Warning: Permanently added '[localhost]:65126' (ECDSA) to the list of known hosts.
2022/09/23 11:54:48 fuzzer started
2022/09/23 11:54:48 dialing manager at localhost:38881
syzkaller login: [ 36.102811] cgroup: Unknown subsys name 'net'
[ 36.190469] cgroup: Unknown subsys name 'rlimit'
2022/09/23 11:55:02 syscalls: 2215
2022/09/23 11:55:02 code coverage: enabled
2022/09/23 11:55:02 comparison tracing: enabled
2022/09/23 11:55:02 extra coverage: enabled
2022/09/23 11:55:02 setuid sandbox: enabled
2022/09/23 11:55:02 namespace sandbox: enabled
2022/09/23 11:55:02 Android sandbox: enabled
2022/09/23 11:55:02 fault injection: enabled
2022/09/23 11:55:02 leak checking: enabled
2022/09/23 11:55:02 net packet injection: enabled
2022/09/23 11:55:02 net device setup: enabled
2022/09/23 11:55:02 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/09/23 11:55:02 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/09/23 11:55:02 USB emulation: enabled
2022/09/23 11:55:02 hci packet injection: enabled
2022/09/23 11:55:02 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220923 )
2022/09/23 11:55:02 802.15.4 emulation: enabled
2022/09/23 11:55:02 fetching corpus: 0, signal 0/2000 (executing program)
2022/09/23 11:55:02 fetching corpus: 36, signal 17380/20642 (executing program)
2022/09/23 11:55:02 fetching corpus: 69, signal 30974/35137 (executing program)
2022/09/23 11:55:02 fetching corpus: 118, signal 39736/44564 (executing program)
2022/09/23 11:55:02 fetching corpus: 166, signal 49386/54534 (executing program)
2022/09/23 11:55:02 fetching corpus: 215, signal 54077/59770 (executing program)
2022/09/23 11:55:03 fetching corpus: 261, signal 58763/64800 (executing program)
2022/09/23 11:55:03 fetching corpus: 311, signal 63124/69361 (executing program)
2022/09/23 11:55:03 fetching corpus: 360, signal 67399/73684 (executing program)
2022/09/23 11:55:03 fetching corpus: 409, signal 71439/77642 (executing program)
2022/09/23 11:55:03 fetching corpus: 458, signal 76093/81920 (executing program)
2022/09/23 11:55:03 fetching corpus: 505, signal 80075/85434 (executing program)
2022/09/23 11:55:04 fetching corpus: 555, signal 84935/89500 (executing program)
2022/09/23 11:55:04 fetching corpus: 601, signal 87480/91709 (executing program)
2022/09/23 11:55:04 fetching corpus: 649, signal 89975/93966 (executing program)
2022/09/23 11:55:04 fetching corpus: 698, signal 92794/96145 (executing program)
2022/09/23 11:55:04 fetching corpus: 746, signal 95177/97917 (executing program)
2022/09/23 11:55:04 fetching corpus: 794, signal 97349/99553 (executing program)
2022/09/23 11:55:05 fetching corpus: 842, signal 99308/100900 (executing program)
2022/09/23 11:55:05 fetching corpus: 890, signal 101165/102231 (executing program)
2022/09/23 11:55:05 fetching corpus: 894, signal 101400/102409 (executing program)
2022/09/23 11:55:05 fetching corpus: 894, signal 101400/102456 (executing program)
2022/09/23 11:55:05 fetching corpus: 894, signal 101400/102515 (executing program)
2022/09/23 11:55:05 fetching corpus: 894, signal 101401/102562 (executing program)
2022/09/23 11:55:05 fetching corpus: 895, signal 101403/102623 (executing program)
2022/09/23 11:55:05 fetching corpus: 895, signal 101403/102668 (executing program)
2022/09/23 11:55:05 fetching corpus: 895, signal 101403/102724 (executing program)
2022/09/23 11:55:05 fetching corpus: 895, signal 101403/102778 (executing program)
2022/09/23 11:55:05 fetching corpus: 895, signal 101403/102831 (executing program)
2022/09/23 11:55:05 fetching corpus: 895, signal 101404/102891 (executing program)
2022/09/23 11:55:05 fetching corpus: 895, signal 101404/102946 (executing program)
2022/09/23 11:55:05 fetching corpus: 895, signal 101404/102985 (executing program)
2022/09/23 11:55:05 fetching corpus: 895, signal 101404/103027 (executing program)
2022/09/23 11:55:05 fetching corpus: 895, signal 101404/103083 (executing program)
2022/09/23 11:55:05 fetching corpus: 895, signal 101404/103129 (executing program)
2022/09/23 11:55:05 fetching corpus: 895, signal 101404/103178 (executing program)
2022/09/23 11:55:05 fetching corpus: 895, signal 101404/103214 (executing program)
2022/09/23 11:55:05 fetching corpus: 895, signal 101416/103286 (executing program)
2022/09/23 11:55:05 fetching corpus: 896, signal 101419/103349 (executing program)
2022/09/23 11:55:05 fetching corpus: 896, signal 101419/103401 (executing program)
2022/09/23 11:55:05 fetching corpus: 896, signal 101422/103452 (executing program)
2022/09/23 11:55:05 fetching corpus: 896, signal 101422/103499 (executing program)
2022/09/23 11:55:05 fetching corpus: 896, signal 101422/103540 (executing program)
2022/09/23 11:55:05 fetching corpus: 896, signal 101422/103603 (executing program)
2022/09/23 11:55:05 fetching corpus: 896, signal 101422/103652 (executing program)
2022/09/23 11:55:05 fetching corpus: 896, signal 101422/103705 (executing program)
2022/09/23 11:55:05 fetching corpus: 898, signal 101447/103766 (executing program)
2022/09/23 11:55:05 fetching corpus: 899, signal 101459/103834 (executing program)
2022/09/23 11:55:05 fetching corpus: 899, signal 101459/103878 (executing program)
2022/09/23 11:55:05 fetching corpus: 899, signal 101459/103933 (executing program)
2022/09/23 11:55:05 fetching corpus: 899, signal 101459/103956 (executing program)
2022/09/23 11:55:05 fetching corpus: 899, signal 101459/103956 (executing program)
2022/09/23 11:55:08 starting 8 fuzzer processes
11:55:08 executing program 0:
syz_io_uring_setup(0x5f05, &(0x7f0000000340), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), 0x0)
11:55:08 executing program 1:
syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @source_quench={0xc, 0x5, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @broadcast, {[@ssrr={0x89, 0xf, 0x0, [@broadcast, @broadcast, @private]}, @rr={0x7, 0x3}, @lsrr={0x83, 0xb, 0x0, [@multicast1, @rand_addr]}, @lsrr={0x83, 0x7, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0xf, 0x0, [@broadcast, @dev, @loopback]}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@private}]}]}}}}}}}, 0x0)
11:55:08 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7f, 0x2, 0x9, 0x3, 0x0, 0x8001, 0x24000, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40e8, 0x6, @perf_config_ext={0x7ff, 0x200}, 0x41900, 0x1, 0x1e, 0x0, 0x4, 0x4, 0xfff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0xa)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x4, 0x1f, 0x4, 0x86, 0x0, 0x1ff, 0x3a04, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x7ff, 0x27}, 0x3200, 0xffff, 0x5, 0x5, 0x3, 0x800, 0x401, 0x0, 0x5, 0x0, 0x8}, 0xffffffffffffffff, 0xb, r0, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendfile(r1, r0, 0x0, 0x80000001)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000004c0)={0x5, 0x80, 0x4, 0x9, 0x0, 0x7, 0x0, 0xc0000000000, 0x40, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x8c03, 0xff, 0x5, 0x0, 0x8000, 0xbd5, 0xab2})
11:55:08 executing program 4:
socketpair(0x0, 0x0, 0x0, &(0x7f0000000280))
11:55:08 executing program 3:
r0 = timerfd_create(0x0, 0x0)
r1 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000440))
11:55:08 executing program 5:
shmctl$SHM_INFO(0x0, 0xe, 0x0)
[ 55.454904] audit: type=1400 audit(1663934108.409:6): avc: denied { execmem } for pid=283 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
11:55:08 executing program 6:
msgsnd(0x0, &(0x7f0000000000)={0x2, "1072e6d3"}, 0xc, 0x0)
msgctl$IPC_RMID(0xffffffffffffffff, 0x0)
msgrcv(0xffffffffffffffff, &(0x7f0000000040)={0x0, ""/110}, 0x76, 0x0, 0x2800)
r0 = msgget(0x1, 0x12)
msgsnd(r0, &(0x7f00000000c0)={0x0, "d1d8be2ced509456b95bad2fa5bc84cbfc2183a9990843454cf327235803c33690a1e300fc819c14e38016ece19bccc18f49637ab108a1abed80d774db8fc091b3eef4e2eebb2ecaa647352f19203e9ebbb37f26c51c117bb9fce2c698306f49297488d8fc4ecb06ddac7d7bf854d41def8e5ee2e7cab72403b967747800f0a757882619b9ec26102eac9fecbc74ed9fd249e7d2050b94bc09c83384c35ca1f6c32847428d59b78b3640d921e3f094ff6ceacada4fb24ddd81d22249b0f6bb322c4526d58d311db5986d4c174edbc4ff3669b3891a7b4f5c39"}, 0xe1, 0x800)
r1 = msgget$private(0x0, 0x6b)
msgsnd(r1, &(0x7f00000001c0)={0x1, "925536216668ff5e13cccd8274a028bd599fe1e1c1c53f5453d1666cc784ab9700fecb67699ad7e90518f9cc314e06007dbeaf1be6226aa364f792a1c3f148aed1cf1f553bf72cc53aeaa37b5a9cccb77fa07ede0e65fcb9f8fb441aa5e479e9980b5397ce543289d2edddd110b683e13ea729c7bde85a0682851868b9009f3479fefc6872866048d6ca0eb86ccdaf30f2abdf3c29485620c75fe5efa99063cb631b568a5d4d4fc344473a805e2a5bf5bd5ecb9c2d5c8e00d9311006fcf702b45e4d6ce1f2f5bee3a233d920b410b1fc4d43486e2da1eaa763c7ad3ea66cce97bf27ace60e5ce18e645ca7f6a4518a"}, 0xf7, 0x800)
msgsnd(r1, &(0x7f00000002c0)={0x0, "14d82e6afccffdd7a713aa3caddb818bfdf9a3fed830d1c5c547393ba78784120e918dc680a69c511b8008d60a46504d14e91e6caaee6f2b52dd3ca79fdf1d89173f2b871546221de4f35d3f3f1c2eaf0963a529a2e3fc2e765e137b2e542b758be36df01334c7c0aae89eb7c8e5a106fd92321397dc1a4759ad2bf0a007a15766e13a28c6dba06971f36321e52a494902ae2a079e145f0638bcb15ace4920bca313e0660d07cf8f8b50e17f238d6443e2f229376805164a3289dd77aaca889ee4ceb9ad"}, 0xcc, 0x800)
r2 = msgget(0x3, 0x44)
msgsnd(r2, &(0x7f00000004c0)={0x3, "43cd688504e5d672f71ad2ce804295412541225f2db56a16d83c4391be75730489888694fb2408074ddcee45c006bc37a01d1f66ae88614d6add8cf8806b7efe118b91943b"}, 0x4d, 0x0)
msgrcv(r0, &(0x7f0000000640)={0x0, ""/97}, 0x69, 0x3, 0x800)
11:55:08 executing program 7:
mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0)
finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)
[ 56.756507] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 56.758474] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 56.760011] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 56.764516] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 56.767936] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 56.769193] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 56.775482] Bluetooth: hci0: HCI_REQ-0x0c1a
[ 56.805029] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 56.808172] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 56.810628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 56.815112] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 56.817125] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 56.820747] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 56.823277] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 56.824605] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 56.825916] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 56.832052] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 56.833070] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 56.834332] Bluetooth: hci2: HCI_REQ-0x0c1a
[ 56.848105] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 56.849650] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 56.854079] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 56.855343] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 56.856469] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 56.861920] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 56.866303] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 56.871252] Bluetooth: hci1: HCI_REQ-0x0c1a
[ 56.875256] Bluetooth: hci3: HCI_REQ-0x0c1a
[ 56.910054] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 56.913103] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 56.915107] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 56.917875] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 56.920988] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 56.923137] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 56.925635] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 56.926989] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 56.929465] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 56.935825] Bluetooth: hci7: HCI_REQ-0x0c1a
[ 56.947637] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 56.951296] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 56.954141] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 56.972480] Bluetooth: hci4: HCI_REQ-0x0c1a
[ 58.834746] Bluetooth: hci0: command 0x0409 tx timeout
[ 58.898427] Bluetooth: hci6: Opcode 0x c03 failed: -110
[ 58.898439] Bluetooth: hci3: command 0x0409 tx timeout
[ 58.899540] Bluetooth: hci2: command 0x0409 tx timeout
[ 58.899636] Bluetooth: hci1: command 0x0409 tx timeout
[ 58.900235] Bluetooth: hci5: Opcode 0x c03 failed: -110
[ 58.963522] Bluetooth: hci7: command 0x0409 tx timeout
[ 59.026484] Bluetooth: hci4: command 0x0409 tx timeout
[ 60.882442] Bluetooth: hci0: command 0x041b tx timeout
[ 60.946439] Bluetooth: hci1: command 0x041b tx timeout
[ 60.947559] Bluetooth: hci2: command 0x041b tx timeout
[ 60.947964] Bluetooth: hci3: command 0x041b tx timeout
[ 61.011441] Bluetooth: hci7: command 0x041b tx timeout
[ 61.074488] Bluetooth: hci4: command 0x041b tx timeout
[ 61.980593] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 61.981721] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 61.982985] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 61.992908] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 61.994279] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 61.995073] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 62.005411] Bluetooth: hci6: HCI_REQ-0x0c1a
[ 62.930548] Bluetooth: hci0: command 0x040f tx timeout
[ 62.994546] Bluetooth: hci3: command 0x040f tx timeout
[ 62.994703] Bluetooth: hci2: command 0x040f tx timeout
[ 62.995302] Bluetooth: hci1: command 0x040f tx timeout
[ 63.058432] Bluetooth: hci7: command 0x040f tx timeout
[ 63.122454] Bluetooth: hci4: command 0x040f tx timeout
[ 63.826436] Bluetooth: hci5: Opcode 0x c03 failed: -110
[ 64.018461] Bluetooth: hci6: command 0x0409 tx timeout
[ 64.978520] Bluetooth: hci0: command 0x0419 tx timeout
[ 65.042557] Bluetooth: hci2: command 0x0419 tx timeout
[ 65.043242] Bluetooth: hci1: command 0x0419 tx timeout
[ 65.043916] Bluetooth: hci3: command 0x0419 tx timeout
