeout [ 158.089266] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 158.090906] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 158.092497] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 158.095457] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 158.097507] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 158.099442] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 158.107722] Bluetooth: hci2: HCI_REQ-0x0c1a [ 159.044734] Bluetooth: hci0: command 0x040f tx timeout [ 159.108754] Bluetooth: hci1: command 0x040f tx timeout [ 159.172867] Bluetooth: hci4: command 0x040f tx timeout [ 159.173449] Bluetooth: hci3: command 0x040f tx timeout [ 159.174053] Bluetooth: hci5: command 0x040f tx timeout [ 159.299774] Bluetooth: hci6: command 0x040f tx timeout [ 159.301347] Bluetooth: hci7: command 0x040f tx timeout [ 160.132824] Bluetooth: hci2: command 0x0409 tx timeout [ 161.092186] Bluetooth: hci0: command 0x0419 tx timeout [ 161.155843] Bluetooth: hci1: command 0x0419 tx timeout [ 161.219837] Bluetooth: hci5: command 0x0419 tx timeout [ 161.223049] Bluetooth: hci3: command 0x0419 tx timeout [ 161.224459] Bluetooth: hci4: command 0x0419 tx timeout [ 161.347848] Bluetooth: hci7: command 0x0419 tx timeout [ 161.349967] Bluetooth: hci6: command 0x0419 tx timeout [ 162.179990] Bluetooth: hci2: command 0x041b tx timeout [ 164.227766] Bluetooth: hci2: command 0x040f tx timeout [ 166.276117] Bluetooth: hci2: command 0x0419 tx timeout [ 214.729599] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.731661] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.732955] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.735554] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.737196] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 214.738268] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.743335] Bluetooth: hci0: HCI_REQ-0x0c1a [ 215.054193] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.057502] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.060339] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.064930] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.066736] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.068152] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.073245] Bluetooth: hci1: HCI_REQ-0x0c1a [ 215.190480] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.266433] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.269104] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.270932] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.283004] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.284980] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.286376] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.290859] Bluetooth: hci3: HCI_REQ-0x0c1a [ 215.307642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.353483] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.366254] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 215.373929] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 215.386575] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.398393] Bluetooth: hci4: HCI_REQ-0x0c1a [ 215.416903] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 215.418352] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 215.425892] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 215.433326] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 215.435354] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 215.438600] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 215.445570] Bluetooth: hci6: HCI_REQ-0x0c1a [ 216.771776] Bluetooth: hci0: command 0x0409 tx timeout [ 217.091741] Bluetooth: hci1: command 0x0409 tx timeout [ 217.283787] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 217.284665] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 217.347712] Bluetooth: hci3: command 0x0409 tx timeout [ 217.475756] Bluetooth: hci6: command 0x0409 tx timeout [ 217.476780] Bluetooth: hci4: command 0x0409 tx timeout [ 218.819777] Bluetooth: hci0: command 0x041b tx timeout [ 219.139776] Bluetooth: hci1: command 0x041b tx timeout [ 219.395758] Bluetooth: hci3: command 0x041b tx timeout [ 219.401059] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 219.402230] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 219.403140] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 219.405376] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 219.407417] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 219.408336] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 219.413376] Bluetooth: hci2: HCI_REQ-0x0c1a [ 219.523859] Bluetooth: hci4: command 0x041b tx timeout [ 219.525081] Bluetooth: hci6: command 0x041b tx timeout [ 220.867842] Bluetooth: hci0: command 0x040f tx timeout [ 221.187766] Bluetooth: hci1: command 0x040f tx timeout [ 221.443888] Bluetooth: hci2: command 0x0409 tx timeout [ 221.445152] Bluetooth: hci3: command 0x040f tx timeout [ 221.571730] Bluetooth: hci6: command 0x040f tx timeout [ 221.572232] Bluetooth: hci4: command 0x040f tx timeout [ 221.891742] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 222.147735] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 222.915738] Bluetooth: hci0: command 0x0419 tx timeout [ 223.236154] Bluetooth: hci1: command 0x0419 tx timeout [ 223.491765] Bluetooth: hci3: command 0x0419 tx timeout [ 223.492230] Bluetooth: hci2: command 0x041b tx timeout [ 223.619756] Bluetooth: hci4: command 0x0419 tx timeout [ 223.620220] Bluetooth: hci6: command 0x0419 tx timeout [ 224.784593] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 224.792049] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 224.805065] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 224.816458] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 224.820945] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 224.822739] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 224.829385] Bluetooth: hci5: HCI_REQ-0x0c1a [ 225.539848] Bluetooth: hci2: command 0x040f tx timeout [ 226.883736] Bluetooth: hci5: command 0x0409 tx timeout [ 227.267749] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 227.588224] Bluetooth: hci2: command 0x0419 tx timeout [ 228.931770] Bluetooth: hci5: command 0x041b tx timeout [ 229.968525] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 229.985939] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 229.987629] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 230.006292] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 230.007630] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 230.023561] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 230.046852] Bluetooth: hci7: HCI_REQ-0x0c1a [ 230.979821] Bluetooth: hci5: command 0x040f tx timeout [ 232.132157] Bluetooth: hci7: command 0x0409 tx timeout [ 233.028034] Bluetooth: hci5: command 0x0419 tx timeout [ 234.179868] Bluetooth: hci7: command 0x041b tx timeout [ 236.227839] Bluetooth: hci7: command 0x040f tx timeout [ 238.275825] Bluetooth: hci7: command 0x0419 tx timeout [ 277.960260] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 277.962788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 277.963799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 277.969190] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 277.970768] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 277.971999] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.978828] Bluetooth: hci3: HCI_REQ-0x0c1a [ 278.178471] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 278.188255] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 278.192538] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 278.211623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 278.226465] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 278.227528] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 278.249782] Bluetooth: hci4: HCI_REQ-0x0c1a [ 278.276041] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 278.277512] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 278.279506] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 278.282074] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 278.283922] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 