syzkaller login: [ 34.126064] sshd (243) used greatest stack depth: 24768 bytes left Warning: Permanently added '[localhost]:34593' (ECDSA) to the list of known hosts. 2022/09/12 18:53:23 fuzzer started 2022/09/12 18:53:24 dialing manager at localhost:38027 [ 36.298383] cgroup: Unknown subsys name 'net' [ 36.419375] cgroup: Unknown subsys name 'rlimit' 2022/09/12 18:53:38 syscalls: 2215 2022/09/12 18:53:38 code coverage: enabled 2022/09/12 18:53:38 comparison tracing: enabled 2022/09/12 18:53:38 extra coverage: enabled 2022/09/12 18:53:38 setuid sandbox: enabled 2022/09/12 18:53:38 namespace sandbox: enabled 2022/09/12 18:53:38 Android sandbox: enabled 2022/09/12 18:53:38 fault injection: enabled 2022/09/12 18:53:38 leak checking: enabled 2022/09/12 18:53:38 net packet injection: enabled 2022/09/12 18:53:38 net device setup: enabled 2022/09/12 18:53:38 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/12 18:53:38 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/12 18:53:38 USB emulation: enabled 2022/09/12 18:53:38 hci packet injection: enabled 2022/09/12 18:53:38 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220912) 2022/09/12 18:53:38 802.15.4 emulation: enabled 2022/09/12 18:53:38 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/12 18:53:38 fetching corpus: 50, signal 31671/35257 (executing program) 2022/09/12 18:53:38 fetching corpus: 100, signal 41612/46753 (executing program) 2022/09/12 18:53:38 fetching corpus: 150, signal 48177/54857 (executing program) 2022/09/12 18:53:39 fetching corpus: 200, signal 57804/65779 (executing program) 2022/09/12 18:53:39 fetching corpus: 250, signal 64039/73342 (executing program) 2022/09/12 18:53:39 fetching corpus: 300, signal 71241/81694 (executing program) 2022/09/12 18:53:39 fetching corpus: 350, signal 75307/87002 (executing program) 2022/09/12 18:53:39 fetching corpus: 400, signal 80496/93326 (executing program) 2022/09/12 18:53:39 fetching corpus: 450, signal 88501/102179 (executing program) 2022/09/12 18:53:39 fetching corpus: 500, signal 94022/108599 (executing program) 2022/09/12 18:53:40 fetching corpus: 550, signal 97294/112953 (executing program) 2022/09/12 18:53:40 fetching corpus: 600, signal 100461/117106 (executing program) 2022/09/12 18:53:40 fetching corpus: 650, signal 104419/121935 (executing program) 2022/09/12 18:53:40 fetching corpus: 700, signal 107261/125727 (executing program) 2022/09/12 18:53:40 fetching corpus: 750, signal 109608/129019 (executing program) 2022/09/12 18:53:40 fetching corpus: 800, signal 112482/132781 (executing program) 2022/09/12 18:53:40 fetching corpus: 850, signal 115578/136680 (executing program) 2022/09/12 18:53:41 fetching corpus: 900, signal 118393/140276 (executing program) 2022/09/12 18:53:41 fetching corpus: 950, signal 120325/143116 (executing program) 2022/09/12 18:53:41 fetching corpus: 1000, signal 122793/146291 (executing program) 2022/09/12 18:53:41 fetching corpus: 1050, signal 124672/148983 (executing program) 2022/09/12 18:53:41 fetching corpus: 1100, signal 127084/152119 (executing program) 2022/09/12 18:53:41 fetching corpus: 1150, signal 129855/155475 (executing program) 2022/09/12 18:53:41 fetching corpus: 1200, signal 133011/159167 (executing program) 2022/09/12 18:53:41 fetching corpus: 1250, signal 135903/162612 (executing program) 2022/09/12 18:53:42 fetching corpus: 1300, signal 138555/165802 (executing program) 2022/09/12 18:53:42 fetching corpus: 1350, signal 140806/168623 (executing program) 2022/09/12 18:53:42 fetching corpus: 1400, signal 142555/171016 (executing program) 2022/09/12 18:53:42 fetching corpus: 1450, signal 144023/173149 (executing program) 2022/09/12 18:53:42 fetching corpus: 1500, signal 147598/176998 (executing program) 2022/09/12 18:53:42 fetching corpus: 1550, signal 149053/179063 (executing program) 2022/09/12 18:53:42 fetching corpus: 1600, signal 151260/181744 (executing program) 2022/09/12 18:53:43 fetching corpus: 1650, signal 153078/184096 (executing program) 2022/09/12 18:53:43 fetching corpus: 1700, signal 154229/185883 (executing program) 2022/09/12 18:53:43 fetching corpus: 1750, signal 155689/187864 (executing program) 2022/09/12 18:53:43 fetching corpus: 1800, signal 156757/189510 (executing program) 2022/09/12 18:53:43 fetching corpus: 1850, signal 158394/191646 (executing program) 2022/09/12 18:53:43 fetching corpus: 1900, signal 160240/193882 (executing program) 2022/09/12 18:53:43 fetching corpus: 1950, signal 162021/196049 (executing program) 2022/09/12 18:53:43 fetching corpus: 2000, signal 163220/197788 (executing program) 2022/09/12 18:53:44 fetching corpus: 2050, signal 164941/199898 (executing program) 2022/09/12 18:53:44 fetching corpus: 2100, signal 166852/202068 (executing program) 2022/09/12 18:53:44 fetching corpus: 2150, signal 168293/203944 (executing program) 2022/09/12 18:53:44 fetching corpus: 2200, signal 169707/205725 (executing program) 2022/09/12 18:53:44 fetching corpus: 2250, signal 171067/207534 (executing program) 2022/09/12 18:53:44 fetching corpus: 2300, signal 172079/208919 (executing program) 2022/09/12 18:53:44 fetching corpus: 2350, signal 172894/210248 (executing program) 2022/09/12 18:53:44 fetching corpus: 2400, signal 173730/211594 (executing program) 2022/09/12 18:53:45 fetching corpus: 2450, signal 175506/213475 (executing program) 2022/09/12 18:53:45 fetching corpus: 2500, signal 176198/214672 (executing program) 2022/09/12 18:53:45 fetching corpus: 2550, signal 177783/216435 (executing program) 2022/09/12 18:53:45 fetching corpus: 2600, signal 178839/217868 (executing program) 2022/09/12 18:53:45 fetching corpus: 2650, signal 180190/219456 (executing program) 2022/09/12 18:53:45 fetching corpus: 2700, signal 181001/220672 (executing program) 2022/09/12 18:53:45 fetching corpus: 2750, signal 182151/222067 (executing program) 2022/09/12 18:53:46 fetching corpus: 2800, signal 183362/223498 (executing program) 2022/09/12 18:53:46 fetching corpus: 2850, signal 184175/224680 (executing program) 2022/09/12 18:53:46 fetching corpus: 2900, signal 185235/225985 (executing program) 2022/09/12 18:53:46 fetching corpus: 2950, signal 186261/227259 (executing program) 2022/09/12 18:53:46 fetching corpus: 3000, signal 187966/228888 (executing program) 2022/09/12 18:53:46 fetching corpus: 3050, signal 189520/230456 (executing program) 2022/09/12 18:53:46 fetching corpus: 3100, signal 190246/231509 (executing program) 2022/09/12 18:53:46 fetching corpus: 3150, signal 191014/232549 (executing program) 2022/09/12 18:53:47 fetching corpus: 3200, signal 192059/233796 (executing program) 2022/09/12 18:53:47 fetching corpus: 3250, signal 193126/234979 (executing program) 2022/09/12 18:53:47 fetching corpus: 3300, signal 194236/236161 (executing program) 2022/09/12 18:53:47 fetching corpus: 3350, signal 195156/237339 (executing program) 2022/09/12 18:53:47 fetching corpus: 3400, signal 196511/238647 (executing program) 2022/09/12 18:53:47 fetching corpus: 3450, signal 197678/239888 (executing program) 2022/09/12 18:53:47 fetching corpus: 3500, signal 198814/241050 (executing program) 2022/09/12 18:53:48 fetching corpus: 3550, signal 199464/241990 (executing program) 2022/09/12 18:53:48 fetching corpus: 3600, signal 200552/243131 (executing program) 2022/09/12 18:53:48 fetching corpus: 3650, signal 201391/244095 (executing program) 2022/09/12 18:53:48 fetching corpus: 3700, signal 202326/245126 (executing program) 2022/09/12 18:53:48 fetching corpus: 3750, signal 203071/246078 (executing program) 2022/09/12 18:53:48 fetching corpus: 3800, signal 203665/246937 (executing program) 2022/09/12 18:53:48 fetching corpus: 3850, signal 204713/248009 (executing program) 2022/09/12 18:53:49 fetching corpus: 3900, signal 205703/248951 (executing program) 2022/09/12 18:53:49 fetching corpus: 3950, signal 206577/249930 (executing program) 2022/09/12 18:53:49 fetching corpus: 4000, signal 207115/250742 (executing program) 2022/09/12 18:53:49 fetching corpus: 4050, signal 207756/251551 (executing program) 2022/09/12 18:53:49 fetching corpus: 4100, signal 208534/252426 (executing program) 