[ 65.106479] Bluetooth: hci7: command 0x0419 tx timeout
[ 65.170510] Bluetooth: hci4: command 0x0419 tx timeout
[ 66.066436] Bluetooth: hci6: command 0x041b tx timeout
[ 68.115574] Bluetooth: hci6: command 0x040f tx timeout
[ 68.434436] Bluetooth: hci5: Opcode 0x c03 failed: -110
[ 70.162504] Bluetooth: hci6: command 0x0419 tx timeout
[ 73.042461] Bluetooth: hci5: Opcode 0x c03 failed: -110
[ 77.523412] Bluetooth: hci5: Opcode 0x c03 failed: -110
[ 79.931782] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 79.932917] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 79.935493] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 79.937530] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 79.946165] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 79.971937] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 79.979744] Bluetooth: hci5: HCI_REQ-0x0c1a
[ 82.002486] Bluetooth: hci5: command 0x0409 tx timeout
[ 84.051448] Bluetooth: hci5: command 0x041b tx timeout
[ 86.099402] Bluetooth: hci5: command 0x040f tx timeout
[ 88.146500] Bluetooth: hci5: command 0x0419 tx timeout
11:55:59 executing program 5:
shmctl$SHM_INFO(0x0, 0xe, 0x0)
11:55:59 executing program 5:
shmctl$SHM_INFO(0x0, 0xe, 0x0)
11:55:59 executing program 5:
shmctl$SHM_INFO(0x0, 0xe, 0x0)
11:56:00 executing program 5:
r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00')
r2 = open(&(0x7f0000000180)='./file0\x00', 0x33002, 0x18)
openat(r2, &(0x7f00000001c0)='./file0\x00', 0x100, 0x1ea)
pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x180000000000000)
syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x12, 0xc8, &(0x7f0000000000)="b924038994273a4d28c9d89fb4cf756d162c76f458b3fbbb492916cc985eecec800860385ee70c9589e314c81376e0b5148af7a71ae4185feb82fe196cde111dffd376f401db602a667d26503c0aae67f6e7bd36b507baf6612cb006edb9b4eac5606e97b2d97dba1850ffdd2076163552d50eeb1dfd596bb2a7d1d4afdfa72db756c421ad9ddf1dc3ae3f0fcdcd783295eb9a6b50238b8a94890c1146200f010cb23e1a1e98de074d5a5299dc3aa539a2eb4fc248da2d0483dfcda36f5a0be62496425d79993bac"})
r3 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil)
shmat(r3, &(0x7f0000ff0000/0x3000)=nil, 0x4000)
mlock2(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x1)
r4 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil)
shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff8000/0x3000)=nil)
ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x7ff, 0x2, 0x10001, 0x3, 0x10000, 0x80})
shmat(r4, &(0x7f0000ffb000/0x4000)=nil, 0x0)
r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(r5, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
11:56:00 executing program 5:
r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00')
r2 = open(&(0x7f0000000180)='./file0\x00', 0x33002, 0x18)
openat(r2, &(0x7f00000001c0)='./file0\x00', 0x100, 0x1ea)
pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x180000000000000)
syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x12, 0xc8, &(0x7f0000000000)="b924038994273a4d28c9d89fb4cf756d162c76f458b3fbbb492916cc985eecec800860385ee70c9589e314c81376e0b5148af7a71ae4185feb82fe196cde111dffd376f401db602a667d26503c0aae67f6e7bd36b507baf6612cb006edb9b4eac5606e97b2d97dba1850ffdd2076163552d50eeb1dfd596bb2a7d1d4afdfa72db756c421ad9ddf1dc3ae3f0fcdcd783295eb9a6b50238b8a94890c1146200f010cb23e1a1e98de074d5a5299dc3aa539a2eb4fc248da2d0483dfcda36f5a0be62496425d79993bac"})
r3 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil)
shmat(r3, &(0x7f0000ff0000/0x3000)=nil, 0x4000)
mlock2(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x1)
r4 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil)
shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff8000/0x3000)=nil)
ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x7ff, 0x2, 0x10001, 0x3, 0x10000, 0x80})
shmat(r4, &(0x7f0000ffb000/0x4000)=nil, 0x0)
r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(r5, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
11:56:00 executing program 5:
r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00')
r2 = open(&(0x7f0000000180)='./file0\x00', 0x33002, 0x18)
openat(r2, &(0x7f00000001c0)='./file0\x00', 0x100, 0x1ea)
pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x180000000000000)
syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x12, 0xc8, &(0x7f0000000000)="b924038994273a4d28c9d89fb4cf756d162c76f458b3fbbb492916cc985eecec800860385ee70c9589e314c81376e0b5148af7a71ae4185feb82fe196cde111dffd376f401db602a667d26503c0aae67f6e7bd36b507baf6612cb006edb9b4eac5606e97b2d97dba1850ffdd2076163552d50eeb1dfd596bb2a7d1d4afdfa72db756c421ad9ddf1dc3ae3f0fcdcd783295eb9a6b50238b8a94890c1146200f010cb23e1a1e98de074d5a5299dc3aa539a2eb4fc248da2d0483dfcda36f5a0be62496425d79993bac"})
r3 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil)
shmat(r3, &(0x7f0000ff0000/0x3000)=nil, 0x4000)
mlock2(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x1)
r4 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil)
shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff8000/0x3000)=nil)
ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x7ff, 0x2, 0x10001, 0x3, 0x10000, 0x80})
shmat(r4, &(0x7f0000ffb000/0x4000)=nil, 0x0)
r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(r5, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
11:56:00 executing program 5:
r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00')
r2 = open(&(0x7f0000000180)='./file0\x00', 0x33002, 0x18)
openat(r2, &(0x7f00000001c0)='./file0\x00', 0x100, 0x1ea)
pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x180000000000000)
syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x12, 0xc8, &(0x7f0000000000)="b924038994273a4d28c9d89fb4cf756d162c76f458b3fbbb492916cc985eecec800860385ee70c9589e314c81376e0b5148af7a71ae4185feb82fe196cde111dffd376f401db602a667d26503c0aae67f6e7bd36b507baf6612cb006edb9b4eac5606e97b2d97dba1850ffdd2076163552d50eeb1dfd596bb2a7d1d4afdfa72db756c421ad9ddf1dc3ae3f0fcdcd783295eb9a6b50238b8a94890c1146200f010cb23e1a1e98de074d5a5299dc3aa539a2eb4fc248da2d0483dfcda36f5a0be62496425d79993bac"})
r3 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil)
shmat(r3, &(0x7f0000ff0000/0x3000)=nil, 0x4000)
mlock2(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x1)
r4 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil)
shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff8000/0x3000)=nil)
ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x7ff, 0x2, 0x10001, 0x3, 0x10000, 0x80})
shmat(r4, &(0x7f0000ffb000/0x4000)=nil, 0x0)
r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(r5, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
11:56:00 executing program 5:
r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00')
r2 = open(&(0x7f0000000180)='./file0\x00', 0x33002, 0x18)
openat(r2, &(0x7f00000001c0)='./file0\x00', 0x100, 0x1ea)
pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x180000000000000)
syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x12, 0xc8, &(0x7f0000000000)="b924038994273a4d28c9d89fb4cf756d162c76f458b3fbbb492916cc985eecec800860385ee70c9589e314c81376e0b5148af7a71ae4185feb82fe196cde111dffd376f401db602a667d26503c0aae67f6e7bd36b507baf6612cb006edb9b4eac5606e97b2d97dba1850ffdd2076163552d50eeb1dfd596bb2a7d1d4afdfa72db756c421ad9ddf1dc3ae3f0fcdcd783295eb9a6b50238b8a94890c1146200f010cb23e1a1e98de074d5a5299dc3aa539a2eb4fc248da2d0483dfcda36f5a0be62496425d79993bac"})
r3 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil)
shmat(r3, &(0x7f0000ff0000/0x3000)=nil, 0x4000)
mlock2(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x1)
r4 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil)
shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff8000/0x3000)=nil)
ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x7ff, 0x2, 0x10001, 0x3, 0x10000, 0x80})
shmat(r4, &(0x7f0000ffb000/0x4000)=nil, 0x0)
r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(r5, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
[ 109.541399] audit: type=1400 audit(1663934162.495:7): avc: denied { open } for pid=3742 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 109.542964] audit: type=1400 audit(1663934162.495:8): avc: denied { kernel } for pid=3742 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 119.419021] ------------[ cut here ]------------
[ 119.419052]
[ 119.419057] ======================================================
[ 119.419062] WARNING: possible circular locking dependency detected
[ 119.419068] 6.0.0-rc6-next-20220923 #1 Not tainted
[ 119.419078] ------------------------------------------------------
[ 119.419083] syz-executor.7/3979 is trying to acquire lock:
[ 119.419093] ffffffff853faaf8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70
[ 119.419148]
[ 119.419148] but task is already holding lock:
[ 119.419152] ffff88800d9ca020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[ 119.419199]
[ 119.419199] which lock already depends on the new lock.
[ 119.419199]
[ 119.419204]
[ 119.419204] the existing dependency chain (in reverse order) is:
[ 119.419208]
[ 119.419208] -> #3 (&ctx->lock){....}-{2:2}:
[ 119.419229] _raw_spin_lock+0x2a/0x40
[ 119.419258] __perf_event_task_sched_out+0x53b/0x18d0
[ 119.419278] __schedule+0xedd/0x2470
[ 119.419299] schedule+0xda/0x1b0
[ 119.419318] exit_to_user_mode_prepare+0x114/0x1a0
[ 119.419336] syscall_exit_to_user_mode+0x19/0x40
[ 119.419355] do_syscall_64+0x48/0x90
[ 119.419380] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 119.419399]
[ 119.419399] -> #2 (&rq->__lock){-.-.}-{2:2}:
[ 119.419420] _raw_spin_lock_nested+0x30/0x40
[ 119.419448] raw_spin_rq_lock_nested+0x1e/0x30
[ 119.419468] task_fork_fair+0x63/0x4d0
[ 119.419493] sched_cgroup_fork+0x3d0/0x540
[ 119.419514] copy_process+0x4183/0x6e20
[ 119.419530] kernel_clone+0xe7/0x890
[ 119.419544] user_mode_thread+0xad/0xf0
[ 119.419560] rest_init+0x24/0x250
[ 119.419577] arch_call_rest_init+0xf/0x14
[ 119.419603] start_kernel+0x4c1/0x4e6
[ 119.419627] secondary_startup_64_no_verify+0xe0/0xeb
[ 119.419648]
[ 119.419648] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[ 119.419669] _raw_spin_lock_irqsave+0x39/0x60
[ 119.419697] try_to_wake_up+0xab/0x1930
[ 119.419717] up+0x75/0xb0
[ 119.419738] __up_console_sem+0x6e/0x80
[ 119.419761] console_unlock+0x46a/0x590
[ 119.419785] vt_ioctl+0x2822/0x2ca0
[ 119.419805] tty_ioctl+0x7c4/0x1700
[ 119.419823] __x64_sys_ioctl+0x19a/0x210
[ 119.419845] do_syscall_64+0x3b/0x90
[ 119.419870] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 119.419889]
[ 119.419889] -> #0 ((console_sem).lock){....}-{2:2}:
[ 119.419910] __lock_acquire+0x2a02/0x5e70
[ 119.419936] lock_acquire+0x1a2/0x530
[ 119.419960] _raw_spin_lock_irqsave+0x39/0x60
[ 119.419988] down_trylock+0xe/0x70
[ 119.420011] __down_trylock_console_sem+0x3b/0xd0
[ 119.420036] vprintk_emit+0x16b/0x560
[ 119.420060] vprintk+0x84/0xa0
[ 119.420084] _printk+0xba/0xf1
[ 119.420101] report_bug.cold+0x72/0xab
[ 119.420125] handle_bug+0x3c/0x70
[ 119.420149] exc_invalid_op+0x14/0x50
[ 119.420175] asm_exc_invalid_op+0x16/0x20
[ 119.420193] group_sched_out.part.0+0x2c7/0x460
[ 119.420209] ctx_sched_out+0x8f1/0xc10
[ 119.420225] __perf_event_task_sched_out+0x6d0/0x18d0
[ 119.420244] __schedule+0xedd/0x2470
[ 119.420265] schedule+0xda/0x1b0
[ 119.420284] exit_to_user_mode_prepare+0x114/0x1a0
[ 119.420301] syscall_exit_to_user_mode+0x19/0x40
[ 119.420320] do_syscall_64+0x48/0x90
[ 119.420348] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 119.420369]
[ 119.420369] other info that might help us debug this:
[ 119.420369]
[ 119.420373] Chain exists of:
[ 119.420373] (console_sem).lock --> &rq->__lock --> &ctx->lock
[ 119.420373]
[ 119.420396] Possible unsafe locking scenario:
[ 119.420396]
[ 119.420399] CPU0 CPU1
[ 119.420403] ---- ----
[ 119.420406] lock(&ctx->lock);
[ 119.420414] lock(&rq->__lock);
[ 119.420424] lock(&ctx->lock);
[ 119.420434] lock((console_sem).lock);
[ 119.420443]
[ 119.420443] *** DEADLOCK ***
[ 119.420443]
[ 119.420445] 2 locks held by syz-executor.7/3979:
[ 119.420456] #0: ffff88806cf37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[ 119.420501] #1: ffff88800d9ca020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[ 119.420544]
[ 119.420544] stack backtrace:
[ 119.420548] CPU: 1 PID: 3979 Comm: syz-executor.7 Not tainted 6.0.0-rc6-next-20220923 #1
[ 119.420567] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 119.420579] Call Trace:
[ 119.420584]
[ 119.420590] dump_stack_lvl+0x8b/0xb3
[ 119.420618] check_noncircular+0x263/0x2e0
[ 119.420643] ? format_decode+0x26c/0xb50
[ 119.420668] ? print_circular_bug+0x450/0x450
[ 119.420694] ? enable_ptr_key_workfn+0x20/0x20
[ 119.420719] ? format_decode+0x26c/0xb50
[ 119.420745] ? alloc_chain_hlocks+0x1ec/0x5a0
[ 119.420773] __lock_acquire+0x2a02/0x5e70
[ 119.420806] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 119.420841] lock_acquire+0x1a2/0x530
[ 119.420866] ? down_trylock+0xe/0x70
[ 119.420892] ? lock_release+0x750/0x750
[ 119.420924] ? vprintk+0x84/0xa0
[ 119.420951] _raw_spin_lock_irqsave+0x39/0x60
[ 119.420981] ? down_trylock+0xe/0x70
[ 119.421005] down_trylock+0xe/0x70
[ 119.421029] ? vprintk+0x84/0xa0
[ 119.421055] __down_trylock_console_sem+0x3b/0xd0
[ 119.421082] vprintk_emit+0x16b/0x560
[ 119.421111] vprintk+0x84/0xa0
[ 119.421137] _printk+0xba/0xf1
[ 119.421155] ? record_print_text.cold+0x16/0x16
[ 119.421179] ? report_bug.cold+0x66/0xab
[ 119.421207] ? group_sched_out.part.0+0x2c7/0x460
[ 119.421225] report_bug.cold+0x72/0xab
[ 119.421253] handle_bug+0x3c/0x70
[ 119.421280] exc_invalid_op+0x14/0x50
[ 119.421307] asm_exc_invalid_op+0x16/0x20
[ 119.421326] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[ 119.421349] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00
[ 119.421370] RSP: 0018:ffff88803f3f7c48 EFLAGS: 00010006
[ 119.421384] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[ 119.421395] RDX: ffff88802075d040 RSI: ffffffff81564fb7 RDI: 0000000000000005
[ 119.421407] RBP: ffff888035f18000 R08: 0000000000000005 R09: 0000000000000001