278.285274] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 278.332782] Bluetooth: hci6: HCI_REQ-0x0c1a [ 279.491818] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 279.939861] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 280.003765] Bluetooth: hci3: command 0x0409 tx timeout [ 280.323878] Bluetooth: hci4: command 0x0409 tx timeout [ 280.387774] Bluetooth: hci6: command 0x0409 tx timeout [ 282.051795] Bluetooth: hci3: command 0x041b tx timeout [ 282.315318] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 282.318021] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 282.324312] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 282.338391] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 282.348764] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 282.352021] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 282.368779] Bluetooth: hci1: HCI_REQ-0x0c1a [ 282.371841] Bluetooth: hci4: command 0x041b tx timeout [ 282.435842] Bluetooth: hci6: command 0x041b tx timeout [ 283.779782] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 284.099746] Bluetooth: hci3: command 0x040f tx timeout [ 284.419800] Bluetooth: hci1: command 0x0409 tx timeout [ 284.421218] Bluetooth: hci4: command 0x040f tx timeout [ 284.483846] Bluetooth: hci6: command 0x040f tx timeout [ 285.059734] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 286.147724] Bluetooth: hci3: command 0x0419 tx timeout [ 286.467744] Bluetooth: hci4: command 0x0419 tx timeout [ 286.468205] Bluetooth: hci1: command 0x041b tx timeout [ 286.531743] Bluetooth: hci6: command 0x0419 tx timeout [ 288.515763] Bluetooth: hci1: command 0x040f tx timeout [ 288.643744] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 288.771709] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 289.603734] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 290.563766] Bluetooth: hci1: command 0x0419 tx timeout [ 291.349232] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 291.352173] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 291.353056] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 291.361334] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 291.363466] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 291.364516] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 291.373288] Bluetooth: hci0: HCI_REQ-0x0c1a [ 291.848458] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 291.850527] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 291.852561] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 291.856876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 291.858662] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 291.860130] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 291.875193] Bluetooth: hci2: HCI_REQ-0x0c1a [ 291.957001] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 291.963930] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 291.968460] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 291.975233] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 291.978403] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 291.979429] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 292.043215] Bluetooth: hci5: HCI_REQ-0x0c1a [ 293.379737] Bluetooth: hci0: command 0x0409 tx timeout [ 293.891792] Bluetooth: hci2: command 0x0409 tx timeout [ 294.084023] Bluetooth: hci5: command 0x0409 tx timeout [ 294.212126] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 295.428520] Bluetooth: hci0: command 0x041b tx timeout [ 295.939864] Bluetooth: hci2: command 0x041b tx timeout [ 296.131786] Bluetooth: hci5: command 0x041b tx timeout [ 297.415237] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 297.417512] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 297.419066] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 297.421599] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 297.422775] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 297.424053] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 297.428470] Bluetooth: hci7: HCI_REQ-0x0c1a [ 297.475772] Bluetooth: hci0: command 0x040f tx timeout [ 297.987792] Bluetooth: hci2: command 0x040f tx timeout [ 298.179870] Bluetooth: hci5: command 0x040f tx timeout [ 299.459728] Bluetooth: hci7: command 0x0409 tx timeout [ 299.523936] Bluetooth: hci0: command 0x0419 tx timeout [ 300.035874] Bluetooth: hci2: command 0x0419 tx timeout [ 300.227921] Bluetooth: hci5: command 0x0419 tx timeout [ 301.507782] Bluetooth: hci7: command 0x041b tx timeout [ 303.555722] Bluetooth: hci7: command 0x040f tx timeout [ 305.604780] Bluetooth: hci7: command 0x0419 tx timeout [ 339.455320] ======================================================= [ 339.455320] WARNING: The mand mount option has been deprecated and [ 339.455320] and is ignored by this kernel. Remove the mand [ 339.455320] option from the mount to silence this warning. [ 339.455320] ======================================================= [ 343.768008] audit: type=1400 audit(1663001279.516:7): avc: denied { open } for pid=12950 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 343.769609] audit: type=1400 audit(1663001279.518:8): avc: denied { kernel } for pid=12950 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 343.784426] ------------[ cut here ]------------ [ 343.784449] [ 343.784451] ====================================================== [ 343.784455] WARNING: possible circular locking dependency detected [ 343.784460] 6.0.0-rc5-next-20220912 #1 Not tainted [ 343.784466] ------------------------------------------------------ [ 343.784470] syz-executor.6/12951 is trying to acquire lock: [ 343.784477] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 343.784516] [ 343.784516] but task is already holding lock: [ 343.784519] ffff888008cd9c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 343.784551] [ 343.784551] which lock already depends on the new lock. [ 343.784551] [ 343.784554] [ 343.784554] the existing dependency chain (in reverse order) is: [ 343.784557] [ 343.784557] -> #3 (&ctx->lock){....}-{2:2}: [ 343.784572] _raw_spin_lock+0x2a/0x40 [ 343.784589] __perf_event_task_sched_out+0x53b/0x18d0 [ 343.784602] __schedule+0xedd/0x2470 [ 343.784612] schedule+0xda/0x1b0 [ 343.784621] exit_to_user_mode_prepare+0x114/0x1a0 [ 343.784642] syscall_exit_to_user_mode+0x19/0x40 [ 343.784660] do_syscall_64+0x48/0x90 [ 343.784674] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 343.784691] [ 343.784691] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 343.784705] _raw_spin_lock_nested+0x30/0x40 [ 343.784720] raw_spin_rq_lock_nested+0x1e/0x30 [ 343.784733] task_fork_fair+0x63/0x4d0 [ 343.784751] sched_cgroup_fork+0x3d0/0x540 [ 343.784765] copy_process+0x3f9e/0x6df0 [ 343.784775] kernel_clone+0xe7/0x890 [ 343.784785] user_mode_thread+0xad/0xf0 [ 343.784795] rest_init+0x24/0x250 [ 343.784811] arch_call_rest_init+0xf/0x14 [ 343.784831] start_kernel+0x4c1/0x4e6 [ 343.784848] secondary_startup_64_no_verify+0xe0/0xeb [ 343.784863] [ 343.784863] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 343.784876] _raw_spin_lock_irqsave+0x39/0x60 [ 343.784891] try_to_wake_up+0xab/0x1920 [ 343.784904] up+0x75/0xb0 [ 343.784916] __up_console_sem+0x6e/0x80 [ 343.784933] console_unlock+0x46a/0x590 [ 343.784949] vt_ioctl+0x2822/0x2ca0 [ 343.784962] tty_ioctl+0x7c4/0x1700 [ 343.784973] __x64_sys_ioctl+0x19a/0x210 [ 343.784989] do_syscall_64+0x3b/0x90 [ 343.785002] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 343.785019] [ 343.785019] -> #0 ((console_sem).lock){....