2022/09/12 18:53:49 fetching corpus: 4150, signal 209307/253287 (executing program) 2022/09/12 18:53:49 fetching corpus: 4200, signal 210082/254172 (executing program) 2022/09/12 18:53:50 fetching corpus: 4250, signal 210901/255000 (executing program) 2022/09/12 18:53:50 fetching corpus: 4300, signal 211903/255866 (executing program) 2022/09/12 18:53:50 fetching corpus: 4350, signal 212671/256693 (executing program) 2022/09/12 18:53:50 fetching corpus: 4400, signal 214047/257718 (executing program) 2022/09/12 18:53:50 fetching corpus: 4450, signal 214718/258432 (executing program) 2022/09/12 18:53:50 fetching corpus: 4500, signal 215332/259122 (executing program) 2022/09/12 18:53:51 fetching corpus: 4550, signal 216115/259926 (executing program) 2022/09/12 18:53:51 fetching corpus: 4600, signal 217154/260756 (executing program) 2022/09/12 18:53:51 fetching corpus: 4650, signal 217603/261396 (executing program) 2022/09/12 18:53:51 fetching corpus: 4700, signal 218632/262215 (executing program) 2022/09/12 18:53:51 fetching corpus: 4750, signal 219531/262990 (executing program) 2022/09/12 18:53:51 fetching corpus: 4800, signal 220000/263585 (executing program) 2022/09/12 18:53:51 fetching corpus: 4850, signal 220659/264251 (executing program) 2022/09/12 18:53:52 fetching corpus: 4900, signal 221249/264889 (executing program) 2022/09/12 18:53:52 fetching corpus: 4950, signal 221720/265465 (executing program) 2022/09/12 18:53:52 fetching corpus: 5000, signal 222440/266137 (executing program) 2022/09/12 18:53:52 fetching corpus: 5050, signal 223494/266881 (executing program) 2022/09/12 18:53:52 fetching corpus: 5100, signal 224154/267439 (executing program) 2022/09/12 18:53:52 fetching corpus: 5150, signal 224707/268025 (executing program) 2022/09/12 18:53:52 fetching corpus: 5200, signal 225759/268724 (executing program) 2022/09/12 18:53:53 fetching corpus: 5250, signal 226200/269256 (executing program) 2022/09/12 18:53:53 fetching corpus: 5300, signal 226979/269872 (executing program) 2022/09/12 18:53:53 fetching corpus: 5350, signal 227590/270427 (executing program) 2022/09/12 18:53:53 fetching corpus: 5400, signal 228148/270959 (executing program) 2022/09/12 18:53:53 fetching corpus: 5450, signal 228767/271421 (executing program) 2022/09/12 18:53:53 fetching corpus: 5500, signal 229555/271978 (executing program) 2022/09/12 18:53:53 fetching corpus: 5550, signal 230159/272479 (executing program) 2022/09/12 18:53:54 fetching corpus: 5600, signal 230693/272994 (executing program) 2022/09/12 18:53:54 fetching corpus: 5650, signal 231996/273581 (executing program) 2022/09/12 18:53:54 fetching corpus: 5700, signal 232619/274054 (executing program) 2022/09/12 18:53:54 fetching corpus: 5750, signal 233225/274547 (executing program) 2022/09/12 18:53:54 fetching corpus: 5800, signal 234041/275055 (executing program) 2022/09/12 18:53:54 fetching corpus: 5850, signal 234614/275537 (executing program) 2022/09/12 18:53:54 fetching corpus: 5900, signal 235336/276018 (executing program) 2022/09/12 18:53:55 fetching corpus: 5950, signal 235903/276429 (executing program) 2022/09/12 18:53:55 fetching corpus: 6000, signal 236655/276837 (executing program) 2022/09/12 18:53:55 fetching corpus: 6050, signal 237074/277254 (executing program) 2022/09/12 18:53:55 fetching corpus: 6100, signal 238604/277829 (executing program) 2022/09/12 18:53:55 fetching corpus: 6150, signal 239491/278272 (executing program) 2022/09/12 18:53:55 fetching corpus: 6200, signal 240011/278654 (executing program) 2022/09/12 18:53:56 fetching corpus: 6250, signal 240975/279294 (executing program) 2022/09/12 18:53:56 fetching corpus: 6300, signal 241334/279629 (executing program) 2022/09/12 18:53:56 fetching corpus: 6350, signal 241759/279980 (executing program) 2022/09/12 18:53:56 fetching corpus: 6400, signal 242230/280315 (executing program) 2022/09/12 18:53:56 fetching corpus: 6450, signal 242705/280645 (executing program) 2022/09/12 18:53:56 fetching corpus: 6500, signal 243166/280959 (executing program) 2022/09/12 18:53:56 fetching