[ 119.421418] R10: 0000000000000000 R11: ffffffff865b005b R12: ffff88800d9ca000
[ 119.421430] R13: ffff88806cf3d140 R14: ffffffff8547d040 R15: 0000000000000002
[ 119.421447] ? group_sched_out.part.0+0x2c7/0x460
[ 119.421468] ? group_sched_out.part.0+0x2c7/0x460
[ 119.421489] ctx_sched_out+0x8f1/0xc10
[ 119.421509] __perf_event_task_sched_out+0x6d0/0x18d0
[ 119.421533] ? lock_is_held_type+0xd7/0x130
[ 119.421554] ? __perf_cgroup_move+0x160/0x160
[ 119.421573] ? set_next_entity+0x304/0x550
[ 119.421600] ? update_curr+0x267/0x740
[ 119.421629] ? lock_is_held_type+0xd7/0x130
[ 119.421650] __schedule+0xedd/0x2470
[ 119.421675] ? io_schedule_timeout+0x150/0x150
[ 119.421701] ? rcu_read_lock_sched_held+0x3e/0x80
[ 119.421732] schedule+0xda/0x1b0
[ 119.421754] exit_to_user_mode_prepare+0x114/0x1a0
[ 119.421773] syscall_exit_to_user_mode+0x19/0x40
[ 119.421794] do_syscall_64+0x48/0x90
[ 119.421821] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 119.421841] RIP: 0033:0x7f0b86d14b19
[ 119.421853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 119.421870] RSP: 002b:00007f0b8428a218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 119.421887] RAX: 0000000000000001 RBX: 00007f0b86e27f68 RCX: 00007f0b86d14b19
[ 119.421898] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0b86e27f6c
[ 119.421910] RBP: 00007f0b86e27f60 R08: 000000000000000e R09: 0000000000000000
[ 119.421921] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f0b86e27f6c
[ 119.421932] R13: 00007ffc3ff2abaf R14: 00007f0b8428a300 R15: 0000000000022000
[ 119.421952]
[ 119.507024] WARNING: CPU: 1 PID: 3979 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[ 119.508080] Modules linked in:
[ 119.508458] CPU: 1 PID: 3979 Comm: syz-executor.7 Not tainted 6.0.0-rc6-next-20220923 #1
[ 119.509380] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[ 119.510687] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[ 119.511316] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00
[ 119.513418] RSP: 0018:ffff88803f3f7c48 EFLAGS: 00010006
[ 119.514056] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[ 119.514898] RDX: ffff88802075d040 RSI: ffffffff81564fb7 RDI: 0000000000000005
[ 119.515729] RBP: ffff888035f18000 R08: 0000000000000005 R09: 0000000000000001
[ 119.516548] R10: 0000000000000000 R11: ffffffff865b005b R12: ffff88800d9ca000
[ 119.517368] R13: ffff88806cf3d140 R14: ffffffff8547d040 R15: 0000000000000002
[ 119.518195] FS: 00007f0b8428a700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[ 119.519137] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 119.519811] CR2: 0000000020000080 CR3: 0000000034022000 CR4: 0000000000350ee0
[ 119.520635] Call Trace:
[ 119.520946]
[ 119.521221] ctx_sched_out+0x8f1/0xc10
[ 119.521693] __perf_event_task_sched_out+0x6d0/0x18d0
[ 119.522316] ? lock_is_held_type+0xd7/0x130
[ 119.522848] ? __perf_cgroup_move+0x160/0x160
[ 119.523381] ? set_next_entity+0x304/0x550
[ 119.523889] ? update_curr+0x267/0x740
[ 119.524363] ? lock_is_held_type+0xd7/0x130
[ 119.524869] __schedule+0xedd/0x2470
[ 119.525328] ? io_schedule_timeout+0x150/0x150
[ 119.525878] ? rcu_read_lock_sched_held+0x3e/0x80
[ 119.526470] schedule+0xda/0x1b0
[ 119.526892] exit_to_user_mode_prepare+0x114/0x1a0
[ 119.527470] syscall_exit_to_user_mode+0x19/0x40
[ 119.528032] do_syscall_64+0x48/0x90
[ 119.528489] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 119.529096] RIP: 0033:0x7f0b86d14b19
[ 119.529536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 119.531634] RSP: 002b:00007f0b8428a218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 119.532521] RAX: 0000000000000001 RBX: 00007f0b86e27f68 RCX: 00007f0b86d14b19
[ 119.533339] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0b86e27f6c
[ 119.534176] RBP: 00007f0b86e27f60 R08: 000000000000000e R09: 0000000000000000
[ 119.535023] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f0b86e27f6c
[ 119.535855] R13: 00007ffc3ff2abaf R14: 00007f0b8428a300 R15: 0000000000022000
[ 119.536698]
[ 119.536979] irq event stamp: 790
[ 119.537377] hardirqs last enabled at (789): [] exit_to_user_mode_prepare+0x109/0x1a0
[ 119.538477] hardirqs last disabled at (790): [] __schedule+0x1225/0x2470
[ 119.539469] softirqs last enabled at (538): [] __irq_exit_rcu+0x11b/0x180
[ 119.540475] softirqs last disabled at (461): [] __irq_exit_rcu+0x11b/0x180
[ 119.541481] ---[ end trace 0000000000000000 ]---
[ 119.550146] audit: type=1400 audit(1663934172.504:9): avc: denied { write } for pid=3978 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[ 119.577275] hrtimer: interrupt took 26400 ns
11:56:13 executing program 0:
mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0)
finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)
11:56:13 executing program 6:
msgsnd(0x0, &(0x7f0000000000)={0x2, "1072e6d3"}, 0xc, 0x0)
msgctl$IPC_RMID(0xffffffffffffffff, 0x0)
msgrcv(0xffffffffffffffff, &(0x7f0000000040)={0x0, ""/110}, 0x76, 0x0, 0x2800)
r0 = msgget(0x1, 0x12)
msgsnd(r0, &(0x7f00000000c0)={0x0, "d1d8be2ced509456b95bad2fa5bc84cbfc2183a9990843454cf327235803c33690a1e300fc819c14e38016ece19bccc18f49637ab108a1abed80d774db8fc091b3eef4e2eebb2ecaa647352f19203e9ebbb37f26c51c117bb9fce2c698306f49297488d8fc4ecb06ddac7d7bf854d41def8e5ee2e7cab72403b967747800f0a757882619b9ec26102eac9fecbc74ed9fd249e7d2050b94bc09c83384c35ca1f6c32847428d59b78b3640d921e3f094ff6ceacada4fb24ddd81d22249b0f6bb322c4526d58d311db5986d4c174edbc4ff3669b3891a7b4f5c39"}, 0xe1, 0x800)
r1 = msgget$private(0x0, 0x6b)
msgsnd(r1, &(0x7f00000001c0)={0x1, "925536216668ff5e13cccd8274a028bd599fe1e1c1c53f5453d1666cc784ab9700fecb67699ad7e90518f9cc314e06007dbeaf1be6226aa364f792a1c3f148aed1cf1f553bf72cc53aeaa37b5a9cccb77fa07ede0e65fcb9f8fb441aa5e479e9980b5397ce543289d2edddd110b683e13ea729c7bde85a0682851868b9009f3479fefc6872866048d6ca0eb86ccdaf30f2abdf3c29485620c75fe5efa99063cb631b568a5d4d4fc344473a805e2a5bf5bd5ecb9c2d5c8e00d9311006fcf702b45e4d6ce1f2f5bee3a233d920b410b1fc4d43486e2da1eaa763c7ad3ea66cce97bf27ace60e5ce18e645ca7f6a4518a"}, 0xf7, 0x800)
msgsnd(r1, &(0x7f00000002c0)={0x0, "14d82e6afccffdd7a713aa3caddb818bfdf9a3fed830d1c5c547393ba78784120e918dc680a69c511b8008d60a46504d14e91e6caaee6f2b52dd3ca79fdf1d89173f2b871546221de4f35d3f3f1c2eaf0963a529a2e3fc2e765e137b2e542b758be36df01334c7c0aae89eb7c8e5a106fd92321397dc1a4759ad2bf0a007a15766e13a28c6dba06971f36321e52a494902ae2a079e145f0638bcb15ace4920bca313e0660d07cf8f8b50e17f238d6443e2f229376805164a3289dd77aaca889ee4ceb9ad"}, 0xcc, 0x800)
r2 = msgget(0x3, 0x44)
msgsnd(r2, &(0x7f00000004c0)={0x3, "43cd688504e5d672f71ad2ce804295412541225f2db56a16d83c4391be75730489888694fb2408074ddcee45c006bc37a01d1f66ae88614d6add8cf8806b7efe118b91943b"}, 0x4d, 0x0)
msgrcv(r0, &(0x7f0000000640)={0x0, ""/97}, 0x69, 0x3, 0x800)
11:56:13 executing program 4:
r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00')
r2 = open(&(0x7f0000000180)='./file0\x00', 0x33002, 0x18)
openat(r2, &(0x7f00000001c0)='./file0\x00', 0x100, 0x1ea)
pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x180000000000000)
syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x12, 0xc8, &(0x7f0000000000)="b924038994273a4d28c9d89fb4cf756d162c76f458b3fbbb492916cc985eecec800860385ee70c9589e314c81376e0b5148af7a71ae4185feb82fe196cde111dffd376f401db602a667d26503c0aae67f6e7bd36b507baf6612cb006edb9b4eac5606e97b2d97dba1850ffdd2076163552d50eeb1dfd596bb2a7d1d4afdfa72db756c421ad9ddf1dc3ae3f0fcdcd783295eb9a6b50238b8a94890c1146200f010cb23e1a1e98de074d5a5299dc3aa539a2eb4fc248da2d0483dfcda36f5a0be62496425d79993bac"})
r3 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil)
shmat(r3, &(0x7f0000ff0000/0x3000)=nil, 0x4000)
mlock2(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x1)
r4 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil)
shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff8000/0x3000)=nil)
ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x7ff, 0x2, 0x10001, 0x3, 0x10000, 0x80})
shmat(r4, &(0x7f0000ffb000/0x4000)=nil, 0x0)
r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(r5, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
11:56:13 executing program 1:
syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @source_quench={0xc, 0x5, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @broadcast, {[@ssrr={0x89, 0xf, 0x0, [@broadcast, @broadcast, @private]}, @rr={0x7, 0x3}, @lsrr={0x83, 0xb, 0x0, [@multicast1, @rand_addr]}, @lsrr={0x83, 0x7, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0xf, 0x0, [@broadcast, @dev, @loopback]}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@private}]}]}}}}}}}, 0x0)
11:56:13 executing program 7:
mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0)
finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)
11:56:13 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7f, 0x2, 0x9, 0x3, 0x0, 0x8001, 0x24000, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40e8, 0x6, @perf_config_ext={0x7ff, 0x200}, 0x41900, 0x1, 0x1e, 0x0, 0x4, 0x4, 0xfff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0xa)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x4, 0x1f, 0x4, 0x86, 0x0, 0x1ff, 0x3a04, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x7ff, 0x27}, 0x3200, 0xffff, 0x5, 0x5, 0x3, 0x800, 0x401, 0x0, 0x5, 0x0, 0x8}, 0xffffffffffffffff, 0xb, r0, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendfile(r1, r0, 0x0, 0x80000001)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000004c0)={0x5, 0x80, 0x4, 0x9, 0x0, 0x7, 0x0, 0xc0000000000, 0x40, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x8c03, 0xff, 0x5, 0x0, 0x8000, 0xbd5, 0xab2})
11:56:13 executing program 5:
r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00')
r2 = open(&(0x7f0000000180)='./file0\x00', 0x33002, 0x18)
openat(r2, &(0x7f00000001c0)='./file0\x00', 0x100, 0x1ea)
pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x180000000000000)
syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x12, 0xc8, &(0x7f0000000000)="b924038994273a4d28c9d89fb4cf756d162c76f458b3fbbb492916cc985eecec800860385ee70c9589e314c81376e0b5148af7a71ae4185feb82fe196cde111dffd376f401db602a667d26503c0aae67f6e7bd36b507baf6612cb006edb9b4eac5606e97b2d97dba1850ffdd2076163552d50eeb1dfd596bb2a7d1d4afdfa72db756c421ad9ddf1dc3ae3f0fcdcd783295eb9a6b50238b8a94890c1146200f010cb23e1a1e98de074d5a5299dc3aa539a2eb4fc248da2d0483dfcda36f5a0be62496425d79993bac"})
r3 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil)
shmat(r3, &(0x7f0000ff0000/0x3000)=nil, 0x4000)
mlock2(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x1)
r4 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil)
shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff8000/0x3000)=nil)
ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x7ff, 0x2, 0x10001, 0x3, 0x10000, 0x80})
shmat(r4, &(0x7f0000ffb000/0x4000)=nil, 0x0)
r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(r5, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
11:56:13 executing program 3:
r0 = timerfd_create(0x0, 0x0)
r1 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000440))
11:56:13 executing program 6:
msgsnd(0x0, &(0x7f0000000000)={0x2, "1072e6d3"}, 0xc, 0x0)
msgctl$IPC_RMID(0xffffffffffffffff, 0x0)
msgrcv(0xffffffffffffffff, &(0x7f0000000040)={0x0, ""/110}, 0x76, 0x0, 0x2800)
r0 = msgget(0x1, 0x12)
msgsnd(r0, &(0x7f00000000c0)={0x0, "d1d8be2ced509456b95bad2fa5bc84cbfc2183a9990843454cf327235803c33690a1e300fc819c14e38016ece19bccc18f49637ab108a1abed80d774db8fc091b3eef4e2eebb2ecaa647352f19203e9ebbb37f26c51c117bb9fce2c698306f49297488d8fc4ecb06ddac7d7bf854d41def8e5ee2e7cab72403b967747800f0a757882619b9ec26102eac9fecbc74ed9fd249e7d2050b94bc09c83384c35ca1f6c32847428d59b78b3640d921e3f094ff6ceacada4fb24ddd81d22249b0f6bb322c4526d58d311db5986d4c174edbc4ff3669b3891a7b4f5c39"}, 0xe1, 0x800)
r1 = msgget$private(0x0, 0x6b)
msgsnd(r1, &(0x7f00000001c0)={0x1, "925536216668ff5e13cccd8274a028bd599fe1e1c1c53f5453d1666cc784ab9700fecb67699ad7e90518f9cc314e06007dbeaf1be6226aa364f792a1c3f148aed1cf1f553bf72cc53aeaa37b5a9cccb77fa07ede0e65fcb9f8fb441aa5e479e9980b5397ce543289d2edddd110b683e13ea729c7bde85a0682851868b9009f3479fefc6872866048d6ca0eb86ccdaf30f2abdf3c29485620c75fe5efa99063cb631b568a5d4d4fc344473a805e2a5bf5bd5ecb9c2d5c8e00d9311006fcf702b45e4d6ce1f2f5bee3a233d920b410b1fc4d43486e2da1eaa763c7ad3ea66cce97bf27ace60e5ce18e645ca7f6a4518a"}, 0xf7, 0x800)
msgsnd(r1, &(0x7f00000002c0)={0x0, "14d82e6afccffdd7a713aa3caddb818bfdf9a3fed830d1c5c547393ba78784120e918dc680a69c511b8008d60a46504d14e91e6caaee6f2b52dd3ca79fdf1d89173f2b871546221de4f35d3f3f1c2eaf0963a529a2e3fc2e765e137b2e542b758be36df01334c7c0aae89eb7c8e5a106fd92321397dc1a4759ad2bf0a007a15766e13a28c6dba06971f36321e52a494902ae2a079e145f0638bcb15ace4920bca313e0660d07cf8f8b50e17f238d6443e2f229376805164a3289dd77aaca889ee4ceb9ad"}, 0xcc, 0x800)
r2 = msgget(0x3, 0x44)
msgsnd(r2, &(0x7f00000004c0)={0x3, "43cd688504e5d672f71ad2ce804295412541225f2db56a16d83c4391be75730489888694fb2408074ddcee45c006bc37a01d1f66ae88614d6add8cf8806b7efe118b91943b"}, 0x4d, 0x0)
msgrcv(r0, &(0x7f0000000640)={0x0, ""/97}, 0x69, 0x3, 0x800)
11:56:13 executing program 3:
r0 = timerfd_create(0x0, 0x0)
r1 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000440))
11:56:13 executing program 1:
syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @source_quench={0xc, 0x5, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @broadcast, {[@ssrr={0x89, 0xf, 0x0, [@broadcast, @broadcast, @private]}, @rr={0x7, 0x3}, @lsrr={0x83, 0xb, 0x0, [@multicast1, @rand_addr]}, @lsrr={0x83, 0x7, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0xf, 0x0, [@broadcast, @dev, @loopback]}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@private}]}]}}}}}}}, 0x0)