}-{2:2}: [ 343.785033] __lock_acquire+0x2a02/0x5e70 [ 343.785049] lock_acquire+0x1a2/0x530 [ 343.785066] _raw_spin_lock_irqsave+0x39/0x60 [ 343.785080] down_trylock+0xe/0x70 [ 343.785093] __down_trylock_console_sem+0x3b/0xd0 [ 343.785109] vprintk_emit+0x16b/0x560 [ 343.785126] vprintk+0x84/0xa0 [ 343.785142] _printk+0xba/0xf1 [ 343.785160] report_bug.cold+0x72/0xab [ 343.785172] handle_bug+0x3c/0x70 [ 343.785185] exc_invalid_op+0x14/0x50 [ 343.785198] asm_exc_invalid_op+0x16/0x20 [ 343.785214] group_sched_out.part.0+0x2c7/0x460 [ 343.785224] ctx_sched_out+0x8f1/0xc10 [ 343.785234] __perf_event_task_sched_out+0x6d0/0x18d0 [ 343.785246] __schedule+0xedd/0x2470 [ 343.785255] schedule+0xda/0x1b0 [ 343.785264] exit_to_user_mode_prepare+0x114/0x1a0 [ 343.785284] syscall_exit_to_user_mode+0x19/0x40 [ 343.785301] do_syscall_64+0x48/0x90 [ 343.785314] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 343.785330] [ 343.785330] other info that might help us debug this: [ 343.785330] [ 343.785333] Chain exists of: [ 343.785333] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 343.785333] [ 343.785348] Possible unsafe locking scenario: [ 343.785348] [ 343.785351] CPU0 CPU1 [ 343.785353] ---- ---- [ 343.785355] lock(&ctx->lock); [ 343.785361] lock(&rq->__lock); [ 343.785367] lock(&ctx->lock); [ 343.785374] lock((console_sem).lock); [ 343.785379] [ 343.785379] *** DEADLOCK *** [ 343.785379] [ 343.785381] 2 locks held by syz-executor.6/12951: [ 343.785388] #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 343.785413] #1: ffff888008cd9c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 343.785441] [ 343.785441] stack backtrace: [ 343.785444] CPU: 0 PID: 12951 Comm: syz-executor.6 Not tainted 6.0.0-rc5-next-20220912 #1 [ 343.785456] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 343.785465] Call Trace: [ 343.785468] [ 343.785472] dump_stack_lvl+0x8b/0xb3 [ 343.785487] check_noncircular+0x263/0x2e0 [ 343.785504] ? format_decode+0x26c/0xb50 [ 343.785519] ? print_circular_bug+0x450/0x450 [ 343.785536] ? enable_ptr_key_workfn+0x20/0x20 [ 343.785550] ? __lockdep_reset_lock+0x180/0x180 [ 343.785567] ? format_decode+0x26c/0xb50 [ 343.785582] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 343.785600] __lock_acquire+0x2a02/0x5e70 [ 343.785622] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 343.785645] lock_acquire+0x1a2/0x530 [ 343.785662] ? down_trylock+0xe/0x70 [ 343.785677] ? rcu_read_unlock+0x40/0x40 [ 343.785694] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 343.785716] ? vprintk+0x84/0xa0 [ 343.785734] _raw_spin_lock_irqsave+0x39/0x60 [ 343.785750] ? down_trylock+0xe/0x70 [ 343.785763] down_trylock+0xe/0x70 [ 343.785777] ? vprintk+0x84/0xa0 [ 343.785794] __down_trylock_console_sem+0x3b/0xd0 [ 343.785812] vprintk_emit+0x16b/0x560 [ 343.785829] ? lock_downgrade+0x6d0/0x6d0 [ 343.785848] vprintk+0x84/0xa0 [ 343.785866] _printk+0xba/0xf1 [ 343.785884] ? record_print_text.cold+0x16/0x16 [ 343.785904] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 343.785918] ? lock_downgrade+0x6d0/0x6d0 [ 343.785936] ? report_bug.cold+0x66/0xab [ 343.785950] ? group_sched_out.part.0+0x2c7/0x460 [ 343.785961] report_bug.cold+0x72/0xab [ 343.785976] handle_bug+0x3c/0x70 [ 343.785989] exc_invalid_op+0x14/0x50 [ 343.786004] asm_exc_invalid_op+0x16/0x20 [ 343.786021] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 343.786035] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 343.786046] RSP: 0018:ffff888018547c48 EFLAGS: 00010006 [ 343.786055] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 343.786063] RDX: ffff88803472d040 RSI: ffffffff81566027 RDI: 0000000000000005 [ 343.786071] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 343.786078] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888008cd9c00 [ 343.786086] R13: ffff88806ce3d100 R14: ffffffff8547bfc0 R15: 0000000000000002 [ 343.786097] ? group_sched_out.part.0+0x2c7/0x460 [ 343.786110] ? group_sched_out.part.0+0x2c7/0x460 [ 343.786123] ctx_sched_out+0x8f1/0xc10 [ 343.786135] __perf_event_task_sched_out+0x6d0/0x18d0 [ 343.786151] ? lock_is_held_type+0xd7/0x130 [ 343.786170] ? __perf_cgroup_move+0x160/0x160 [ 343.786181] ? set_next_entity+0x304/0x550 [ 343.786199] ? update_curr+0x267/0x740 [ 343.786218] ? lock_is_held_type+0xd7/0x130 [ 343.786237] __schedule+0xedd/0x2470 [ 343.786249] ? io_schedule_timeout+0x150/0x150 [ 343.786262] ? __x64_sys_futex_time32+0x480/0x480 [ 343.786276] schedule+0xda/0x1b0 [ 343.786286] exit_to_user_mode_prepare+0x114/0x1a0 [ 343.786307] syscall_exit_to_user_mode+0x19/0x40 [ 343.786325] do_syscall_64+0x48/0x90 [ 343.786339] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 343.786356] RIP: 0033:0x7f511fb59b19 [ 343.786365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 343.786376] RSP: 002b:00007f511d0cf218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 343.786387] RAX: 0000000000000001 RBX: 00007f511fc6cf68 RCX: 00007f511fb59b19 [ 343.786394] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f511fc6cf6c [ 343.786402] RBP: 00007f511fc6cf60 R08: 000000000000000e R09: 0000000000000000 [ 343.786409] R10: 0000000000000007 R11: 0000000000000246 R12: 00007f511fc6cf6c [ 343.786416] R13: 00007ffe96d5070f R14: 00007f511d0cf300 R15: 0000000000022000 [ 343.786429] [ 343.844040] WARNING: CPU: 0 PID: 12951 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 343.844762] Modules linked in: [ 343.845013] CPU: 0 PID: 12951 Comm: syz-executor.6 Not tainted 6.0.0-rc5-next-20220912 #1 [ 343.845616] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 343.846456] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 343.846867] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 343.848218] RSP: 0018:ffff888018547c48 EFLAGS: 00010006 [ 343.848624] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 343.849155] RDX: ffff88803472d040 RSI: ffffffff81566027 RDI: 0000000000000005 [ 343.849690] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 343.850220] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888008cd9c00 [ 343.850749] R13: ffff88806ce3d100 R14: ffffffff8547bfc0 R15: 0000000000000002 [ 343.851281] FS: 00007f511d0cf700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 343.851892] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 343.852329] CR2: 000055820a5521c8 CR3: 0000000041e40000 CR4: 0000000000350ef0 [ 343.852879] Call Trace: [ 343.853081] [ 343.853262] ctx_sched_out+0x8f1/0xc10 [ 343.853566] __perf_event_task_sched_out+0x6d0/0x18d0 [ 343.853955] ? lock_is_held_type+0xd7/0x130 [ 343.854289] ? __perf_cgroup_move+0x160/0x160 [ 343.854629] ? set_next_entity+0x304/0x550 [ 343.854956] ? update_curr+0x267/0x740 [ 343.855263] ? lock_is_held_type+0xd7/0x130 [ 343.855592] __schedule+0xedd/0x2470 [ 343.855877] ? io_schedule_timeout+0x150/0x150 [ 343.856228] ? __x64_sys_futex_time32+0x480/0x480 [ 343.856603] schedule+0xda/0x1b0 [ 343.856866] exit_to_user_mode_prepare+0x114/0x1a0 [ 343.857254] syscall_exit_to_user_mode+0x19/0x40 [ 343.857621] do_syscall_64+0x48/0x90 [ 343.857910] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 343.858304] RIP: 0033:0x7f511fb59b19 [ 343.858590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 343.859959] RSP: 002b:00007f511d0cf218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 343.860524] RAX: 0000000000000001 RBX: 00007f511fc6cf68 RCX: 00007f511fb59b19 [ 343.861055] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f511fc6cf6c [ 343.861592] RBP: 00007f511fc6cf60 R08: 000000000000000e R09: 0000000000000000 [ 343.862134] R10: 0000000000000007 R11: 0000000000000246 R12: 00007f511fc6cf6c [ 343.862672] R13: 00007ffe96d5070f R14: 00007f511d0cf300 R15: 0000000000022000 [ 343.863220] [ 343.863399] irq event stamp: 1988 [ 343.863660] hardirqs last enabled at (1987): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 343.864372] hardirqs last disabled at (1988): [] __schedule+0x1225/0x2470 [ 343.865007] softirqs last enabled at (1946): [] __irq_exit_rcu+0x11b/0x180 [ 343.865664] softirqs last disabled at (1937): [] __irq_exit_rcu+0x11b/0x180 [ 343.866308] ---[ end trace 0000000000000000 ]--- [ 344.658684] hrtimer: interrupt took 16310 ns 16:48:01 executing program 0: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) setresuid(0x0, r0, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') 16:48:01 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x2000, 0x1) 16:48:01 executing program 4: mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x3000, 0x6, &(0x7f0000ffb000/0x3000)=nil) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x6000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x7000) r1 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ffa000/0x1000)=nil) shmat(r1, &(0x7f0000ffa000/0x1000)=nil, 0x4000) 16:48:01 executing program 