corpus: 6550, signal 243768/281290 (executing program) 2022/09/12 18:53:56 fetching corpus: 6600, signal 244468/281631 (executing program) 2022/09/12 18:53:57 fetching corpus: 6650, signal 244912/281930 (executing program) 2022/09/12 18:53:57 fetching corpus: 6700, signal 245640/282261 (executing program) 2022/09/12 18:53:57 fetching corpus: 6750, signal 246128/282638 (executing program) 2022/09/12 18:53:57 fetching corpus: 6800, signal 246736/282905 (executing program) 2022/09/12 18:53:57 fetching corpus: 6850, signal 247468/283166 (executing program) 2022/09/12 18:53:57 fetching corpus: 6900, signal 247978/283174 (executing program) 2022/09/12 18:53:58 fetching corpus: 6950, signal 248468/283179 (executing program) 2022/09/12 18:53:58 fetching corpus: 7000, signal 249229/283207 (executing program) 2022/09/12 18:53:58 fetching corpus: 7050, signal 249635/283225 (executing program) 2022/09/12 18:53:58 fetching corpus: 7100, signal 250212/283235 (executing program) 2022/09/12 18:53:58 fetching corpus: 7150, signal 250694/283246 (executing program) 2022/09/12 18:53:58 fetching corpus: 7200, signal 251073/283283 (executing program) 2022/09/12 18:53:58 fetching corpus: 7250, signal 251622/283317 (executing program) 2022/09/12 18:53:59 fetching corpus: 7300, signal 252095/283338 (executing program) 2022/09/12 18:53:59 fetching corpus: 7350, signal 252571/283359 (executing program) 2022/09/12 18:53:59 fetching corpus: 7400, signal 253039/283363 (executing program) 2022/09/12 18:53:59 fetching corpus: 7450, signal 253401/283373 (executing program) 2022/09/12 18:53:59 fetching corpus: 7500, signal 253839/283404 (executing program) 2022/09/12 18:53:59 fetching corpus: 7550, signal 254261/283404 (executing program) 2022/09/12 18:53:59 fetching corpus: 7600, signal 254700/283408 (executing program) 2022/09/12 18:54:00 fetching corpus: 7650, signal 255372/283429 (executing program) 2022/09/12 18:54:00 fetching corpus: 7700, signal 255794/283435 (executing program) 2022/09/12 18:54:00 fetching corpus: 7750, signal 256420/283439 (executing program) 2022/09/12 18:54:00 fetching corpus: 7800, signal 257022/283462 (executing program) 2022/09/12 18:54:00 fetching corpus: 7850, signal 257545/283463 (executing program) 2022/09/12 18:54:00 fetching corpus: 7900, signal 258080/283467 (executing program) 2022/09/12 18:54:00 fetching corpus: 7950, signal 258516/283473 (executing program) 2022/09/12 18:54:01 fetching corpus: 8000, signal 258809/283473 (executing program) 2022/09/12 18:54:01 fetching corpus: 8050, signal 259211/283478 (executing program) 2022/09/12 18:54:01 fetching corpus: 8100, signal 259580/283487 (executing program) 2022/09/12 18:54:01 fetching corpus: 8150, signal 259915/283490 (executing program) 2022/09/12 18:54:01 fetching corpus: 8200, signal 260358/283506 (executing program) 2022/09/12 18:54:01 fetching corpus: 8250, signal 260829/283506 (executing program) 2022/09/12 18:54:01 fetching corpus: 8300, signal 261271/283530 (executing program) 2022/09/12 18:54:02 fetching corpus: 8350, signal 261638/283562 (executing program) 2022/09/12 18:54:02 fetching corpus: 8400, signal 262027/283568 (executing program) 2022/09/12 18:54:02 fetching corpus: 8450, signal 262509/283584 (executing program) 2022/09/12 18:54:02 fetching corpus: 8500, signal 263004/283623 (executing program) 2022/09/12 18:54:02 fetching corpus: 8550, signal 263544/283628 (executing program) 2022/09/12 18:54:02 fetching corpus: 8600, signal 264013/283637 (executing program) 2022/09/12 18:54:02 fetching corpus: 8650, signal 264586/283640 (executing program) 2022/09/12 18:54:03 fetching corpus: 8700, signal 264926/283663 (executing program) 2022/09/12 18:54:03 fetching corpus: 8750, signal 265289/283663 (executing program) 2022/09/12 18:54:03 fetching corpus: 8800, signal 265807/283676 (executing program) 2022/09/12 18:54:03 fetching corpus: 8850, signal 266197/283691 (executing program) 2022/09/12 18:54:03 fetching corpus: 8900, signal 266542/283706 (executing program) 2022/09/12 18:54:03 fetching corpus: 8950, signal 