11:56:13 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7f, 0x2, 0x9, 0x3, 0x0, 0x8001, 0x24000, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40e8, 0x6, @perf_config_ext={0x7ff, 0x200}, 0x41900, 0x1, 0x1e, 0x0, 0x4, 0x4, 0xfff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0xa)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x4, 0x1f, 0x4, 0x86, 0x0, 0x1ff, 0x3a04, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x7ff, 0x27}, 0x3200, 0xffff, 0x5, 0x5, 0x3, 0x800, 0x401, 0x0, 0x5, 0x0, 0x8}, 0xffffffffffffffff, 0xb, r0, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendfile(r1, r0, 0x0, 0x80000001)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000004c0)={0x5, 0x80, 0x4, 0x9, 0x0, 0x7, 0x0, 0xc0000000000, 0x40, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x8c03, 0xff, 0x5, 0x0, 0x8000, 0xbd5, 0xab2})
11:56:13 executing program 5:
r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00')
r2 = open(&(0x7f0000000180)='./file0\x00', 0x33002, 0x18)
openat(r2, &(0x7f00000001c0)='./file0\x00', 0x100, 0x1ea)
pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x180000000000000)
syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x12, 0xc8, &(0x7f0000000000)="b924038994273a4d28c9d89fb4cf756d162c76f458b3fbbb492916cc985eecec800860385ee70c9589e314c81376e0b5148af7a71ae4185feb82fe196cde111dffd376f401db602a667d26503c0aae67f6e7bd36b507baf6612cb006edb9b4eac5606e97b2d97dba1850ffdd2076163552d50eeb1dfd596bb2a7d1d4afdfa72db756c421ad9ddf1dc3ae3f0fcdcd783295eb9a6b50238b8a94890c1146200f010cb23e1a1e98de074d5a5299dc3aa539a2eb4fc248da2d0483dfcda36f5a0be62496425d79993bac"})
r3 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil)
shmat(r3, &(0x7f0000ff0000/0x3000)=nil, 0x4000)
mlock2(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x1)
r4 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil)
shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff8000/0x3000)=nil)
ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x7ff, 0x2, 0x10001, 0x3, 0x10000, 0x80})
shmat(r4, &(0x7f0000ffb000/0x4000)=nil, 0x0)
r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(r5, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
11:56:13 executing program 6:
msgsnd(0x0, &(0x7f0000000000)={0x2, "1072e6d3"}, 0xc, 0x0)
msgctl$IPC_RMID(0xffffffffffffffff, 0x0)
msgrcv(0xffffffffffffffff, &(0x7f0000000040)={0x0, ""/110}, 0x76, 0x0, 0x2800)
r0 = msgget(0x1, 0x12)
msgsnd(r0, &(0x7f00000000c0)={0x0, "d1d8be2ced509456b95bad2fa5bc84cbfc2183a9990843454cf327235803c33690a1e300fc819c14e38016ece19bccc18f49637ab108a1abed80d774db8fc091b3eef4e2eebb2ecaa647352f19203e9ebbb37f26c51c117bb9fce2c698306f49297488d8fc4ecb06ddac7d7bf854d41def8e5ee2e7cab72403b967747800f0a757882619b9ec26102eac9fecbc74ed9fd249e7d2050b94bc09c83384c35ca1f6c32847428d59b78b3640d921e3f094ff6ceacada4fb24ddd81d22249b0f6bb322c4526d58d311db5986d4c174edbc4ff3669b3891a7b4f5c39"}, 0xe1, 0x800)
r1 = msgget$private(0x0, 0x6b)
msgsnd(r1, &(0x7f00000001c0)={0x1, "925536216668ff5e13cccd8274a028bd599fe1e1c1c53f5453d1666cc784ab9700fecb67699ad7e90518f9cc314e06007dbeaf1be6226aa364f792a1c3f148aed1cf1f553bf72cc53aeaa37b5a9cccb77fa07ede0e65fcb9f8fb441aa5e479e9980b5397ce543289d2edddd110b683e13ea729c7bde85a0682851868b9009f3479fefc6872866048d6ca0eb86ccdaf30f2abdf3c29485620c75fe5efa99063cb631b568a5d4d4fc344473a805e2a5bf5bd5ecb9c2d5c8e00d9311006fcf702b45e4d6ce1f2f5bee3a233d920b410b1fc4d43486e2da1eaa763c7ad3ea66cce97bf27ace60e5ce18e645ca7f6a4518a"}, 0xf7, 0x800)
msgsnd(r1, &(0x7f00000002c0)={0x0, "14d82e6afccffdd7a713aa3caddb818bfdf9a3fed830d1c5c547393ba78784120e918dc680a69c511b8008d60a46504d14e91e6caaee6f2b52dd3ca79fdf1d89173f2b871546221de4f35d3f3f1c2eaf0963a529a2e3fc2e765e137b2e542b758be36df01334c7c0aae89eb7c8e5a106fd92321397dc1a4759ad2bf0a007a15766e13a28c6dba06971f36321e52a494902ae2a079e145f0638bcb15ace4920bca313e0660d07cf8f8b50e17f238d6443e2f229376805164a3289dd77aaca889ee4ceb9ad"}, 0xcc, 0x800)
r2 = msgget(0x3, 0x44)
msgsnd(r2, &(0x7f00000004c0)={0x3, "43cd688504e5d672f71ad2ce804295412541225f2db56a16d83c4391be75730489888694fb2408074ddcee45c006bc37a01d1f66ae88614d6add8cf8806b7efe118b91943b"}, 0x4d, 0x0)
msgrcv(r0, &(0x7f0000000640)={0x0, ""/97}, 0x69, 0x3, 0x800)
11:56:13 executing program 4:
r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00')
r2 = open(&(0x7f0000000180)='./file0\x00', 0x33002, 0x18)
openat(r2, &(0x7f00000001c0)='./file0\x00', 0x100, 0x1ea)
pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x180000000000000)
syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x12, 0xc8, &(0x7f0000000000)="b924038994273a4d28c9d89fb4cf756d162c76f458b3fbbb492916cc985eecec800860385ee70c9589e314c81376e0b5148af7a71ae4185feb82fe196cde111dffd376f401db602a667d26503c0aae67f6e7bd36b507baf6612cb006edb9b4eac5606e97b2d97dba1850ffdd2076163552d50eeb1dfd596bb2a7d1d4afdfa72db756c421ad9ddf1dc3ae3f0fcdcd783295eb9a6b50238b8a94890c1146200f010cb23e1a1e98de074d5a5299dc3aa539a2eb4fc248da2d0483dfcda36f5a0be62496425d79993bac"})
r3 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil)
shmat(r3, &(0x7f0000ff0000/0x3000)=nil, 0x4000)
mlock2(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x1)
r4 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil)
shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff8000/0x3000)=nil)
ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x7ff, 0x2, 0x10001, 0x3, 0x10000, 0x80})
shmat(r4, &(0x7f0000ffb000/0x4000)=nil, 0x0)
r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(r5, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
11:56:13 executing program 3:
r0 = timerfd_create(0x0, 0x0)
r1 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000440))
11:56:13 executing program 0:
mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0)
finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)
11:56:13 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7f, 0x2, 0x9, 0x3, 0x0, 0x8001, 0x24000, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40e8, 0x6, @perf_config_ext={0x7ff, 0x200}, 0x41900, 0x1, 0x1e, 0x0, 0x4, 0x4, 0xfff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0xa)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x4, 0x1f, 0x4, 0x86, 0x0, 0x1ff, 0x3a04, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x7ff, 0x27}, 0x3200, 0xffff, 0x5, 0x5, 0x3, 0x800, 0x401, 0x0, 0x5, 0x0, 0x8}, 0xffffffffffffffff, 0xb, r0, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendfile(r1, r0, 0x0, 0x80000001)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000004c0)={0x5, 0x80, 0x4, 0x9, 0x0, 0x7, 0x0, 0xc0000000000, 0x40, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x8c03, 0xff, 0x5, 0x0, 0x8000, 0xbd5, 0xab2})
11:56:13 executing program 4:
r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00')
r2 = open(&(0x7f0000000180)='./file0\x00', 0x33002, 0x18)
openat(r2, &(0x7f00000001c0)='./file0\x00', 0x100, 0x1ea)
pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x180000000000000)
syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x12, 0xc8, &(0x7f0000000000)="b924038994273a4d28c9d89fb4cf756d162c76f458b3fbbb492916cc985eecec800860385ee70c9589e314c81376e0b5148af7a71ae4185feb82fe196cde111dffd376f401db602a667d26503c0aae67f6e7bd36b507baf6612cb006edb9b4eac5606e97b2d97dba1850ffdd2076163552d50eeb1dfd596bb2a7d1d4afdfa72db756c421ad9ddf1dc3ae3f0fcdcd783295eb9a6b50238b8a94890c1146200f010cb23e1a1e98de074d5a5299dc3aa539a2eb4fc248da2d0483dfcda36f5a0be62496425d79993bac"})
r3 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil)
shmat(r3, &(0x7f0000ff0000/0x3000)=nil, 0x4000)
mlock2(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x1)
r4 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil)
shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff8000/0x3000)=nil)
ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x7ff, 0x2, 0x10001, 0x3, 0x10000, 0x80})
shmat(r4, &(0x7f0000ffb000/0x4000)=nil, 0x0)
r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(r5, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
11:56:13 executing program 6:
mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0)
finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)
11:56:13 executing program 5:
mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0)
finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)
11:56:13 executing program 3:
mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0)
finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)
11:56:13 executing program 7:
mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0)
finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)
11:56:13 executing program 1:
syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @source_quench={0xc, 0x5, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @broadcast, {[@ssrr={0x89, 0xf, 0x0, [@broadcast, @broadcast, @private]}, @rr={0x7, 0x3}, @lsrr={0x83, 0xb, 0x0, [@multicast1, @rand_addr]}, @lsrr={0x83, 0x7, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0xf, 0x0, [@broadcast, @dev, @loopback]}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@private}]}]}}}}}}}, 0x0)
11:56:14 executing program 4:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7f, 0x2, 0x9, 0x3, 0x0, 0x8001, 0x24000, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40e8, 0x6, @perf_config_ext={0x7ff, 0x200}, 0x41900, 0x1, 0x1e, 0x0, 0x4, 0x4, 0xfff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0xa)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x4, 0x1f, 0x4, 0x86, 0x0, 0x1ff, 0x3a04, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x7ff, 0x27}, 0x3200, 0xffff, 0x5, 0x5, 0x3, 0x800, 0x401, 0x0, 0x5, 0x0, 0x8}, 0xffffffffffffffff, 0xb, r0, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendfile(r1, r0, 0x0, 0x80000001)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000004c0)={0x5, 0x80, 0x4, 0x9, 0x0, 0x7, 0x0, 0xc0000000000, 0x40, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x8c03, 0xff, 0x5, 0x0, 0x8000, 0xbd5, 0xab2})
11:56:14 executing program 1:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7f, 0x2, 0x9, 0x3, 0x0, 0x8001, 0x24000, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40e8, 0x6, @perf_config_ext={0x7ff, 0x200}, 0x41900, 0x1, 0x1e, 0x0, 0x4, 0x4, 0xfff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0xa)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x4, 0x1f, 0x4, 0x86, 0x0, 0x1ff, 0x3a04, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x7ff, 0x27}, 0x3200, 0xffff, 0x5, 0x5, 0x3, 0x800, 0x401, 0x0, 0x5, 0x0, 0x8}, 0xffffffffffffffff, 0xb, r0, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendfile(r1, r0, 0x0, 0x80000001)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000004c0)={0x5, 0x80, 0x4, 0x9, 0x0, 0x7, 0x0, 0xc0000000000, 0x40, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x8c03, 0xff, 0x5, 0x0, 0x8000, 0xbd5, 0xab2})
11:56:14 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7f, 0x2, 0x9, 0x3, 0x0, 0x8001, 0x24000, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40e8, 0x6, @perf_config_ext={0x7ff, 0x200}, 0x41900, 0x1, 0x1e, 0x0, 0x4, 0x4, 0xfff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0xa)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x4, 0x1f, 0x4, 0x86, 0x0, 0x1ff, 0x3a04, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x7ff, 0x27}, 0x3200, 0xffff, 0x5, 0x5, 0x3, 0x800, 0x401, 0x0, 0x5, 0x0, 0x8}, 0xffffffffffffffff, 0xb, r0, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendfile(r1, r0, 0x0, 0x80000001)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000004c0)={0x5, 0x80, 0x4, 0x9, 0x0, 0x7, 0x0, 0xc0000000000, 0x40, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x8c03, 0xff, 0x5, 0x0, 0x8000, 0xbd5, 0xab2})
11:56:14 executing program 5:
mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0)
finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)
11:56:14 executing program 0:
mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0)
finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)
11:56:14 executing program 4:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7f, 0x2, 0x9, 0x3, 0x0, 0x8001, 0x24000, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40e8, 0x6, @perf_config_ext={0x7ff, 0x200}, 0x41900, 0x1, 0x1e, 0x0, 0x4, 0x4, 0xfff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0xa)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x4, 0x1f, 0x4, 0x86, 0x0, 0x1ff, 0x3a04, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x7ff, 0x27}, 0x3200, 0xffff, 0x5, 0x5, 0x3, 0x800, 0x401, 0x0, 0x5, 0x0, 0x8}, 0xffffffffffffffff, 0xb, r0, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendfile(r1, r0, 0x0, 0x80000001)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000004c0)={0x5, 0x80, 0x4, 0x9, 0x0, 0x7, 0x0, 0xc0000000000, 0x40, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x8c03, 0xff, 0x5, 0x0, 0x8000, 0xbd5, 0xab2})
11:56:14 executing program 1:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7f, 0x2, 0x9, 0x3, 0x0, 0x8001, 0x24000, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40e8, 0x6, @perf_config_ext={0x7ff, 0x200}, 0x41900, 0x1, 0x1e, 0x0, 0x4, 0x4, 0xfff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0xa)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x4, 0x1f, 0x4, 0x86, 0x0, 0x1ff, 0x3a04, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x7ff, 0x27}, 0x3200, 0xffff, 0x5, 0x5, 0x3, 0x800, 0x401, 0x0, 0x5, 0x0, 0x8}, 0xffffffffffffffff, 0xb, r0, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendfile(r1, r0, 0x0, 0x80000001)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000004c0)={0x5, 0x80, 0x4, 0x9, 0x0, 0x7, 0x0, 0xc0000000000, 0x40, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x8c03, 0xff, 0x5, 0x0, 0x8000, 0xbd5, 0xab2})
11:56:14 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7f, 0x2, 0x9, 0x3, 0x0, 0x8001, 0x24000, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40e8, 0x6, @perf_config_ext={0x7ff, 0x200}, 0x41900, 0x1, 0x1e, 0x0, 0x4, 0x4, 0xfff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0xa)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x4, 0x1f, 0x4, 0x86, 0x0, 0x1ff, 0x3a04, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x7ff, 0x27}, 0x3200, 0xffff, 0x5, 0x5, 0x3, 0x800, 0x401, 0x0, 0x5, 0x0, 0x8}, 0xffffffffffffffff, 0xb, r0, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendfile(r1, r0, 0x0, 0x80000001)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000004c0)={0x5, 0x80, 0x4, 0x9, 0x0, 0x7, 0x0, 0xc0000000000, 0x40, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x8c03, 0xff, 0x5, 0x0, 0x8000, 0xbd5, 0xab2})