5: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000000c0)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 16:48:01 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000006840)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000e0000000000000000000000b952781cebcdde7700"/92], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x7fff, 0xffffffffffffffff, &(0x7f0000000180)="c65d865493306000f705db76609d70bb0a536fbf7e8a5c5cc9348854fec6564ed990c9dac2c496ada8a163b9e281de9859f3526c9bfb9f2c6d1bcd3fa7fbb094b669a507a1e71682b38d819f01c535924ebf029752a887d7e59680193c70be5596dc97544a", 0x65, 0x6, 0x0, 0x3}]) sendmsg$nl_xfrm(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000006840)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000e0000000000000000000000b952781cebcdde7700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b1e13d30c761ef"], 0xb8}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r3, 0x0, 0x3) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 16:48:01 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) 16:48:01 executing program 2: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 16:48:01 executing program 7: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 16:48:01 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x2000, 0x1) 16:48:01 executing program 5: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000000c0)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 16:48:01 executing program 0: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) setresuid(0x0, r0, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') 16:48:01 executing program 4: mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x3000, 0x6, &(0x7f0000ffb000/0x3000)=nil) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x6000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x7000) r1 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ffa000/0x1000)=nil) shmat(r1, &(0x7f0000ffa000/0x1000)=nil, 0x4000) 16:48:02 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x2000, 0x1) 16:48:02 executing program 5: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000000c0)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 16:48:02 executing program 4: mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x3000, 0x6, &(0x7f0000ffb000/0x3000)=nil) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x6000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x7000) r1 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ffa000/0x1000)=nil) shmat(r1, &(0x7f0000ffa000/0x1000)=nil, 0x4000) 16:48:02 executing program 0: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000140)='./file0\x00', r1, 0x0) setresuid(0x0, r0, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') 16:48:02 executing program 2: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 16:48:02 executing program 7: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 16:48:02 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) 16:48:02 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000006840)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000e0000000000000000000000b952781cebcdde7700"/92], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x7fff, 0xffffffffffffffff, &(0x7f0000000180)="c65d865493306000f705db76609d70bb0a536fbf7e8a5c5cc9348854fec6564ed990c9dac2c496ada8a163b9e281de9859f3526c9bfb9f2c6d1bcd3fa7fbb094b669a507a1e71682b38d819f01c535924ebf029752a887d7e59680193c70be5596dc97544a", 0x65, 0x6, 0x0, 0x3}]) sendmsg$nl_xfrm(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000006840)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000e0000000000000000000000b952781cebcdde7700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b1e13d30c761ef"], 0xb8}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r3, 0x0, 0x3) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 16:48:02 executing program 5: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 16:48:02 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000006840)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000e0000000000000000000000b952781cebcdde7700"/92], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x7fff, 0xffffffffffffffff, &(0x7f0000000180)="c65d865493306000f705db76609d70bb0a536fbf7e8a5c5cc9348854fec6564ed990c9dac2c496ada8a163b9e281de9859f3526c9bfb9f2c6d1bcd3fa7fbb094b669a507a1e71682b38d819f01c535924ebf029752a887d7e59680193c70be5596dc97544a", 0x65, 0x6, 0x0, 0x3}]) sendmsg$nl_xfrm(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000006840)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000e0000000000000000000000b952781cebcdde7700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b1e13d30c761ef"], 0xb8}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r3, 0x0, 0x3) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 16:48:02 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000006840)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000e0000000000000000000000b952781cebcdde7700"/92], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x7fff, 0xffffffffffffffff, &(0x7f0000000180)="c65d865493306000f705db76609d70bb0a536fbf7e8a5c5cc9348854fec6564ed990c9dac2c496ada8a163b9e281de9859f3526c9bfb9f2c6d1bcd3fa7fbb094b669a507a1e71682b38d819f01c535924ebf029752a887d7e59680193c70be5596dc97544a", 0x65, 0x6, 0x0, 0x3}]) sendmsg$nl_xfrm(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000006840)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000e0000000000000000000000b952781cebcdde7700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b1e13d30c761ef"], 0xb8}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r3, 0x0, 0x3) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 16:48:02 executing program 2: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 16:48:02 executing program 4: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000000c0)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 16:48:02 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[@ANYBLOB="0600000000007cd181000000000000000089"]) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x7fff) pwrite64(r0, &(0x7f0000000180)="01", 0x1, 0x1000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 16:48:02 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000006840)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000e0000000000000000000000b952781cebcdde7700"/92], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x7fff, 0xffffffffffffffff, &(0x7f0000000180)="c65d865493306000f705db76609d70bb0a536fbf7e8a5c5cc9348854fec6564ed990c9dac2c496ada8a163b9e281de9859f3526c9bfb9f2c6d1bcd3fa7fbb094b669a507a1e71682b38d819f01c535924ebf029752a887d7e59680193c70be5596dc97544a", 0x65, 0x6, 0x0, 0x3}]) sendmsg$nl_xfrm(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000006840)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000e0000000000000000000000b952781cebcdde7700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b1e13d30c761ef"], 0xb8}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r3, 0x0, 0x3) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 16:48:02 executing program 5: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 16:48:02 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[@ANYBLOB="0600000000007cd181000000000000000089"]) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x7fff) pwrite64(r0, &(0x7f0000000180)="01", 0x1, 0x1000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 16:48:03 executing program 4: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000000c0)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 16:48:03 executing program 7: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 16:48:03 executing program 5: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 16:48:03 executing program 6: ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000040)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) clone3(&(0x7f0000001300)={0x0, &(0x7f0000000140), 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) syz_open_procfs(0x0, &(0x7f0000001a00)='net/tcp\x00') 16:48:03 executing program 2: openat$urandom(0xffffffffffffff9c, &(0x7f0000005a40), 0x0, 0x0) 16:48:03 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[@ANYBLOB="0600000000007cd181000000000000000089"]) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x7fff) pwrite64(r0, &(0x7f0000000180)="01", 