267269/283794 (executing program) 2022/09/12 18:54:03 fetching corpus: 9000, signal 267670/283795 (executing program) 2022/09/12 18:54:04 fetching corpus: 9050, signal 268084/283809 (executing program) 2022/09/12 18:54:04 fetching corpus: 9100, signal 268402/283831 (executing program) 2022/09/12 18:54:04 fetching corpus: 9150, signal 268750/283832 (executing program) 2022/09/12 18:54:04 fetching corpus: 9200, signal 269189/283848 (executing program) 2022/09/12 18:54:04 fetching corpus: 9250, signal 269537/283850 (executing program) 2022/09/12 18:54:04 fetching corpus: 9300, signal 269831/283854 (executing program) 2022/09/12 18:54:04 fetching corpus: 9350, signal 270331/283864 (executing program) 2022/09/12 18:54:05 fetching corpus: 9400, signal 270768/283870 (executing program) 2022/09/12 18:54:05 fetching corpus: 9450, signal 271020/283874 (executing program) 2022/09/12 18:54:05 fetching corpus: 9500, signal 271477/283894 (executing program) 2022/09/12 18:54:05 fetching corpus: 9550, signal 271955/283896 (executing program) 2022/09/12 18:54:05 fetching corpus: 9600, signal 272478/283911 (executing program) 2022/09/12 18:54:05 fetching corpus: 9650, signal 272837/283916 (executing program) 2022/09/12 18:54:05 fetching corpus: 9662, signal 272967/283916 (executing program) 2022/09/12 18:54:05 fetching corpus: 9662, signal 272967/283916 (executing program) 2022/09/12 18:54:08 starting 8 fuzzer processes 18:54:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)) 18:54:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x48, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) 18:54:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 18:54:08 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=6']) 18:54:08 executing program 0: pkey_alloc(0x0, 0x7) 18:54:08 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 18:54:08 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0xf1887000) chroot(&(0x7f0000000000)='./file0/file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180a5a268fbd7bbacb70aa9533c5b2b41783b151ad07e5d3ceed7bcdee5006dc37b469f", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = io_uring_setup(0x454c, &(0x7f0000000240)) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x8, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = dup(r0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x4, 0x80, 0x7f, 0xaf, 0x0, 0x7fffffff, 0x40, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x400, 0x2, @perf_bp={&(0x7f0000000180)}, 0x1001a, 0xf987, 0x32, 0x8, 0x9, 0x101, 0x5, 0x0, 0x63d9}, 0x0, 0x10, 0xffffffffffffffff, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000480)=r4, 0x1) sendfile(r2, r0, 0x0, 0xfffffdef) [ 80.006063] audit: type=1400 audit(1663008848.161:6): avc: denied { execmem } for pid=283 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:54:08 executing program 7: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0x40383d0c, 0x0) [ 81.242105] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.243230] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.244494] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.245438] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.247146] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.248169] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.249071] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.251959] Bluetooth: hci1: HCI_REQ-0x0c1a [ 81.254988] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.257953] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.264039] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.269937] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.307505] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.320449] Bluetooth: hci0: HCI_REQ-0x0c1a [ 81.350821] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 81.351252] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 81.359981] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 81.361571] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 81.365287] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 