11:56:14 executing program 3:
mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0)
finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)
11:56:14 executing program 6:
mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0)
finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)
11:56:14 executing program 5:
mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0)
finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)
11:56:14 executing program 7:
mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0)
finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)
11:56:14 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7f, 0x2, 0x9, 0x3, 0x0, 0x8001, 0x24000, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40e8, 0x6, @perf_config_ext={0x7ff, 0x200}, 0x41900, 0x1, 0x1e, 0x0, 0x4, 0x4, 0xfff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0xa)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x4, 0x1f, 0x4, 0x86, 0x0, 0x1ff, 0x3a04, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x7ff, 0x27}, 0x3200, 0xffff, 0x5, 0x5, 0x3, 0x800, 0x401, 0x0, 0x5, 0x0, 0x8}, 0xffffffffffffffff, 0xb, r0, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendfile(r1, r0, 0x0, 0x80000001)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000004c0)={0x5, 0x80, 0x4, 0x9, 0x0, 0x7, 0x0, 0xc0000000000, 0x40, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x8c03, 0xff, 0x5, 0x0, 0x8000, 0xbd5, 0xab2})
11:56:14 executing program 1:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7f, 0x2, 0x9, 0x3, 0x0, 0x8001, 0x24000, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40e8, 0x6, @perf_config_ext={0x7ff, 0x200}, 0x41900, 0x1, 0x1e, 0x0, 0x4, 0x4, 0xfff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0xa)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x4, 0x1f, 0x4, 0x86, 0x0, 0x1ff, 0x3a04, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x7ff, 0x27}, 0x3200, 0xffff, 0x5, 0x5, 0x3, 0x800, 0x401, 0x0, 0x5, 0x0, 0x8}, 0xffffffffffffffff, 0xb, r0, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendfile(r1, r0, 0x0, 0x80000001)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000004c0)={0x5, 0x80, 0x4, 0x9, 0x0, 0x7, 0x0, 0xc0000000000, 0x40, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x8c03, 0xff, 0x5, 0x0, 0x8000, 0xbd5, 0xab2})
11:56:14 executing program 4:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7f, 0x2, 0x9, 0x3, 0x0, 0x8001, 0x24000, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40e8, 0x6, @perf_config_ext={0x7ff, 0x200}, 0x41900, 0x1, 0x1e, 0x0, 0x4, 0x4, 0xfff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0xa)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x4, 0x1f, 0x4, 0x86, 0x0, 0x1ff, 0x3a04, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x7ff, 0x27}, 0x3200, 0xffff, 0x5, 0x5, 0x3, 0x800, 0x401, 0x0, 0x5, 0x0, 0x8}, 0xffffffffffffffff, 0xb, r0, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendfile(r1, r0, 0x0, 0x80000001)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000004c0)={0x5, 0x80, 0x4, 0x9, 0x0, 0x7, 0x0, 0xc0000000000, 0x40, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x8c03, 0xff, 0x5, 0x0, 0x8000, 0xbd5, 0xab2})
11:56:14 executing program 7:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7f, 0x2, 0x9, 0x3, 0x0, 0x8001, 0x24000, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40e8, 0x6, @perf_config_ext={0x7ff, 0x200}, 0x41900, 0x1, 0x1e, 0x0, 0x4, 0x4, 0xfff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0xa)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x4, 0x1f, 0x4, 0x86, 0x0, 0x1ff, 0x3a04, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x7ff, 0x27}, 0x3200, 0xffff, 0x5, 0x5, 0x3, 0x800, 0x401, 0x0, 0x5, 0x0, 0x8}, 0xffffffffffffffff, 0xb, r0, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendfile(r1, r0, 0x0, 0x80000001)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000004c0)={0x5, 0x80, 0x4, 0x9, 0x0, 0x7, 0x0, 0xc0000000000, 0x40, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x8c03, 0xff, 0x5, 0x0, 0x8000, 0xbd5, 0xab2})
11:56:14 executing program 1:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7f, 0x2, 0x9, 0x3, 0x0, 0x8001, 0x24000, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40e8, 0x6, @perf_config_ext={0x7ff, 0x200}, 0x41900, 0x1, 0x1e, 0x0, 0x4, 0x4, 0xfff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0xa)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x4, 0x1f, 0x4, 0x86, 0x0, 0x1ff, 0x3a04, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x7ff, 0x27}, 0x3200, 0xffff, 0x5, 0x5, 0x3, 0x800, 0x401, 0x0, 0x5, 0x0, 0x8}, 0xffffffffffffffff, 0xb, r0, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendfile(r1, r0, 0x0, 0x80000001)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000004c0)={0x5, 0x80, 0x4, 0x9, 0x0, 0x7, 0x0, 0xc0000000000, 0x40, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x8c03, 0xff, 0x5, 0x0, 0x8000, 0xbd5, 0xab2})
11:56:14 executing program 6:
mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0)
finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)
11:56:14 executing program 0:
msgsnd(0x0, &(0x7f0000000000)={0x2, "1072e6d3"}, 0xc, 0x0)
msgctl$IPC_RMID(0xffffffffffffffff, 0x0)
msgrcv(0xffffffffffffffff, &(0x7f0000000040)={0x0, ""/110}, 0x76, 0x0, 0x2800)
r0 = msgget(0x1, 0x12)
msgsnd(r0, &(0x7f00000000c0)={0x0, "d1d8be2ced509456b95bad2fa5bc84cbfc2183a9990843454cf327235803c33690a1e300fc819c14e38016ece19bccc18f49637ab108a1abed80d774db8fc091b3eef4e2eebb2ecaa647352f19203e9ebbb37f26c51c117bb9fce2c698306f49297488d8fc4ecb06ddac7d7bf854d41def8e5ee2e7cab72403b967747800f0a757882619b9ec26102eac9fecbc74ed9fd249e7d2050b94bc09c83384c35ca1f6c32847428d59b78b3640d921e3f094ff6ceacada4fb24ddd81d22249b0f6bb322c4526d58d311db5986d4c174edbc4ff3669b3891a7b4f5c39"}, 0xe1, 0x800)
r1 = msgget$private(0x0, 0x6b)
msgsnd(r1, &(0x7f00000001c0)={0x1, "925536216668ff5e13cccd8274a028bd599fe1e1c1c53f5453d1666cc784ab9700fecb67699ad7e90518f9cc314e06007dbeaf1be6226aa364f792a1c3f148aed1cf1f553bf72cc53aeaa37b5a9cccb77fa07ede0e65fcb9f8fb441aa5e479e9980b5397ce543289d2edddd110b683e13ea729c7bde85a0682851868b9009f3479fefc6872866048d6ca0eb86ccdaf30f2abdf3c29485620c75fe5efa99063cb631b568a5d4d4fc344473a805e2a5bf5bd5ecb9c2d5c8e00d9311006fcf702b45e4d6ce1f2f5bee3a233d920b410b1fc4d43486e2da1eaa763c7ad3ea66cce97bf27ace60e5ce18e645ca7f6a4518a"}, 0xf7, 0x800)
msgsnd(r1, &(0x7f00000002c0)={0x0, "14d82e6afccffdd7a713aa3caddb818bfdf9a3fed830d1c5c547393ba78784120e918dc680a69c511b8008d60a46504d14e91e6caaee6f2b52dd3ca79fdf1d89173f2b871546221de4f35d3f3f1c2eaf0963a529a2e3fc2e765e137b2e542b758be36df01334c7c0aae89eb7c8e5a106fd92321397dc1a4759ad2bf0a007a15766e13a28c6dba06971f36321e52a494902ae2a079e145f0638bcb15ace4920bca313e0660d07cf8f8b50e17f238d6443e2f229376805164a3289dd77aaca889ee4ceb9ad"}, 0xcc, 0x800)
r2 = msgget(0x3, 0x44)
msgsnd(r2, &(0x7f00000004c0)={0x3, "43cd688504e5d672f71ad2ce804295412541225f2db56a16d83c4391be75730489888694fb2408074ddcee45c006bc37a01d1f66ae88614d6add8cf8806b7efe118b91943b"}, 0x4d, 0x0)
msgrcv(r0, &(0x7f0000000640)={0x0, ""/97}, 0x69, 0x3, 0x800)
11:56:14 executing program 4:
msgsnd(0x0, &(0x7f0000000000)={0x2, "1072e6d3"}, 0xc, 0x0)
msgctl$IPC_RMID(0xffffffffffffffff, 0x0)
msgrcv(0xffffffffffffffff, &(0x7f0000000040)={0x0, ""/110}, 0x76, 0x0, 0x2800)
r0 = msgget(0x1, 0x12)
msgsnd(r0, &(0x7f00000000c0)={0x0, "d1d8be2ced509456b95bad2fa5bc84cbfc2183a9990843454cf327235803c33690a1e300fc819c14e38016ece19bccc18f49637ab108a1abed80d774db8fc091b3eef4e2eebb2ecaa647352f19203e9ebbb37f26c51c117bb9fce2c698306f49297488d8fc4ecb06ddac7d7bf854d41def8e5ee2e7cab72403b967747800f0a757882619b9ec26102eac9fecbc74ed9fd249e7d2050b94bc09c83384c35ca1f6c32847428d59b78b3640d921e3f094ff6ceacada4fb24ddd81d22249b0f6bb322c4526d58d311db5986d4c174edbc4ff3669b3891a7b4f5c39"}, 0xe1, 0x800)
r1 = msgget$private(0x0, 0x6b)
msgsnd(r1, &(0x7f00000001c0)={0x1, "925536216668ff5e13cccd8274a028bd599fe1e1c1c53f5453d1666cc784ab9700fecb67699ad7e90518f9cc314e06007dbeaf1be6226aa364f792a1c3f148aed1cf1f553bf72cc53aeaa37b5a9cccb77fa07ede0e65fcb9f8fb441aa5e479e9980b5397ce543289d2edddd110b683e13ea729c7bde85a0682851868b9009f3479fefc6872866048d6ca0eb86ccdaf30f2abdf3c29485620c75fe5efa99063cb631b568a5d4d4fc344473a805e2a5bf5bd5ecb9c2d5c8e00d9311006fcf702b45e4d6ce1f2f5bee3a233d920b410b1fc4d43486e2da1eaa763c7ad3ea66cce97bf27ace60e5ce18e645ca7f6a4518a"}, 0xf7, 0x800)
msgsnd(r1, &(0x7f00000002c0)={0x0, "14d82e6afccffdd7a713aa3caddb818bfdf9a3fed830d1c5c547393ba78784120e918dc680a69c511b8008d60a46504d14e91e6caaee6f2b52dd3ca79fdf1d89173f2b871546221de4f35d3f3f1c2eaf0963a529a2e3fc2e765e137b2e542b758be36df01334c7c0aae89eb7c8e5a106fd92321397dc1a4759ad2bf0a007a15766e13a28c6dba06971f36321e52a494902ae2a079e145f0638bcb15ace4920bca313e0660d07cf8f8b50e17f238d6443e2f229376805164a3289dd77aaca889ee4ceb9ad"}, 0xcc, 0x800)
r2 = msgget(0x3, 0x44)
msgsnd(r2, &(0x7f00000004c0)={0x3, "43cd688504e5d672f71ad2ce804295412541225f2db56a16d83c4391be75730489888694fb2408074ddcee45c006bc37a01d1f66ae88614d6add8cf8806b7efe118b91943b"}, 0x4d, 0x0)
msgrcv(r0, &(0x7f0000000640)={0x0, ""/97}, 0x69, 0x3, 0x800)
11:56:15 executing program 2:
r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00')
r2 = open(&(0x7f0000000180)='./file0\x00', 0x33002, 0x18)
openat(r2, &(0x7f00000001c0)='./file0\x00', 0x100, 0x1ea)
pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x180000000000000)
syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x12, 0xc8, &(0x7f0000000000)="b924038994273a4d28c9d89fb4cf756d162c76f458b3fbbb492916cc985eecec800860385ee70c9589e314c81376e0b5148af7a71ae4185feb82fe196cde111dffd376f401db602a667d26503c0aae67f6e7bd36b507baf6612cb006edb9b4eac5606e97b2d97dba1850ffdd2076163552d50eeb1dfd596bb2a7d1d4afdfa72db756c421ad9ddf1dc3ae3f0fcdcd783295eb9a6b50238b8a94890c1146200f010cb23e1a1e98de074d5a5299dc3aa539a2eb4fc248da2d0483dfcda36f5a0be62496425d79993bac"})
r3 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil)
shmat(r3, &(0x7f0000ff0000/0x3000)=nil, 0x4000)
mlock2(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x1)
r4 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil)
shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff8000/0x3000)=nil)
ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x7ff, 0x2, 0x10001, 0x3, 0x10000, 0x80})
shmat(r4, &(0x7f0000ffb000/0x4000)=nil, 0x0)
r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(r5, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
11:56:15 executing program 7:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7f, 0x2, 0x9, 0x3, 0x0, 0x8001, 0x24000, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40e8, 0x6, @perf_config_ext={0x7ff, 0x200}, 0x41900, 0x1, 0x1e, 0x0, 0x4, 0x4, 0xfff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0xa)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x4, 0x1f, 0x4, 0x86, 0x0, 0x1ff, 0x3a04, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x7ff, 0x27}, 0x3200, 0xffff, 0x5, 0x5, 0x3, 0x800, 0x401, 0x0, 0x5, 0x0, 0x8}, 0xffffffffffffffff, 0xb, r0, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendfile(r1, r0, 0x0, 0x80000001)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000004c0)={0x5, 0x80, 0x4, 0x9, 0x0, 0x7, 0x0, 0xc0000000000, 0x40, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x8c03, 0xff, 0x5, 0x0, 0x8000, 0xbd5, 0xab2})
11:56:15 executing program 4:
msgsnd(0x0, &(0x7f0000000000)={0x2, "1072e6d3"}, 0xc, 0x0)
msgctl$IPC_RMID(0xffffffffffffffff, 0x0)
msgrcv(0xffffffffffffffff, &(0x7f0000000040)={0x0, ""/110}, 0x76, 0x0, 0x2800)
r0 = msgget(0x1, 0x12)
msgsnd(r0, &(0x7f00000000c0)={0x0, "d1d8be2ced509456b95bad2fa5bc84cbfc2183a9990843454cf327235803c33690a1e300fc819c14e38016ece19bccc18f49637ab108a1abed80d774db8fc091b3eef4e2eebb2ecaa647352f19203e9ebbb37f26c51c117bb9fce2c698306f49297488d8fc4ecb06ddac7d7bf854d41def8e5ee2e7cab72403b967747800f0a757882619b9ec26102eac9fecbc74ed9fd249e7d2050b94bc09c83384c35ca1f6c32847428d59b78b3640d921e3f094ff6ceacada4fb24ddd81d22249b0f6bb322c4526d58d311db5986d4c174edbc4ff3669b3891a7b4f5c39"}, 0xe1, 0x800)
r1 = msgget$private(0x0, 0x6b)
msgsnd(r1, &(0x7f00000001c0)={0x1, "925536216668ff5e13cccd8274a028bd599fe1e1c1c53f5453d1666cc784ab9700fecb67699ad7e90518f9cc314e06007dbeaf1be6226aa364f792a1c3f148aed1cf1f553bf72cc53aeaa37b5a9cccb77fa07ede0e65fcb9f8fb441aa5e479e9980b5397ce543289d2edddd110b683e13ea729c7bde85a0682851868b9009f3479fefc6872866048d6ca0eb86ccdaf30f2abdf3c29485620c75fe5efa99063cb631b568a5d4d4fc344473a805e2a5bf5bd5ecb9c2d5c8e00d9311006fcf702b45e4d6ce1f2f5bee3a233d920b410b1fc4d43486e2da1eaa763c7ad3ea66cce97bf27ace60e5ce18e645ca7f6a4518a"}, 0xf7, 0x800)
msgsnd(r1, &(0x7f00000002c0)={0x0, "14d82e6afccffdd7a713aa3caddb818bfdf9a3fed830d1c5c547393ba78784120e918dc680a69c511b8008d60a46504d14e91e6caaee6f2b52dd3ca79fdf1d89173f2b871546221de4f35d3f3f1c2eaf0963a529a2e3fc2e765e137b2e542b758be36df01334c7c0aae89eb7c8e5a106fd92321397dc1a4759ad2bf0a007a15766e13a28c6dba06971f36321e52a494902ae2a079e145f0638bcb15ace4920bca313e0660d07cf8f8b50e17f238d6443e2f229376805164a3289dd77aaca889ee4ceb9ad"}, 0xcc, 0x800)
r2 = msgget(0x3, 0x44)
msgsnd(r2, &(0x7f00000004c0)={0x3, "43cd688504e5d672f71ad2ce804295412541225f2db56a16d83c4391be75730489888694fb2408074ddcee45c006bc37a01d1f66ae88614d6add8cf8806b7efe118b91943b"}, 0x4d, 0x0)
msgrcv(r0, &(0x7f0000000640)={0x0, ""/97}, 0x69, 0x3, 0x800)
11:56:15 executing program 3:
mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0)
shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0)
finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00')
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)