0x1, 0x1000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 16:48:03 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) 16:48:03 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/63, 0x3d}, {&(0x7f0000000540)=""/105}, {&(0x7f0000000240)=""/46}, {&(0x7f0000000840)=""/4096}], 0x3d, 0x0, 0xfff80000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000006840)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000e0000000000000000000000b952781cebcdde7700"/92], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x7fff, 0xffffffffffffffff, &(0x7f0000000180)="c65d865493306000f705db76609d70bb0a536fbf7e8a5c5cc9348854fec6564ed990c9dac2c496ada8a163b9e281de9859f3526c9bfb9f2c6d1bcd3fa7fbb094b669a507a1e71682b38d819f01c535924ebf029752a887d7e59680193c70be5596dc97544a", 0x65, 0x6, 0x0, 0x3}]) sendmsg$nl_xfrm(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000006840)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000e0000000000000000000000b952781cebcdde7700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b1e13d30c761ef"], 0xb8}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)="1c", 0x1}], 0x1, 0x7fffffc, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r3, 0x0, 0x3) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 16:48:03 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x9) sendfile(r1, r0, 0x0, 0x80000001) 16:48:03 executing program 4: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000000c0)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 16:48:03 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[@ANYBLOB="0600000000007cd181000000000000000089"]) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x7fff) pwrite64(r0, &(0x7f0000000180)="01", 0x1, 0x1000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 16:48:03 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f00000001c0), 0x2, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c0, 0x0, 0x0, r1}) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x220) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x80000001, 0x1) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000340)={'\x00', 0x80, 0x3f, 0x7fffffff, 0x0, 0x2, r1}) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0x80000000000000, 0x718c35f1}) ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000340)={'\x00', 0x80, 0x3f, 0x7fffffff, 0x0, 0x2}) syz_open_procfs(0x0, 0x0) 16:48:03 executing program 7: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) socketpair(0x11, 0xa, 0xffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0xc0) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x20, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x4}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x20}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, 0x0, 0x0) 16:48:03 executing program 6: ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000040)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) clone3(&(0x7f0000001300)={0x0, &(0x7f0000000140), 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) syz_open_procfs(0x0, &(0x7f0000001a00)='net/tcp\x00') 16:48:03 executing program 7: clock_gettime(0xf, 0x0) 16:48:03 executing program 6: ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000040)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) clone3(&(0x7f0000001300)={0x0, &(0x7f0000000140), 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) syz_open_procfs(0x0, &(0x7f0000001a00)='net/tcp\x00') 16:48:03 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x5320, &(0x7f0000000000)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x12}}, 0x0) poll(0x0, 0xfffffffffffffdc0, 0x7fffffff) close_range(r1, r1, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff66, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x20010, 0xffffffffffffffff, 0x7fea3000) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) close_range(r3, r3, 0x0) 16:48:03 executing program 6: ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000040)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) clone3(&(0x7f0000001300)={0x0, &(0x7f0000000140), 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) syz_open_procfs(0x0, &(0x7f0000001a00)='net/tcp\x00') 16:48:04 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f00000001c0), 0x2, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c0, 0x0, 0x0, r1}) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x220) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x80000001, 0x1) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000340)={'\x00', 0x80, 0x3f, 0x7fffffff, 0x0, 0x2, r1}) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0x80000000000000, 0x718c35f1}) ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000340)={'\x00', 0x80, 0x3f, 0x7fffffff, 0x0, 0x2}) syz_open_procfs(0x0, 0x0) 16:48:04 executing program 5: syz_mount_image$tmpfs(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x36, 0x2d, 0x36, 0x3a, 0x4e]}}}}]}) 16:48:04 executing program 6: sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x6b40, &(0x7f0000000640)={0x0, 0x0, 0x10, 0x0, 0x41}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000006c0)=0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000880), 0x301240, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x0, 0x0, 0x34d) syz_io_uring_setup(0x45d4, &(0x7f0000000b00)={0x0, 0xadfe, 0x8}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000b80), &(0x7f0000000bc0)) socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) 16:48:04 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x5320, &(0x7f0000000000)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x12}}, 0x0) poll(0x0, 0xfffffffffffffdc0, 0x7fffffff) close_range(r1, r1, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff66, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x20010, 0xffffffffffffffff, 0x7fea3000) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) close_range(r3, r3, 0x0) 16:48:04 executing program 0: r0 = clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = getpgrp(0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x50, 0x0, 0x1, 0x0, 0x10, {{}, {@val={0xfffffffffffffe09}, @void}}, [@NL80211_ATTR_FRAME={0x34, 0x33, @reassoc_req={@with_ht={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, {}, @broadcast, @device_b}}, 0x0, 0x0, @broadcast, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}]}, 0x50}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000480)=""/106, 0x6a}, {&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000600)=""/34, 0x22}, {&(0x7f00000006c0)=""/151, 0x97}], 0x5) timer_create(0x3, &(0x7f0000000000)={0x0, 0x19, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) r3 = getpgrp(0x0) timer_delete(r2) clone3(&(0x7f0000000400)={0x94000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000140), {}, &(0x7f0000000180)=""/41, 0x29, &(0x7f0000000280)=""/217, &(0x7f00000003c0)=[0x0, r0, r1, r3, r0], 0x5}, 0x58) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r4, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0xffff, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) sendfile(r5, r4, 0x0, 0x80000001) 16:48:04 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x9) sendfile(r1, r0, 0x0, 0x80000001) 16:48:04 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0xa264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xe57d) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x40000, 0x4, 0x17}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000200)={0x0, @aes256, 0x0, @desc1}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3f, 0x44, 0x6, 0x0, 0x5924, 0x10004, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_config_ext={0x3, 0x6}, 0x20, 0x40, 0x5, 0x1, 0x4, 0x3, 0xfff, 0x0, 0x5, 0x0, 0x1}, r0, 0x5, r1, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000001340)=0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x20, 0x2, 0x8, 0x3f, 0x0, 0x875, 0xc0000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x804, 0x7, 0x5, 0x9, 0x8, 0x100, 0x3, 0x0, 0x10000, 0x0, 0xae}, 0xffffffffffffffff, 0x1, r1, 0x9) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r3, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000001c0)=')', 