81.368115] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 81.369706] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 81.369846] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 81.371853] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 81.376332] Bluetooth: hci7: HCI_REQ-0x0c1a [ 81.391715] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.395207] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.396721] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 81.397963] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.398896] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 81.401071] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 81.401681] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 81.402541] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.403527] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 81.404232] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 81.418865] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 81.419614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 81.420256] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.421393] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 81.422071] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 81.423175] Bluetooth: hci6: HCI_REQ-0x0c1a [ 81.440887] Bluetooth: hci5: HCI_REQ-0x0c1a [ 81.441673] Bluetooth: hci4: HCI_REQ-0x0c1a [ 83.255038] Bluetooth: hci1: command 0x0409 tx timeout [ 83.318611] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 83.320502] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 83.382644] Bluetooth: hci7: command 0x0409 tx timeout [ 83.383394] Bluetooth: hci0: command 0x0409 tx timeout [ 83.446598] Bluetooth: hci4: command 0x0409 tx timeout [ 83.447821] Bluetooth: hci6: command 0x0409 tx timeout [ 83.510380] Bluetooth: hci5: command 0x0409 tx timeout [ 85.303360] Bluetooth: hci1: command 0x041b tx timeout [ 85.430403] Bluetooth: hci0: command 0x041b tx timeout [ 85.431203] Bluetooth: hci7: command 0x041b tx timeout [ 85.494415] Bluetooth: hci6: command 0x041b tx timeout [ 85.494895] Bluetooth: hci4: command 0x041b tx timeout [ 85.558403] Bluetooth: hci5: command 0x041b tx timeout [ 87.350381] Bluetooth: hci1: command 0x040f tx timeout [ 87.478780] Bluetooth: hci7: command 0x040f tx timeout [ 87.479693] Bluetooth: hci0: command 0x040f tx timeout [ 87.542370] Bluetooth: hci4: command 0x040f tx timeout [ 87.542899] Bluetooth: hci6: command 0x040f tx timeout [ 87.606364] Bluetooth: hci5: command 0x040f tx timeout [ 89.398419] Bluetooth: hci1: command 0x0419 tx timeout [ 89.462405] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 89.526502] Bluetooth: hci0: command 0x0419 tx timeout [ 89.526995] Bluetooth: hci7: command 0x0419 tx timeout [ 89.590368] Bluetooth: hci6: command 0x0419 tx timeout [ 89.590883] Bluetooth: hci4: command 0x0419 tx timeout [ 89.654360] Bluetooth: hci5: command 0x0419 tx timeout [ 90.102376] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 94.134440] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 94.902380] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 96.913009] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.922568] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.924108] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.928533] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.932529] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 96.933547] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.939460] Bluetooth: hci2: HCI_REQ-0x0c1a [ 97.692181] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.694631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.697557] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.712788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.716247] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 97.719713] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.726878] Bluetooth: hci3: HCI_REQ-0x0c1a [ 98.998409] Bluetooth: hci2: command 0x0409 tx timeout [ 99.766415] Bluetooth: hci3: command 0x0409 tx timeout [ 