11:56:15 executing program 1:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7f, 0x2, 0x9, 0x3, 0x0, 0x8001, 0x24000, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40e8, 0x6, @perf_config_ext={0x7ff, 0x200}, 0x41900, 0x1, 0x1e, 0x0, 0x4, 0x4, 0xfff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0xa)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x4, 0x1f, 0x4, 0x86, 0x0, 0x1ff, 0x3a04, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x7ff, 0x27}, 0x3200, 0xffff, 0x5, 0x5, 0x3, 0x800, 0x401, 0x0, 0x5, 0x0, 0x8}, 0xffffffffffffffff, 0xb, r0, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendfile(r1, r0, 0x0, 0x80000001)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000004c0)={0x5, 0x80, 0x4, 0x9, 0x0, 0x7, 0x0, 0xc0000000000, 0x40, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x8c03, 0xff, 0x5, 0x0, 0x8000, 0xbd5, 0xab2})
11:56:15 executing program 0:
msgsnd(0x0, &(0x7f0000000000)={0x2, "1072e6d3"}, 0xc, 0x0)
msgctl$IPC_RMID(0xffffffffffffffff, 0x0)
msgrcv(0xffffffffffffffff, &(0x7f0000000040)={0x0, ""/110}, 0x76, 0x0, 0x2800)
r0 = msgget(0x1, 0x12)
msgsnd(r0, &(0x7f00000000c0)={0x0, "d1d8be2ced509456b95bad2fa5bc84cbfc2183a9990843454cf327235803c33690a1e300fc819c14e38016ece19bccc18f49637ab108a1abed80d774db8fc091b3eef4e2eebb2ecaa647352f19203e9ebbb37f26c51c117bb9fce2c698306f49297488d8fc4ecb06ddac7d7bf854d41def8e5ee2e7cab72403b967747800f0a757882619b9ec26102eac9fecbc74ed9fd249e7d2050b94bc09c83384c35ca1f6c32847428d59b78b3640d921e3f094ff6ceacada4fb24ddd81d22249b0f6bb322c4526d58d311db5986d4c174edbc4ff3669b3891a7b4f5c39"}, 0xe1, 0x800)
r1 = msgget$private(0x0, 0x6b)
msgsnd(r1, &(0x7f00000001c0)={0x1, "925536216668ff5e13cccd8274a028bd599fe1e1c1c53f5453d1666cc784ab9700fecb67699ad7e90518f9cc314e06007dbeaf1be6226aa364f792a1c3f148aed1cf1f553bf72cc53aeaa37b5a9cccb77fa07ede0e65fcb9f8fb441aa5e479e9980b5397ce543289d2edddd110b683e13ea729c7bde85a0682851868b9009f3479fefc6872866048d6ca0eb86ccdaf30f2abdf3c29485620c75fe5efa99063cb631b568a5d4d4fc344473a805e2a5bf5bd5ecb9c2d5c8e00d9311006fcf702b45e4d6ce1f2f5bee3a233d920b410b1fc4d43486e2da1eaa763c7ad3ea66cce97bf27ace60e5ce18e645ca7f6a4518a"}, 0xf7, 0x800)
msgsnd(r1, &(0x7f00000002c0)={0x0, "14d82e6afccffdd7a713aa3caddb818bfdf9a3fed830d1c5c547393ba78784120e918dc680a69c511b8008d60a46504d14e91e6caaee6f2b52dd3ca79fdf1d89173f2b871546221de4f35d3f3f1c2eaf0963a529a2e3fc2e765e137b2e542b758be36df01334c7c0aae89eb7c8e5a106fd92321397dc1a4759ad2bf0a007a15766e13a28c6dba06971f36321e52a494902ae2a079e145f0638bcb15ace4920bca313e0660d07cf8f8b50e17f238d6443e2f229376805164a3289dd77aaca889ee4ceb9ad"}, 0xcc, 0x800)
r2 = msgget(0x3, 0x44)
msgsnd(r2, &(0x7f00000004c0)={0x3, "43cd688504e5d672f71ad2ce804295412541225f2db56a16d83c4391be75730489888694fb2408074ddcee45c006bc37a01d1f66ae88614d6add8cf8806b7efe118b91943b"}, 0x4d, 0x0)
msgrcv(r0, &(0x7f0000000640)={0x0, ""/97}, 0x69, 0x3, 0x800)
11:56:15 executing program 4:
msgsnd(0x0, &(0x7f0000000000)={0x2, "1072e6d3"}, 0xc, 0x0)
msgctl$IPC_RMID(0xffffffffffffffff, 0x0)
msgrcv(0xffffffffffffffff, &(0x7f0000000040)={0x0, ""/110}, 0x76, 0x0, 0x2800)
r0 = msgget(0x1, 0x12)
msgsnd(r0, &(0x7f00000000c0)={0x0, "d1d8be2ced509456b95bad2fa5bc84cbfc2183a9990843454cf327235803c33690a1e300fc819c14e38016ece19bccc18f49637ab108a1abed80d774db8fc091b3eef4e2eebb2ecaa647352f19203e9ebbb37f26c51c117bb9fce2c698306f49297488d8fc4ecb06ddac7d7bf854d41def8e5ee2e7cab72403b967747800f0a757882619b9ec26102eac9fecbc74ed9fd249e7d2050b94bc09c83384c35ca1f6c32847428d59b78b3640d921e3f094ff6ceacada4fb24ddd81d22249b0f6bb322c4526d58d311db5986d4c174edbc4ff3669b3891a7b4f5c39"}, 0xe1, 0x800)
r1 = msgget$private(0x0, 0x6b)
msgsnd(r1, &(0x7f00000001c0)={0x1, "925536216668ff5e13cccd8274a028bd599fe1e1c1c53f5453d1666cc784ab9700fecb67699ad7e90518f9cc314e06007dbeaf1be6226aa364f792a1c3f148aed1cf1f553bf72cc53aeaa37b5a9cccb77fa07ede0e65fcb9f8fb441aa5e479e9980b5397ce543289d2edddd110b683e13ea729c7bde85a0682851868b9009f3479fefc6872866048d6ca0eb86ccdaf30f2abdf3c29485620c75fe5efa99063cb631b568a5d4d4fc344473a805e2a5bf5bd5ecb9c2d5c8e00d9311006fcf702b45e4d6ce1f2f5bee3a233d920b410b1fc4d43486e2da1eaa763c7ad3ea66cce97bf27ace60e5ce18e645ca7f6a4518a"}, 0xf7, 0x800)
msgsnd(r1, &(0x7f00000002c0)={0x0, "14d82e6afccffdd7a713aa3caddb818bfdf9a3fed830d1c5c547393ba78784120e918dc680a69c511b8008d60a46504d14e91e6caaee6f2b52dd3ca79fdf1d89173f2b871546221de4f35d3f3f1c2eaf0963a529a2e3fc2e765e137b2e542b758be36df01334c7c0aae89eb7c8e5a106fd92321397dc1a4759ad2bf0a007a15766e13a28c6dba06971f36321e52a494902ae2a079e145f0638bcb15ace4920bca313e0660d07cf8f8b50e17f238d6443e2f229376805164a3289dd77aaca889ee4ceb9ad"}, 0xcc, 0x800)
r2 = msgget(0x3, 0x44)
msgsnd(r2, &(0x7f00000004c0)={0x3, "43cd688504e5d672f71ad2ce804295412541225f2db56a16d83c4391be75730489888694fb2408074ddcee45c006bc37a01d1f66ae88614d6add8cf8806b7efe118b91943b"}, 0x4d, 0x0)
msgrcv(r0, &(0x7f0000000640)={0x0, ""/97}, 0x69, 0x3, 0x800)
11:56:15 executing program 2:
r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00')
r2 = open(&(0x7f0000000180)='./file0\x00', 0x33002, 0x18)
openat(r2, &(0x7f00000001c0)='./file0\x00', 0x100, 0x1ea)
pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x180000000000000)
syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x12, 0xc8, &(0x7f0000000000)="b924038994273a4d28c9d89fb4cf756d162c76f458b3fbbb492916cc985eecec800860385ee70c9589e314c81376e0b5148af7a71ae4185feb82fe196cde111dffd376f401db602a667d26503c0aae67f6e7bd36b507baf6612cb006edb9b4eac5606e97b2d97dba1850ffdd2076163552d50eeb1dfd596bb2a7d1d4afdfa72db756c421ad9ddf1dc3ae3f0fcdcd783295eb9a6b50238b8a94890c1146200f010cb23e1a1e98de074d5a5299dc3aa539a2eb4fc248da2d0483dfcda36f5a0be62496425d79993bac"})
r3 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil)
shmat(r3, &(0x7f0000ff0000/0x3000)=nil, 0x4000)
mlock2(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x1)
r4 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil)
shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff8000/0x3000)=nil)
ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x7ff, 0x2, 0x10001, 0x3, 0x10000, 0x80})
shmat(r4, &(0x7f0000ffb000/0x4000)=nil, 0x0)
r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(r5, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
11:56:15 executing program 7:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7f, 0x2, 0x9, 0x3, 0x0, 0x8001, 0x24000, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40e8, 0x6, @perf_config_ext={0x7ff, 0x200}, 0x41900, 0x1, 0x1e, 0x0, 0x4, 0x4, 0xfff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0xa)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x4, 0x1f, 0x4, 0x86, 0x0, 0x1ff, 0x3a04, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x7ff, 0x27}, 0x3200, 0xffff, 0x5, 0x5, 0x3, 0x800, 0x401, 0x0, 0x5, 0x0, 0x8}, 0xffffffffffffffff, 0xb, r0, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendfile(r1, r0, 0x0, 0x80000001)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000004c0)={0x5, 0x80, 0x4, 0x9, 0x0, 0x7, 0x0, 0xc0000000000, 0x40, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x8c03, 0xff, 0x5, 0x0, 0x8000, 0xbd5, 0xab2})
11:56:15 executing program 5:
r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00')
r2 = open(&(0x7f0000000180)='./file0\x00', 0x33002, 0x18)
openat(r2, &(0x7f00000001c0)='./file0\x00', 0x100, 0x1ea)
pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x180000000000000)
syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x12, 0xc8, &(0x7f0000000000)="b924038994273a4d28c9d89fb4cf756d162c76f458b3fbbb492916cc985eecec800860385ee70c9589e314c81376e0b5148af7a71ae4185feb82fe196cde111dffd376f401db602a667d26503c0aae67f6e7bd36b507baf6612cb006edb9b4eac5606e97b2d97dba1850ffdd2076163552d50eeb1dfd596bb2a7d1d4afdfa72db756c421ad9ddf1dc3ae3f0fcdcd783295eb9a6b50238b8a94890c1146200f010cb23e1a1e98de074d5a5299dc3aa539a2eb4fc248da2d0483dfcda36f5a0be62496425d79993bac"})
r3 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil)
shmat(r3, &(0x7f0000ff0000/0x3000)=nil, 0x4000)
mlock2(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x1)
r4 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil)
shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff8000/0x3000)=nil)
ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x7ff, 0x2, 0x10001, 0x3, 0x10000, 0x80})
shmat(r4, &(0x7f0000ffb000/0x4000)=nil, 0x0)
r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(r5, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
11:56:15 executing program 6:
r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00')
r2 = open(&(0x7f0000000180)='./file0\x00', 0x33002, 0x18)
openat(r2, &(0x7f00000001c0)='./file0\x00', 0x100, 0x1ea)
pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x180000000000000)
syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x12, 0xc8, &(0x7f0000000000)="b924038994273a4d28c9d89fb4cf756d162c76f458b3fbbb492916cc985eecec800860385ee70c9589e314c81376e0b5148af7a71ae4185feb82fe196cde111dffd376f401db602a667d26503c0aae67f6e7bd36b507baf6612cb006edb9b4eac5606e97b2d97dba1850ffdd2076163552d50eeb1dfd596bb2a7d1d4afdfa72db756c421ad9ddf1dc3ae3f0fcdcd783295eb9a6b50238b8a94890c1146200f010cb23e1a1e98de074d5a5299dc3aa539a2eb4fc248da2d0483dfcda36f5a0be62496425d79993bac"})
r3 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil)
shmat(r3, &(0x7f0000ff0000/0x3000)=nil, 0x4000)
mlock2(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x1)
r4 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil)
shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff8000/0x3000)=nil)
ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x7ff, 0x2, 0x10001, 0x3, 0x10000, 0x80})
shmat(r4, &(0x7f0000ffb000/0x4000)=nil, 0x0)
r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(r5, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
11:56:15 executing program 4:
r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00')
r2 = open(&(0x7f0000000180)='./file0\x00', 0x33002, 0x18)
openat(r2, &(0x7f00000001c0)='./file0\x00', 0x100, 0x1ea)
pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x180000000000000)
syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x12, 0xc8, &(0x7f0000000000)="b924038994273a4d28c9d89fb4cf756d162c76f458b3fbbb492916cc985eecec800860385ee70c9589e314c81376e0b5148af7a71ae4185feb82fe196cde111dffd376f401db602a667d26503c0aae67f6e7bd36b507baf6612cb006edb9b4eac5606e97b2d97dba1850ffdd2076163552d50eeb1dfd596bb2a7d1d4afdfa72db756c421ad9ddf1dc3ae3f0fcdcd783295eb9a6b50238b8a94890c1146200f010cb23e1a1e98de074d5a5299dc3aa539a2eb4fc248da2d0483dfcda36f5a0be62496425d79993bac"})
r3 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil)
shmat(r3, &(0x7f0000ff0000/0x3000)=nil, 0x4000)
mlock2(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x1)
r4 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil)
shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff8000/0x3000)=nil)
ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x7ff, 0x2, 0x10001, 0x3, 0x10000, 0x80})
shmat(r4, &(0x7f0000ffb000/0x4000)=nil, 0x0)
r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(r5, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
11:56:15 executing program 5:
r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00')
r2 = open(&(0x7f0000000180)='./file0\x00', 0x33002, 0x18)
openat(r2, &(0x7f00000001c0)='./file0\x00', 0x100, 0x1ea)
pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x180000000000000)
syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x12, 0xc8, &(0x7f0000000000)="b924038994273a4d28c9d89fb4cf756d162c76f458b3fbbb492916cc985eecec800860385ee70c9589e314c81376e0b5148af7a71ae4185feb82fe196cde111dffd376f401db602a667d26503c0aae67f6e7bd36b507baf6612cb006edb9b4eac5606e97b2d97dba1850ffdd2076163552d50eeb1dfd596bb2a7d1d4afdfa72db756c421ad9ddf1dc3ae3f0fcdcd783295eb9a6b50238b8a94890c1146200f010cb23e1a1e98de074d5a5299dc3aa539a2eb4fc248da2d0483dfcda36f5a0be62496425d79993bac"})
r3 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil)
shmat(r3, &(0x7f0000ff0000/0x3000)=nil, 0x4000)
mlock2(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x1)
r4 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil)
shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff8000/0x3000)=nil)
ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x7ff, 0x2, 0x10001, 0x3, 0x10000, 0x80})
shmat(r4, &(0x7f0000ffb000/0x4000)=nil, 0x0)
r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(r5, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
11:56:15 executing program 2:
r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00')
r2 = open(&(0x7f0000000180)='./file0\x00', 0x33002, 0x18)
openat(r2, &(0x7f00000001c0)='./file0\x00', 0x100, 0x1ea)
pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x180000000000000)
syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x12, 0xc8, &(0x7f0000000000)="b924038994273a4d28c9d89fb4cf756d162c76f458b3fbbb492916cc985eecec800860385ee70c9589e314c81376e0b5148af7a71ae4185feb82fe196cde111dffd376f401db602a667d26503c0aae67f6e7bd36b507baf6612cb006edb9b4eac5606e97b2d97dba1850ffdd2076163552d50eeb1dfd596bb2a7d1d4afdfa72db756c421ad9ddf1dc3ae3f0fcdcd783295eb9a6b50238b8a94890c1146200f010cb23e1a1e98de074d5a5299dc3aa539a2eb4fc248da2d0483dfcda36f5a0be62496425d79993bac"})
r3 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil)
shmat(r3, &(0x7f0000ff0000/0x3000)=nil, 0x4000)
mlock2(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x1)
r4 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil)
shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff8000/0x3000)=nil)
ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x7ff, 0x2, 0x10001, 0x3, 0x10000, 0x80})
shmat(r4, &(0x7f0000ffb000/0x4000)=nil, 0x0)
r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(r5, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
11:56:15 executing program 0:
msgsnd(0x0, &(0x7f0000000000)={0x2, "1072e6d3"}, 0xc, 0x0)
msgctl$IPC_RMID(0xffffffffffffffff, 0x0)
msgrcv(0xffffffffffffffff, &(0x7f0000000040)={0x0, ""/110}, 0x76, 0x0, 0x2800)
r0 = msgget(0x1, 0x12)