0x1}]) 16:48:04 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000003380)=[{{&(0x7f00000036c0)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000004c80)=[{&(0x7f0000003700)='@f', 0x2}], 0x1, &(0x7f0000004dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @local}}}], 0x20}}, {{&(0x7f0000000000)={0x2, 0x0, @local}, 0xf, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3}]}}}], 0x28}}], 0x2, 0x0) [ 348.734459] tmpfs: Bad value for 'mpol' [ 348.740873] tmpfs: Bad value for 'mpol' 16:48:04 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000003380)=[{{&(0x7f00000036c0)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000004c80)=[{&(0x7f0000003700)='@f', 0x2}], 0x1, &(0x7f0000004dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @local}}}], 0x20}}, {{&(0x7f0000000000)={0x2, 0x0, @local}, 0xf, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3}]}}}], 0x28}}], 0x2, 0x0) 16:48:04 executing program 5: syz_mount_image$tmpfs(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x36, 0x2d, 0x36, 0x3a, 0x4e]}}}}]}) 16:48:04 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000003380)=[{{&(0x7f00000036c0)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000004c80)=[{&(0x7f0000003700)='@f', 0x2}], 0x1, &(0x7f0000004dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @local}}}], 0x20}}, {{&(0x7f0000000000)={0x2, 0x0, @local}, 0xf, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3}]}}}], 0x28}}], 0x2, 0x0) 16:48:04 executing program 0: r0 = clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = getpgrp(0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x50, 0x0, 0x1, 0x0, 0x10, {{}, {@val={0xfffffffffffffe09}, @void}}, [@NL80211_ATTR_FRAME={0x34, 0x33, @reassoc_req={@with_ht={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, {}, @broadcast, @device_b}}, 0x0, 0x0, @broadcast, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}]}, 0x50}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000480)=""/106, 0x6a}, {&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000600)=""/34, 0x22}, {&(0x7f00000006c0)=""/151, 0x97}], 0x5) timer_create(0x3, &(0x7f0000000000)={0x0, 0x19, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) r3 = getpgrp(0x0) timer_delete(r2) clone3(&(0x7f0000000400)={0x94000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000140), {}, &(0x7f0000000180)=""/41, 0x29, &(0x7f0000000280)=""/217, &(0x7f00000003c0)=[0x0, r0, r1, r3, r0], 0x5}, 0x58) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r4, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0xffff, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) sendfile(r5, r4, 0x0, 0x80000001) [ 349.094159] tmpfs: Bad value for 'mpol' 16:48:04 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0xa264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xe57d) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x40000, 0x4, 0x17}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000200)={0x0, @aes256, 0x0, @desc1}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3f, 0x44, 0x6, 0x0, 0x5924, 0x10004, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_config_ext={0x3, 0x6}, 0x20, 0x40, 0x5, 0x1, 0x4, 0x3, 0xfff, 0x0, 0x5, 0x0, 0x1}, r0, 0x5, r1, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000001340)=0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x20, 0x2, 0x8, 0x3f, 0x0, 0x875, 0xc0000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x804, 0x7, 0x5, 0x9, 0x8, 0x100, 0x3, 0x0, 0x10000, 0x0, 0xae}, 0xffffffffffffffff, 0x1, r1, 0x9) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r3, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000001c0)=')', 0x1}]) 16:48:05 executing program 5: syz_mount_image$tmpfs(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x36, 0x2d, 0x36, 0x3a, 0x4e]}}}}]}) 16:48:05 executing program 0: r0 = clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = getpgrp(0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x50, 0x0, 0x1, 0x0, 0x10, {{}, {@val={0xfffffffffffffe09}, @void}}, [@NL80211_ATTR_FRAME={0x34, 0x33, @reassoc_req={@with_ht={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, {}, @broadcast, @device_b}}, 0x0, 0x0, @broadcast, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}]}, 0x50}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000480)=""/106, 0x6a}, {&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000600)=""/34, 0x22}, {&(0x7f00000006c0)=""/151, 0x97}], 0x5) timer_create(0x3, &(0x7f0000000000)={0x0, 0x19, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) r3 = getpgrp(0x0) timer_delete(r2) clone3(&(0x7f0000000400)={0x94000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000140), {}, &(0x7f0000000180)=""/41, 0x29, &(0x7f0000000280)=""/217, &(0x7f00000003c0)=[0x0, r0, r1, r3, r0], 0x5}, 0x58) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r4, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0xffff, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) sendfile(r5, r4, 0x0, 0x80000001) 16:48:05 executing program 6: sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x6b40, &(0x7f0000000640)={0x0, 0x0, 0x10, 0x0, 0x41}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000006c0)=0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000880), 0x301240, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x0, 0x0, 0x34d) syz_io_uring_setup(0x45d4, &(0x7f0000000b00)={0x0, 0xadfe, 0x8}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000b80), &(0x7f0000000bc0)) socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) 16:48:05 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000003380)=[{{&(0x7f00000036c0)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000004c80)=[{&(0x7f0000003700)='@f', 0x2}], 0x1, &(0x7f0000004dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @local}}}], 0x20}}, {{&(0x7f0000000000)={0x2, 0x0, @local}, 0xf, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3}]}}}], 0x28}}], 0x2, 0x0) 16:48:05 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x9) sendfile(r1, r0, 0x0, 0x80000001) 16:48:05 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f00000001c0), 0x2, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c0, 0x0, 0x0, r1}) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x220) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x80000001, 0x1) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000340)={'\x00', 0x80, 0x3f, 0x7fffffff, 0x0, 0x2, r1}) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0x80000000000000, 0x718c35f1}) ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000340)={'\x00', 0x80, 0x3f, 0x7fffffff, 0x0, 0x2}) syz_open_procfs(0x0, 0x0) 16:48:05 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x5320, &(0x7f0000000000)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x12}}, 0x0) poll(0x0, 0xfffffffffffffdc0, 0x7fffffff) close_range(r1, r1, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff66, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x20010, 0xffffffffffffffff, 0x7fea3000) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) close_range(r3, r3, 0x0) 16:48:05 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0xa264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xe57d) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x40000, 0x4, 0x17}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000200)={0x0, @aes256, 0x0, @desc1}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3f, 0x44, 0x6, 0x0, 0x5924, 0x10004, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_config_ext={0x3, 0x6}, 0x20, 0x40, 0x5, 0x1, 0x4, 0x3, 0xfff, 0x0, 0x5, 0x0, 0x1}, r0, 0x5, r1, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000001340)=0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x20, 0x2, 0x8, 0x3f, 0x0, 0x875, 0xc0000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x804, 0x7, 0x5, 0x9, 0x8, 0x100, 0x3, 0x0, 0x10000, 0x0, 0xae}, 0xffffffffffffffff, 0x1, r1, 0x9) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r3, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000001c0)=')', 0x1}]) [ 349.727664] tmpfs: Bad value for 'mpol' 16:48:05 executing program 5: syz_mount_image$tmpfs(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x36, 0x2d, 0x36, 0x3a, 0x4e]}}}}]}) 16:48:05 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f00000001c0), 0x2, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c0, 0x0, 0x0, r1}) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x220) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x80000001, 0x1) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000340)={'\x00', 0x80, 0x3f, 0x7fffffff, 0x0, 0x2, r1}) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0x80000000000000, 0x718c35f1}) ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000340)={'\x00', 0x80, 0x3f, 0x7fffffff, 0x0, 0x2}) syz_open_procfs(0x0, 0x0) [ 349.851250] tmpfs: Bad value for 'mpol' [ 349.874521] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 349.875554] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 349.876248] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 349.876944] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 08 00 [ 349.877694] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 2 [ 349.883185] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 349.883804] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.884625] Buffer I/O error on dev sr0, logical block 0, async page read [ 349.885653] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 349.886202] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.887579] Buffer I/O error on dev sr0, logical block 1, async page read [ 349.888625] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 349.889202] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.890039] Buffer I/O error on dev sr0, logical block 2, async page read [ 349.891002] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 349.891540] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.892346] Buffer I/O error on dev sr0, logical block 3, async page read [ 349.893490] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 349.894074] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.894922] Buffer I/O error on dev sr0, logical block 4, async page read [ 349.896080] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 349.896641] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.897471] Buffer I/O error on dev sr0, logical block 5, async page read [ 349.899519] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 349.900109] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.900972] Buffer I/O error on dev sr0, logical block 6, async page read [ 349.901992] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 349.902553] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.903416] Buffer I/O error on dev sr0, logical block 7, async page read 16:48:05 executing program 0: r0 = clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = getpgrp(0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x50, 0x0, 0x1, 0x0, 0x10, {{}, {@val={0xfffffffffffffe09}, @void}}, [@NL80211_ATTR_FRAME={0x34, 0x33, @reassoc_req={@with_ht={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, {}, @broadcast, @device_b}}, 0x0, 0x0, @broadcast, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}]}, 0x50}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000480)=""/106, 0x6a}, {&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000600)=""/34, 0x22}, {&(0x7f00000006c0)=""/151, 0x97}], 0x5) timer_create(0x3, &(0x7f0000000000)={0x0, 0x19, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) r3 = getpgrp(0x0) timer_delete(r2) clone3(&(0x7f0000000400)={0x94000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000140), {}, &(0x7f0000000180)=""/41, 0x29, &(0x7f0000000280)=""/217, &(0x7f00000003c0)=[0x0, r0, r1, r3, r0], 0x5}, 0x58) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r4, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0xffff, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) sendfile(r5, r4, 0x0, 0x80000001) [ 349.971273] blktrace: Concurrent blktraces are not allowed on sg0 16:48:05 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0xa264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xe57d) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x40000, 0x4, 0x17}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000200)={0x0, @aes256, 0x0, @desc1}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3f, 0x44, 0x6, 0x0, 0x5924, 0x10004, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_config_ext={0x3, 0x6}, 0x20, 0x40, 0x5, 0x1, 0x4, 0x3, 0xfff, 0x0, 0x5, 0x0, 0x1}, r0, 0x5, r1, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000001340)=0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x20, 0x2, 0x8, 0x3f, 0x0, 0x875, 0xc0000, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000240), 0x3}, 0x804, 0x7, 0x5, 0x9, 0x8, 0x100, 0x3, 0x0, 0x10000, 0x0, 0xae}, 0xffffffffffffffff, 0x1, r1, 0x9) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) io_submit(r3, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000001c0)=')', 0x1}]) 16:48:05 executing program 6: sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x6b40, &(0x7f0000000640)={0x0, 0x0, 0x10, 0x0, 0x41}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000006c0)=0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000880), 0x301240, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x0, 0x0, 0x34d) syz_io_uring_setup(0x45d4, &(0x7f0000000b00)={0x0, 0xadfe, 0x8}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000b80), &(0x7f0000000bc0)) socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) 16:48:05 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f00000001c0), 0x2, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c0, 0x0, 0x0, r1}) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x220) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x80000001, 0x1) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000340)={'\x00', 0x80, 0x3f, 0x7fffffff, 0x0, 0x2, r1}) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0x80000000000000, 0x718c35f1}) ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000340)={'\x00', 0x80, 0x3f, 0x7fffffff, 0x0, 0x2}) syz_open_procfs(0x0, 0x0) 16:48:05 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f00000001c0), 0x2, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c0, 0x0, 0x0, r1}) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x220) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x80000001, 0x1) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000340)={'\x00', 0x80, 0x3f, 0x7fffffff, 0x0, 0x2, r1}) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0x80000000000000, 0x718c35f1}) ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000340)={'\x00', 0x80, 0x3f, 0x7fffffff, 0x0, 0x2}) syz_open_procfs(0x0, 0x0) 16:48:05 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f00000001c0), 0x2, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c0, 0x0, 0x0, r1}) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x220) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x80000001, 0x1) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000340)={'\x00', 0x80, 0x3f, 0x7fffffff, 0x0, 0x2, r1}) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0x80000000000000, 0x718c35f1}) ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000340)={'\x00', 0x80, 0x3f, 0x7fffffff, 0x0, 0x2}) syz_open_procfs(0x0, 0x0) 16:48:05 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x9) sendfile(r1, r0, 0x0, 0x80000001) [ 350.249377] blktrace: Concurrent blktraces are not allowed on sg0 [ 350.250137] blktrace: Concurrent blktraces are not allowed on sg0 16:48:06 executing program 6: sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x6b40, &(0x7f0000000640)={0x0, 0x0, 0x10, 0x0, 0x41}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000006c0)=0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000880), 0x301240, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x0, 0x0, 0x34d) syz_io_uring_setup(0x45d4, &(0x7f0000000b00)={0x0, 0xadfe, 0x8}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000b80), &(0x7f0000000bc0)) socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) 16:48:06 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f00000001c0), 0x2, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c0, 0x0, 