msgsnd(r0, &(0x7f00000000c0)={0x0, "d1d8be2ced509456b95bad2fa5bc84cbfc2183a9990843454cf327235803c33690a1e300fc819c14e38016ece19bccc18f49637ab108a1abed80d774db8fc091b3eef4e2eebb2ecaa647352f19203e9ebbb37f26c51c117bb9fce2c698306f49297488d8fc4ecb06ddac7d7bf854d41def8e5ee2e7cab72403b967747800f0a757882619b9ec26102eac9fecbc74ed9fd249e7d2050b94bc09c83384c35ca1f6c32847428d59b78b3640d921e3f094ff6ceacada4fb24ddd81d22249b0f6bb322c4526d58d311db5986d4c174edbc4ff3669b3891a7b4f5c39"}, 0xe1, 0x800)
r1 = msgget$private(0x0, 0x6b)
msgsnd(r1, &(0x7f00000001c0)={0x1, "925536216668ff5e13cccd8274a028bd599fe1e1c1c53f5453d1666cc784ab9700fecb67699ad7e90518f9cc314e06007dbeaf1be6226aa364f792a1c3f148aed1cf1f553bf72cc53aeaa37b5a9cccb77fa07ede0e65fcb9f8fb441aa5e479e9980b5397ce543289d2edddd110b683e13ea729c7bde85a0682851868b9009f3479fefc6872866048d6ca0eb86ccdaf30f2abdf3c29485620c75fe5efa99063cb631b568a5d4d4fc344473a805e2a5bf5bd5ecb9c2d5c8e00d9311006fcf702b45e4d6ce1f2f5bee3a233d920b410b1fc4d43486e2da1eaa763c7ad3ea66cce97bf27ace60e5ce18e645ca7f6a4518a"}, 0xf7, 0x800)
msgsnd(r1, &(0x7f00000002c0)={0x0, "14d82e6afccffdd7a713aa3caddb818bfdf9a3fed830d1c5c547393ba78784120e918dc680a69c511b8008d60a46504d14e91e6caaee6f2b52dd3ca79fdf1d89173f2b871546221de4f35d3f3f1c2eaf0963a529a2e3fc2e765e137b2e542b758be36df01334c7c0aae89eb7c8e5a106fd92321397dc1a4759ad2bf0a007a15766e13a28c6dba06971f36321e52a494902ae2a079e145f0638bcb15ace4920bca313e0660d07cf8f8b50e17f238d6443e2f229376805164a3289dd77aaca889ee4ceb9ad"}, 0xcc, 0x800)
r2 = msgget(0x3, 0x44)
msgsnd(r2, &(0x7f00000004c0)={0x3, "43cd688504e5d672f71ad2ce804295412541225f2db56a16d83c4391be75730489888694fb2408074ddcee45c006bc37a01d1f66ae88614d6add8cf8806b7efe118b91943b"}, 0x4d, 0x0)
msgrcv(r0, &(0x7f0000000640)={0x0, ""/97}, 0x69, 0x3, 0x800)
11:56:15 executing program 1:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7f, 0x2, 0x9, 0x3, 0x0, 0x8001, 0x24000, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40e8, 0x6, @perf_config_ext={0x7ff, 0x200}, 0x41900, 0x1, 0x1e, 0x0, 0x4, 0x4, 0xfff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0xa)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0)
pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x4, 0x1f, 0x4, 0x86, 0x0, 0x1ff, 0x3a04, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x7ff, 0x27}, 0x3200, 0xffff, 0x5, 0x5, 0x3, 0x800, 0x401, 0x0, 0x5, 0x0, 0x8}, 0xffffffffffffffff, 0xb, r0, 0x8)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendfile(r1, r0, 0x0, 0x80000001)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000004c0)={0x5, 0x80, 0x4, 0x9, 0x0, 0x7, 0x0, 0xc0000000000, 0x40, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0x1}, 0x8c03, 0xff, 0x5, 0x0, 0x8000, 0xbd5, 0xab2})
11:56:15 executing program 7:
r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00')
r2 = open(&(0x7f0000000180)='./file0\x00', 0x33002, 0x18)
openat(r2, &(0x7f00000001c0)='./file0\x00', 0x100, 0x1ea)
pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x180000000000000)
syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x12, 0xc8, &(0x7f0000000000)="b924038994273a4d28c9d89fb4cf756d162c76f458b3fbbb492916cc985eecec800860385ee70c9589e314c81376e0b5148af7a71ae4185feb82fe196cde111dffd376f401db602a667d26503c0aae67f6e7bd36b507baf6612cb006edb9b4eac5606e97b2d97dba1850ffdd2076163552d50eeb1dfd596bb2a7d1d4afdfa72db756c421ad9ddf1dc3ae3f0fcdcd783295eb9a6b50238b8a94890c1146200f010cb23e1a1e98de074d5a5299dc3aa539a2eb4fc248da2d0483dfcda36f5a0be62496425d79993bac"})
r3 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil)
shmat(r3, &(0x7f0000ff0000/0x3000)=nil, 0x4000)
mlock2(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x1)
r4 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil)
shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff8000/0x3000)=nil)
ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x7ff, 0x2, 0x10001, 0x3, 0x10000, 0x80})
shmat(r4, &(0x7f0000ffb000/0x4000)=nil, 0x0)
r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(r5, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
11:56:15 executing program 6:
r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00')
r2 = open(&(0x7f0000000180)='./file0\x00', 0x33002, 0x18)
openat(r2, &(0x7f00000001c0)='./file0\x00', 0x100, 0x1ea)
pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x180000000000000)
syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x12, 0xc8, &(0x7f0000000000)="b924038994273a4d28c9d89fb4cf756d162c76f458b3fbbb492916cc985eecec800860385ee70c9589e314c81376e0b5148af7a71ae4185feb82fe196cde111dffd376f401db602a667d26503c0aae67f6e7bd36b507baf6612cb006edb9b4eac5606e97b2d97dba1850ffdd2076163552d50eeb1dfd596bb2a7d1d4afdfa72db756c421ad9ddf1dc3ae3f0fcdcd783295eb9a6b50238b8a94890c1146200f010cb23e1a1e98de074d5a5299dc3aa539a2eb4fc248da2d0483dfcda36f5a0be62496425d79993bac"})
r3 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil)
shmat(r3, &(0x7f0000ff0000/0x3000)=nil, 0x4000)
mlock2(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x1)
r4 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil)
shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff8000/0x3000)=nil)
ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x7ff, 0x2, 0x10001, 0x3, 0x10000, 0x80})
shmat(r4, &(0x7f0000ffb000/0x4000)=nil, 0x0)
r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(r5, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
11:56:15 executing program 5:
r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00')
r2 = open(&(0x7f0000000180)='./file0\x00', 0x33002, 0x18)
openat(r2, &(0x7f00000001c0)='./file0\x00', 0x100, 0x1ea)
pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x180000000000000)
syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x12, 0xc8, &(0x7f0000000000)="b924038994273a4d28c9d89fb4cf756d162c76f458b3fbbb492916cc985eecec800860385ee70c9589e314c81376e0b5148af7a71ae4185feb82fe196cde111dffd376f401db602a667d26503c0aae67f6e7bd36b507baf6612cb006edb9b4eac5606e97b2d97dba1850ffdd2076163552d50eeb1dfd596bb2a7d1d4afdfa72db756c421ad9ddf1dc3ae3f0fcdcd783295eb9a6b50238b8a94890c1146200f010cb23e1a1e98de074d5a5299dc3aa539a2eb4fc248da2d0483dfcda36f5a0be62496425d79993bac"})
r3 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil)
shmat(r3, &(0x7f0000ff0000/0x3000)=nil, 0x4000)
mlock2(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x1)
r4 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil)
shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff8000/0x3000)=nil)
ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x7ff, 0x2, 0x10001, 0x3, 0x10000, 0x80})
shmat(r4, &(0x7f0000ffb000/0x4000)=nil, 0x0)
r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(r5, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
11:56:15 executing program 0:
r0 = memfd_create(&(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x6)
pread64(r0, &(0x7f0000000000)=""/101, 0x65, 0x0)
11:56:15 executing program 4:
r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00')
r2 = open(&(0x7f0000000180)='./file0\x00', 0x33002, 0x18)
openat(r2, &(0x7f00000001c0)='./file0\x00', 0x100, 0x1ea)
pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x180000000000000)
syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x12, 0xc8, &(0x7f0000000000)="b924038994273a4d28c9d89fb4cf756d162c76f458b3fbbb492916cc985eecec800860385ee70c9589e314c81376e0b5148af7a71ae4185feb82fe196cde111dffd376f401db602a667d26503c0aae67f6e7bd36b507baf6612cb006edb9b4eac5606e97b2d97dba1850ffdd2076163552d50eeb1dfd596bb2a7d1d4afdfa72db756c421ad9ddf1dc3ae3f0fcdcd783295eb9a6b50238b8a94890c1146200f010cb23e1a1e98de074d5a5299dc3aa539a2eb4fc248da2d0483dfcda36f5a0be62496425d79993bac"})
r3 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil)
shmat(r3, &(0x7f0000ff0000/0x3000)=nil, 0x4000)
mlock2(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x1)
r4 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil)
shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff8000/0x3000)=nil)
ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x7ff, 0x2, 0x10001, 0x3, 0x10000, 0x80})
shmat(r4, &(0x7f0000ffb000/0x4000)=nil, 0x0)
r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(r5, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
11:56:15 executing program 2:
r0 = timerfd_create(0x9, 0x0)
close(r0)
11:56:15 executing program 3:
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000580))
r0 = socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0xfffffffa, 0x4)
11:56:15 executing program 2:
r0 = timerfd_create(0x9, 0x0)
close(r0)
11:56:15 executing program 6:
r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00')
r2 = open(&(0x7f0000000180)='./file0\x00', 0x33002, 0x18)
openat(r2, &(0x7f00000001c0)='./file0\x00', 0x100, 0x1ea)
pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x180000000000000)
syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x12, 0xc8, &(0x7f0000000000)="b924038994273a4d28c9d89fb4cf756d162c76f458b3fbbb492916cc985eecec800860385ee70c9589e314c81376e0b5148af7a71ae4185feb82fe196cde111dffd376f401db602a667d26503c0aae67f6e7bd36b507baf6612cb006edb9b4eac5606e97b2d97dba1850ffdd2076163552d50eeb1dfd596bb2a7d1d4afdfa72db756c421ad9ddf1dc3ae3f0fcdcd783295eb9a6b50238b8a94890c1146200f010cb23e1a1e98de074d5a5299dc3aa539a2eb4fc248da2d0483dfcda36f5a0be62496425d79993bac"})
r3 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil)
shmat(r3, &(0x7f0000ff0000/0x3000)=nil, 0x4000)
mlock2(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x1)
r4 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil)
shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff8000/0x3000)=nil)
ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x7ff, 0x2, 0x10001, 0x3, 0x10000, 0x80})
shmat(r4, &(0x7f0000ffb000/0x4000)=nil, 0x0)
r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(r5, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
11:56:15 executing program 3:
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000580))
r0 = socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0xfffffffa, 0x4)
11:56:15 executing program 7:
r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00')
r2 = open(&(0x7f0000000180)='./file0\x00', 0x33002, 0x18)
openat(r2, &(0x7f00000001c0)='./file0\x00', 0x100, 0x1ea)
pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x180000000000000)
syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x12, 0xc8, &(0x7f0000000000)="b924038994273a4d28c9d89fb4cf756d162c76f458b3fbbb492916cc985eecec800860385ee70c9589e314c81376e0b5148af7a71ae4185feb82fe196cde111dffd376f401db602a667d26503c0aae67f6e7bd36b507baf6612cb006edb9b4eac5606e97b2d97dba1850ffdd2076163552d50eeb1dfd596bb2a7d1d4afdfa72db756c421ad9ddf1dc3ae3f0fcdcd783295eb9a6b50238b8a94890c1146200f010cb23e1a1e98de074d5a5299dc3aa539a2eb4fc248da2d0483dfcda36f5a0be62496425d79993bac"})
r3 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil)
shmat(r3, &(0x7f0000ff0000/0x3000)=nil, 0x4000)
mlock2(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x1)
r4 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil)
shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff8000/0x3000)=nil)
ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x7ff, 0x2, 0x10001, 0x3, 0x10000, 0x80})
shmat(r4, &(0x7f0000ffb000/0x4000)=nil, 0x0)
r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(r5, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
11:56:15 executing program 0:
r0 = memfd_create(&(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x6)
pread64(r0, &(0x7f0000000000)=""/101, 0x65, 0x0)
11:56:15 executing program 4:
r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00')
r2 = open(&(0x7f0000000180)='./file0\x00', 0x33002, 0x18)
openat(r2, &(0x7f00000001c0)='./file0\x00', 0x100, 0x1ea)
pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x180000000000000)
syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x12, 0xc8, &(0x7f0000000000)="b924038994273a4d28c9d89fb4cf756d162c76f458b3fbbb492916cc985eecec800860385ee70c9589e314c81376e0b5148af7a71ae4185feb82fe196cde111dffd376f401db602a667d26503c0aae67f6e7bd36b507baf6612cb006edb9b4eac5606e97b2d97dba1850ffdd2076163552d50eeb1dfd596bb2a7d1d4afdfa72db756c421ad9ddf1dc3ae3f0fcdcd783295eb9a6b50238b8a94890c1146200f010cb23e1a1e98de074d5a5299dc3aa539a2eb4fc248da2d0483dfcda36f5a0be62496425d79993bac"})
r3 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil)
shmat(r3, &(0x7f0000ff0000/0x3000)=nil, 0x4000)
mlock2(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x1)
r4 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil)
shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff8000/0x3000)=nil)
ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x7ff, 0x2, 0x10001, 0x3, 0x10000, 0x80})
shmat(r4, &(0x7f0000ffb000/0x4000)=nil, 0x0)
r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(r5, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
11:56:15 executing program 2:
r0 = timerfd_create(0x9, 0x0)
close(r0)
11:56:15 executing program 3:
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000580))
r0 = socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0xfffffffa, 0x4)
11:56:15 executing program 0:
r0 = memfd_create(&(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x6)
pread64(r0, &(0x7f0000000000)=""/101, 0x65, 0x0)
11:56:15 executing program 7:
r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00')
r2 = open(&(0x7f0000000180)='./file0\x00', 0x33002, 0x18)
openat(r2, &(0x7f00000001c0)='./file0\x00', 0x100, 0x1ea)
pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x180000000000000)
syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, r1}}, 0x0)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000100)={0x12, 0xc8, &(0x7f0000000000)="b924038994273a4d28c9d89fb4cf756d162c76f458b3fbbb492916cc985eecec800860385ee70c9589e314c81376e0b5148af7a71ae4185feb82fe196cde111dffd376f401db602a667d26503c0aae67f6e7bd36b507baf6612cb006edb9b4eac5606e97b2d97dba1850ffdd2076163552d50eeb1dfd596bb2a7d1d4afdfa72db756c421ad9ddf1dc3ae3f0fcdcd783295eb9a6b50238b8a94890c1146200f010cb23e1a1e98de074d5a5299dc3aa539a2eb4fc248da2d0483dfcda36f5a0be62496425d79993bac"})
r3 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil)
shmat(r3, &(0x7f0000ff0000/0x3000)=nil, 0x4000)
mlock2(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x1)