0x0, r1}) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x220) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x80000001, 0x1) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000340)={'\x00', 0x80, 0x3f, 0x7fffffff, 0x0, 0x2, r1}) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0x80000000000000, 0x718c35f1}) ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000340)={'\x00', 0x80, 0x3f, 0x7fffffff, 0x0, 0x2}) syz_open_procfs(0x0, 0x0) 16:48:06 executing program 1: set_mempolicy(0x6001, 0x0, 0x0) 16:48:06 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f00000001c0), 0x2, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c0, 0x0, 0x0, r1}) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x220) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x80000001, 0x1) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000340)={'\x00', 0x80, 0x3f, 0x7fffffff, 0x0, 0x2, r1}) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0x80000000000000, 0x718c35f1}) ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000340)={'\x00', 0x80, 0x3f, 0x7fffffff, 0x0, 0x2}) syz_open_procfs(0x0, 0x0) 16:48:06 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x5320, &(0x7f0000000000)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x12}}, 0x0) poll(0x0, 0xfffffffffffffdc0, 0x7fffffff) close_range(r1, r1, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff66, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x20010, 0xffffffffffffffff, 0x7fea3000) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) close_range(r3, r3, 0x0) 16:48:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x9) sendfile(r1, r0, 0x0, 0x80000001) 16:48:06 executing program 4: syz_io_uring_setup(0x284d, &(0x7f0000000140)={0x0, 0x0, 0x2000}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 16:48:06 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x9) sendfile(r1, r0, 0x0, 0x80000001) 16:48:06 executing program 4: syz_io_uring_setup(0x284d, &(0x7f0000000140)={0x0, 0x0, 0x2000}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 16:48:06 executing program 1: set_mempolicy(0x6001, 0x0, 0x0) 16:48:07 executing program 4: syz_io_uring_setup(0x284d, &(0x7f0000000140)={0x0, 0x0, 0x2000}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 16:48:07 executing program 1: set_mempolicy(0x6001, 0x0, 0x0) 16:48:07 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x7f}, 0x1c) connect$inet6(r0, &(0x7f00000018c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) 16:48:07 executing program 4: syz_io_uring_setup(0x284d, &(0x7f0000000140)={0x0, 0x0, 0x2000}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) 16:48:07 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="1bf7ff000000000200e61f"], 0x1c}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x2, 0x0) readv(r0, &(0x7f0000001440)=[{&(0x7f0000000240)=""/222, 0xde}], 0x1) 16:48:08 executing program 1: set_mempolicy(0x6001, 0x0, 0x0) 16:48:08 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x7f}, 0x1c) connect$inet6(r0, &(0x7f00000018c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) 16:48:08 executing program 5: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f00000001c0), 0x2, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c0, 0x0, 0x0, r1}) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x220) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000180)=0x80000001, 0x1) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000340)={'\x00', 0x80, 0x3f, 0x7fffffff, 0x0, 0x2, r1}) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2, 0x80000000000000, 0x718c35f1}) ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000340)={'\x00', 0x80, 0x3f, 0x7fffffff, 0x0, 0x2}) syz_open_procfs(0x0, 0x0) 16:48:08 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="1bf7ff000000000200e61f"], 0x1c}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x2, 0x0) readv(r0, &(0x7f0000001440)=[{&(0x7f0000000240)=""/222, 0xde}], 0x1) 16:48:08 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f00000008c0)={{}, {}, [{}]}, 0x2c, 0x0) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)=""/96, 0x60) 16:48:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x7fefffa, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x9) sendfile(r1, r0, 0x0, 0x80000001) 16:48:08 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="1bf7ff000000000200e61f"], 0x1c}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x2, 0x0) readv(r0, &(0x7f0000001440)=[{&(0x7f0000000240)=""/222, 0xde}], 0x1) 16:48:08 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x7f}, 0x1c) connect$inet6(r0, &(0x7f00000018c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) 16:48:09 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f00000008c0)={{}, {}, [{}]}, 0x2c, 0x0) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)=""/96, 0x60) 16:48:09 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="1bf7ff000000000200e61f"], 0x1c}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x2, 0x0) readv(r0, &(0x7f0000001440)=[{&(0x7f0000000240)=""/222, 0xde}], 0x1) 16:48:09 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="1bf7ff000000000200e61f"], 0x1c}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x2, 0x0) readv(r0, &(0x7f0000001440)=[{&(0x7f0000000240)=""/222, 0xde}], 0x1) 16:48:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)={0x20, 0x18, 0x0, 0x101, 0x0, 0x0, {0xa, 0xa2, 0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x20}}, 0x0) 16:48:09 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="1bf7ff000000000200e61f"], 0x1c}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x2, 0x0) readv(r0, &(0x7f0000001440)=[{&(0x7f0000000240)=""/222, 0xde}], 0x1) [ 353.316447] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 16:48:09 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f00000008c0)={{}, {}, [{}]}, 0x2c, 0x0) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)=""/96, 0x60) 16:48:09 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x7f}, 0x1c) connect$inet6(r0, &(0x7f00000018c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) 16:48:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)={0x20, 0x18, 0x0, 0x101, 0x0, 0x0, {0xa, 0xa2, 0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x20}}, 0x0) 16:48:09 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="1bf7ff000000000200e61f"], 0x1c}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x2, 0x0) readv(r0, &(0x7f0000001440)=[{&(0x7f0000000240)=""/222, 0xde}], 0x1) 16:48:09 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="1bf7ff000000000200e61f"], 0x1c}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x2, 0x0) readv(r0, &(0x7f0000001440)=[{&(0x7f0000000240)=""/222, 0xde}], 0x1) [ 353.480821] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. VM DIAGNOSIS: 16:48:00 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff822b1dbc RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff888018547640 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000002710 R13=0000000000000020 R14=fffffbfff0ec7fab R15=dffffc0000000000 RIP=ffffffff822b1e11 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f511d0cf700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055820a5521c8 CR3=0000000041e40000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM01=0000000000000000 0000000000000000 2525252525252525 2525252525252525 YMM02=0000000000000000 0000000000000000 00007f511fc407e0 00007f511fc407c0 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=1ffff110063aaf2f RCX=ffffffff812a3fcf RDX=0000000000000001 RSI=0000000000000008 RDI=ffffffff85b01f10 RBP=0000000000000001 RSP=ffff888031d57968 R8 =0000000000000000 R9 =ffffffff85b01f17 R10=fffffbfff0b603e2 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=ffff888041fc8018 R15=0000000000000000 RIP=ffffffff812a3fd4 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb9bc16c6f4 CR3=000000000e142000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007fb9bc17b470 00007fb9bc17af20 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 756e20796d6d7564 20736e6f6974706f YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 73253d656d616e6c 6165722073253d73 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000