r4 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil)
shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff8000/0x3000)=nil)
ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x7ff, 0x2, 0x10001, 0x3, 0x10000, 0x80})
shmat(r4, &(0x7f0000ffb000/0x4000)=nil, 0x0)
r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil)
shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
shmctl$IPC_RMID(r5, 0x0)
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92)
11:56:15 executing program 1:
syz_io_uring_setup(0x1023, &(0x7f0000000140), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200))
11:56:15 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newpolicy={0xb8, 0x13, 0x221, 0x0, 0x0, {{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}}}, 0xb8}}, 0x0)
11:56:15 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)
11:56:15 executing program 3:
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000580))
r0 = socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0xfffffffa, 0x4)
11:56:15 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newpolicy={0xb8, 0x13, 0x221, 0x0, 0x0, {{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}}}, 0xb8}}, 0x0)
11:56:15 executing program 2:
r0 = timerfd_create(0x9, 0x0)
close(r0)
11:56:15 executing program 0:
r0 = memfd_create(&(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x6)
pread64(r0, &(0x7f0000000000)=""/101, 0x65, 0x0)
11:56:15 executing program 1:
r0 = getpid()
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
read(r1, &(0x7f0000000080)=""/1, 0x1)
write$cgroup_pid(r1, &(0x7f00000000c0)=r0, 0x12)
close(r1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x0)
11:56:15 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)
11:56:15 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newpolicy={0xb8, 0x13, 0x221, 0x0, 0x0, {{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}}}, 0xb8}}, 0x0)
11:56:16 executing program 4:
getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000001580))
syz_mount_image$vfat(&(0x7f0000001600), &(0x7f0000001640)='./file0\x00', 0x3ff, 0x5, &(0x7f00000028c0)=[{&(0x7f0000001680)="142721", 0x3}, {&(0x7f00000016c0)="3194d6f02a7828c91153d0f90a87afb14f3883dd91df2540c699656d192552eb95a9dad5fdc3bff1524ea2643288033e34b1ec94ad32c4772ebebeb7b98e2a44bc9c041801b938a0402b9ecc76b8779621883370f9cf7f0f98ee303ee201490cb15850d54d41e6ca73db62b289ae2fb9abfc9df970ddac4e6c", 0x79, 0x10001}, {&(0x7f00000026c0)}, {&(0x7f0000002700)}, {0x0}], 0x2a91002, &(0x7f0000002940)={[], [{@obj_user}, {@uid_gt={'uid>', 0xffffffffffffffff}}]})
mkdirat(0xffffffffffffffff, &(0x7f0000002a00)='./file0\x00', 0x46)
r0 = syz_mount_image$iso9660(&(0x7f0000002a40), &(0x7f0000002a80)='./file0\x00', 0x0, 0x2, &(0x7f0000005e80)=[{&(0x7f0000002ac0)="51b2255a2305da33a97da72a8f36713c1025c36df1ca191291e4ab0e92bb9b5c0594ebb8964a76d1cb674ac6508445366117bea31fca192263900aeba03f7873226d299ffe0350ab803bc642fadbb4dbc51049ca76cb5d715ea77cd02832459589ff97d6950aa6cc1269cdf3e774dd0b127ae26cb02a2fcb6dcfceb639cda552ede9ca99a9042d3d2cb6f4825317e9dfe0657333427d07b5e97d48a33e8527935cfcabbab21c5a53db53b9555725bd98543750c69304dfe338a2ff3c1128397a64d505b09071a01152a157df9e3f0ebf1f2e5c92b7b0f1cb61f880083d71c319a38a76046e1bb3b06af28ad573f5a8976138c0a1a8c27b0864a64044f667409d9f89ec08e83d3db8912e52d93d0a2960645991fa07e6cff14334ef42bee95c56c0668d36d3a7e70ba0eb8a3bd2f8419bdcb356c3f5fea2073b13fc9b937d1a1309fdbf66cd1bf69e7cd6c0201101e4ef5014a8add7367e57e1b371e280342f7aa0eedac2d39ddbb8646ab422b2d5a668af86e55ed1297258e06026df6410da8a6ab7ef20a9e85281769862691f57795778c0cd488cdf34aff279a0d059a4847633fd70249a97262c4c9d9bc7310aa6542083d52550a2cc844d60d1ff023bec9b0ce6ea6438f422c7353e68e95232e0a2896778f5e766de33d3e4f5965df14547e40aeeb31b94902713acc67e4557cd9a85da22b8c74d28728fff072c76a1a68bd765317e78546f30827992324009aaaf1c03c5139534b350b2e99bae802e95bc22b85f15aba840eb9a6d8762e1b799aa11c9587e024b74ec46a71ae52ddae1138b068e225ae76a67e7b9fa4970df6c2fe44552868c5b34d69fa3878aafdf2536a1756fcbb3b16a27d589dd0119f1713fa0645bcc8decaf6c9d0f7847dd4e32abfd9b3e7ca947fb3dbf2b277764aa473ba1295b0feac30bb511818403a897ca9cc5a160cb4bdd8ab4ebb8bc9aab0e804a877dc8e6f0f80884d4c86dc4f977a03054b7596a30f66edeee1a53b874df47ff16ee539a8f68c08f9604f4a1b6f885ce8b530022f914a30aeac86749ae47d126ad573e313123497aa45b4f04036deb29963094d5d521a104c648545f52333afbc3272cc5825738a8d382b6a35b7a840e8522b45585354606f209c839ee8eeeb5ea7e4a17c59c74a1e41a75c5d3a4d13c3587cec699b6fbdfdfd17d8ddad572434c4ba736e4d5f0cf0d27fef0b0b07c0cb8d14d3ac4c914c504f27dc595d93f898f327077b183a3ad5cc5cc9cea764731a62d9a2f7374f85057274b4a3f1fe90e5f535e347b4b4f3651bbc6bbf47fbd50386190282ae161878cd2a295048d871ab16d4f3702c9356c675c9b3dcfda88203862409c84cbb16cee88ea209a9fe050b639162a93a34f4f3f14fab8c84e69b2b7060ffd83e2e93728f96e14f8304ffd8e599b8d012dc496848a98c0ed32bd05241d7cd8c8575095174022810fa9c10bad6b56e477a1a6ee659748579b3ece46e2ad8c65baa51e6ee63b6b08d63b1c0d76fd179bbc63691aeae8a0262b34d6d2bfd93265ab56c4874eaa98bb1ca13f571757409514c2298adfe6fef32f816049a87eca208a540673499f5a3ff95a60990f7de4e36f771ac6afa0a1fdf42b966142ee471b1ff26f3d1be327ad54832059fbfeac9d7ae8613ff8710c782521337515ed75b81be5b236f04b04369a61aea1958ae71c845fb7012b145d527429c32890203803e96df10af5455eb52f401a2985942ecd8833374e7c67d0c86ecc4bddebf4b5bf728fe10e7a668b5f620f8a0adb1215fac18e97fbb9acfc17acc3cc159fef25e76a8ce1af4f412443ce6d7d4482ed046cd1d1dc245e85041cf9afd915c306d586dbe5809409b950bc36e23ee53536481bcd7b35b572dbdc21015b0aa861771f10af5f6e53e251314e6dfd5b832afd0a6488f5d068e39eaf9c2908cbd587ab2d15b7b5c6efd334465026697c2470d5444d78c3fcd9f5ff43b5b97e69e5bbc4d36a18b57d0cd078da908ce2e080e08c060db89494535791a8fb5225c056e1c9c5465376c8401175ffe74e98647fc1bc235a8d0cb5bf5def3bb4e7176d6772e3c5abe59825bcf4a9d9f32bb4b3535b0097ea868c1b4ecfc2e1482b7672c0561fc3a24281848e76c7b20fe758dbaa314928300bc1c532ca412180de2060c26c6b3a3fdc221623cd5b4200a433de7d82ef2627b19ff8480cea7ef41e578eb5a6c3898837833ecbac49a59ebbd900904eda3169292a34bfa90371190ba094f5eb4533cbfdb6b35dafe1efd55250599902fd04213e74f6f3dd7a121f812b027fa1a6d6d3bcd88ae8a90620be45ea137841de90a4b75da42c871b8be18ff5b05fd1fc3afff39631e214610819f1d68cdfe3d35f8fce82cf68f5719f06c463b49f5a12f2b1647c1ce3fdf04cc59c927cd7ae215ed9087d01a7270f692e68aee10dfe8bdcaeae937ffe5fb82e350f48b17de557c63523005ed45c96a7cd1ec115f542a31cb7dcf5c93631f67035cc4cd06dbf03bd3e8ba3c07c00833fd7311acdf097a7014416bef7b67dce78bce28dc1f54d5388be9f932441382badb72a685c6f9ebbf21095a2aaee8e6a9fad353880144ad59012bc6fd1bb327d11146b07b7ec840499a4f80a39af263462d42995ab70070040f45995b16c0aacf89c991e66f88827e46fad1f24453402bee08dfe70856ca613a8a598fde96dae22196e1f00d77f16646b8a37f2ade5d7d8c2c3cedbe6951918077a284ca4bdf0830975fb7eed5602e40fef3cd5b2b926bf0c031fe7de9c65777ba634e5ff81ac8c76cd67670483db37168fcf6cd4dc6d609097e5d352e242d95571aa6d75fda26de8b3782e6d41b9c2deeba00d2f4c372633b0fe42f58148b0d44c714921c7daf2c25a8da2b137844911b453e4d1f2006a8d70959a8eadbb018f50cb7d55a5b98360d44ff434d813ff6e56c44f18ea111ed96bddbbb86f35a5799db0f079b06fb3cb24a7f9d7330e77d39340fe4882e48cf96c46b2e835ad35a565be3c03f048b440f4895717db42401c176fb97fc74cad9ccf779ce8e8af4f950ea668302fb3f6dc381cb41648f62e4b2be363aa32134ddef36eb04fb1b0808e96bff79bb056f1e36257c3c62bc8e416bd2e85fb85adc6d55ace9480eb5b242283e530b32ccb464138069f888573383354311c8e06a26bd160e1dfa8e21480ef7433fbf4f0674ff0864745a44f1c41cceba28d81d606bc5ebe40581140a0489060ba0902a0eb3deb96649d9c0874fa14506854471114a08e55d66551d3955e528eb5fb0ce15c2ed33c51a3981a8a69b023d0cadd0dd3ee92a885cdda8c9e48226eb598acaf91df3c9a80d2fd5b8bed826f67e6227020a58017f415b8daf14c027653bcffcbc2bcbe143937498f37f24b635d74bad1690596cdb67fa56b6400dfb03cb1f1ab7503d7052ce63aa4dbbfe438b895f69bcf612c15b830feecd908eabafd9e96274427b8e6aa5a34534b547899cf6e1ed0132b1a780dc7cbc66cbd3dab6f9a90a87e495ff3c0c71da8cfcad142a72b65b5ebacd440a88b0c2f991bdecb511a893d28bbd9f161b85ebf477f0b2666e0e1cbc82912be612ddabd6724bcf438474a72590f315a3d2eaf1424b038cc366cc22960f8410b7d433a0280efa0493668d6f39d8a6ef6bcdbe82d0baced21fb8ad77a41ecc6b90fa385daf3dfdb5a9046c87f7bbba20bd6f20e934e7d33c37be4e5e4d5c58f3bdc7654460c6039f4b888aefd62e3ff0dbaa64c3d230200565b25aeff36502c53aec8e40591c74317e1b3197355c9d9e6c2eb58b96ad257a300559c03c94e6fb4c0e4567049545d94293246664e9a85d30e8f640c64ac9b2ab945217bb33e94ff989390e289f0ba36d5d25f6684541fa3d025a30e0689d5ad65ef61dc551b18d790a9b0ccf764d978aad85b18acc8e4f0f4bfd4025de446c22ffb4d9d8a07af48a1b0690f3fd516ca1e019137bdac8c6a822859a3a17ee2ea7a34ccf7392e6900efbe190a3847331efde9998e6fa13047aa06c8ae3bb343d266c46e785f6feb4fd565bdfcadfa20211def7a3ec932730efeb4f3a21cbfcb7de7121cce3bda7ae363e832afdbdfdeeecc7e85d122c15cf4d8797fc84021b1a248ff99c29df038d6720b79e29b7590b65167060a2e0a8d7ef746e26e6e41eb13e2bec1ec62e7715eb49c78f7028c410d3bad042de306e8ef86be3fe25eccc3c47b4ba2670bceb27ae8c66a55596723efe7b811e4387152cd37e222c8d4d45418ab90a4c86b1b22d6227690080ee639115e569bd6e02c2044bdca4d8b8cdb9d920da1732a7ad8dd9d20f3abad0a489f4460c62292c443ed5aa3d604b564b86ee5383cd1a462d7259a324eeec660df2a52840adc4a40982229c70c66e9d40a89db49629f853b44e1d8d3b73561c9197e95edf002963438614c083425057cb8208601febb4368dcf0d43cd8715ac6d9b403c4328476dd6d34b71113fc576014ac155b8fa7e5c963ccd938137bffb8e06ae70a1ff3374d0be6f5b15a39858e89978b4129e248f7f4c49d227d21d64e499c7b5aaa3e3ca805f34850c22fc7743650bdf22191daf37341c566db044b4298c07b4c2948044a0bdc6c2135038d575abd7e1495b7483565c500961be7b48f17ec35cbc404f9914502e4c17a2ffada66893a66fa5a65244fe0e029143a97dfe970c6c45307c2c5ffacec2d85000f5aa67358898241d6d0584385ed34b98da51eef44b798a356f8827af5bfd65cf54f358c8f41e6e731665970b2d377d95d4dae8234b3a47a4b4d2034d697a7b9934610dbae903b8d8c9ee38103fd724465db92833f88933678f0f44773fc957b13d8a8c32e38912abea5476d23752b1d349f9432a9fef51d1787faab77e000c1b7b2fbb3d0ac789752a7395bbc5b6f57e77faeaab57bbb68ab7a6a02c351151f3d9619c7848e77797a1622e8573083720ba653241c3b77f2b49b4f671a3fe6a3446df33a097be6ece6f583e14e789b179f03e8100fe61ba0e552c2e3bd47788a56f57a2bcef48db167e103a3b681397131871b74c5e76a283d6c0d3f679f68f69963a3adeb1166ba1391777a95b297da59767d955a119b677a4823267a6710fc8e62f9369ad55b600f721b589d6c4fde6bdb8947eae6ddbdc75e869e2d7d20036539eb408fd627cff5242abd55c94355c4dbe6543c74b3cd51d08b3d24da0127a81d4a78bc7b5a37994f158e79c1eb5cdcf202fa483814dc6a56c8713530db14f23f286f7c0b9d7a595b68d37e2e15628bd03190a0c0ae0fcb8b088563f18174d4a0a035acb436ffd0886b3f3f9cc270e6174a1d8cb613ed56e74bdaf96a2cdbd220526880abe25dbc1768289f2ebbe55b25d7da45286e1e3af2dc7993a9b120a5299b745138c96498da1760063a684ed89f92f6867832c95a6cd44bf479b100e667d7d966e679441bb0add2a643a3b43931241efa145a6b051e6de39ccab62432b434fca9f0c8e39cdf0e23bc954ec48ca64e2f025fd955f25475ff1a189b4ab8d165c3ade44042e1173f67c742b8b7e24fa9b104e3dee994f4d016eadaca52b06a4e3fdebfb6899eaa13112a59938fccc70d8e30541fb1301cca0b4e4f1de1ac127e923c2f1f4642c4c77b44ad093962a0c15d232086e9c7798f3e6b25e8a8a99babe021db4e3aadaf0c0b82d536e64f6623dfbe40ebafefc5cfde3cd417d6498fda79551ee1d1939e556f4f2588617a6652fb6776c9f9e4b7c2df09a0f0729857d8a886bdbfc0c5734d99d50201989f54d350f00da075df02dddab11b", 0xffe, 0x3}, {0x0}], 0x0, &(0x7f0000005f80)={[{@utf8}, {@map_normal}, {@dmode={'dmode', 0x3d, 0x800}}, {@sbsector}, {@utf8}], [{@fsuuid}]})
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000006780)={0x0, 0x0, &(0x7f0000006740)={0x0}}, 0x0)
statx(r0, 0x0, 0x2000, 0x0, 0x0)
name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000006a40), 0x0, 0xffffffffffffebc2, 0x0, 0x0, 0x0, 0x0)
11:56:16 executing program 7:
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'macvlan1\x00', {0x2, 0x0, @empty}})
r0 = syz_mount_image$tmpfs(0x0, &(0x7f00000014c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00')
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0, @out_args}, './file1\x00'})
r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000980)='./file0/file0\x00', &(0x7f00000009c0)={0x8000, 0xeb, 0x2}, 0x18)
fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000900)=',\\^\x00', &(0x7f0000000940)='./file0\x00', r2)
lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0)
name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
io_uring_register$I
VM DIAGNOSIS:
11:56:12 Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=ffff88800f997538 RCX=ffff88800f997510 RDX=1ffff11001f32ea9
RSI=ffffffff8135a03c RDI=ffff88800f997548 RBP=ffff88800f997508 RSP=ffff88800f997450
R8 =ffffffff85e30d1c R9 =ffffffff85e30d20 R10=ffffed1001f32e9b R11=ffff88800f9974b0
R12=ffff88800f997538 R13=0000000000000000 R14=ffff88800ff01ac0 R15=0000000000092800
RIP=ffffffff81359de2 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f30aea8c8c0 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbd7e58e6f4 CR3=0000000017618000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff
YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM02=0000000000000000 0000000000000000 ffffffffffffffff 00000000000000ff
YMM03=0000000000000000 0000000000000000 696e656420737365 636341002f737973
YMM04=0000000000000000 0000000000000000 000055dc919d8760 000055dc919e5970
YMM05=0000000000000000 0000000000000000 020101010000ff00 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000500000004 000055dc919b4360
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000031 00007265776f7000
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff822b17e1 RDI=ffffffff87645be0 RBP=ffffffff87645ba0 RSP=ffff88803f3f7698
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000061 R11=0000000000000001
R12=0000000000000061 R13=ffffffff87645ba0 R14=0000000000000010 R15=ffffffff822b17d0
RIP=ffffffff822b1839 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f0b8428a700 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000048000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=0000000020000080 CR3=0000000034022000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 00007f0b86dfb7c0 00007f0b86dfb7c8
YMM02=0000000000000000 0000000000000000 00007f0b86dfb7e0 00007f0b86dfb7c0
YMM03=0000000000000000 0000000000000000 00007f0b86dfb7c8 00007f0b86dfb7c0
YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000