101.046355] Bluetooth: hci2: command 0x041b tx timeout [ 101.814414] Bluetooth: hci3: command 0x041b tx timeout [ 103.094361] Bluetooth: hci2: command 0x040f tx timeout [ 103.862358] Bluetooth: hci3: command 0x040f tx timeout [ 105.142402] Bluetooth: hci2: command 0x0419 tx timeout [ 105.910400] Bluetooth: hci3: command 0x0419 tx timeout 18:54:59 executing program 0: perf_event_open(&(0x7f0000000e80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 131.671116] audit: type=1400 audit(1663008899.826:7): avc: denied { open } for pid=3547 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 18:54:59 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) [ 131.893757] audit: type=1400 audit(1663008900.048:8): avc: denied { kernel } for pid=3561 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 18:55:00 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x118c008, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@seclabel}, {@dont_appraise}, {@uid_gt}]}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000001940)={{0x1, 0x1, 0x18, r0, {0x8}}, './file1\x00'}) socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001580)='/proc/vmstat\x00', 0x0, 0x0) readv(r3, &(0x7f00000017c0)=[{&(0x7f00000015c0)=""/211, 0xd3}], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @initdev}, &(0x7f0000000000)=0x8a) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f00000009c0)={0x2, 0x8, @status={[0x8, 0x6, 0x9, 0x436, 0x3, 0x40]}, [0x7, 0x20, 0x7, 0x496, 0xc4, 0x0, 0x5847, 0x9, 0x1, 0x0, 0x3f, 0x2, 0x9, 0x0, 0x8, 0x89db, 0x4, 0x3, 0x2, 0x2, 0x4d8, 0x5, 0xa88, 0x0, 0x7, 0x7, 0xffffffffffffffc1, 0x3, 0x200, 0x9, 0x1b, 0x7417e126, 0x40, 0x7, 0x3f, 0x200, 0x228, 0x5, 0x3, 0xffff, 0x9, 0xd58, 0x7, 0x6c8e, 0x400, 0x80000000, 0x4, 0x3, 0xfffffffffffffcc7, 0x7, 0xffff, 0x1, 0x7, 0x2, 0x5, 0x65773ef5, 0x2e7db773, 0x80000000, 0xf07b, 0x1f, 0xfffffffffffffffe, 0xbae, 0x86, 0x7]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x4, 0x2a) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x8}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000680)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in=@private}, @in=@loopback, {@in6=@local, @in=@private}, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x134}}, 0x0) 18:55:00 executing program 0: syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{'noacl'}]}) 18:55:00 executing program 0: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f00000001c0)='./file0\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') renameat(r1, &(0x7f0000000140)='./file0/file0\x00', r2, &(0x7f0000000180)='./file1\x00') [ 132.220396] ------------[ cut here ]------------ [ 132.220437] [ 132.220442] ====================================================== [ 132.220448] WARNING: possible circular locking dependency detected [ 132.220455] 6.0.0-rc5-next-20220912 #1 Not tainted [ 132.220467] ------------------------------------------------------ [ 132.220473] syz-executor.3/3578 is trying to acquire lock: [ 132.220485] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 132.220548] [ 132.220548] but task is already holding lock: [ 132.220553] ffff888015c92c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 132.220603] [ 132.220603] which lock already depends on the new lock. [ 132.220603] [ 132.220608] [ 132.220608] the existing dependency chain (in reverse order) is: [ 132.220614] [ 132.220614] -> #3 (&ctx->lock){....}-{2:2}: [ 132.220639] _raw_spin_lock+0x2a/0x40 [ 132.220669] __perf_event_task_sched_out+0x53b/0x18d0 [ 132.220692] __schedule+0xedd/0x2470 [ 132.220709] schedule+0xda/0x1b0 [ 132.220726] exit_to_user_mode_prepare+0x114/0x1a0 [ 132.220764] syscall_exit_to_user_mode+0x19/0x40 [ 132.220796] do_syscall_64+0x48/0x90 [ 132.220820] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 132.220852] [ 132.220852] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 132.220877] _raw_spin_lock_nested+0x30/0x40 [ 132.220904] raw_spin_rq_lock_nested+0x1e/0x30 [ 132.220927] task_fork_fair+0x63/0x4d0 [ 132.220959] sched_cgroup_fork+0x3d0/0x540 [ 132.220985] copy_process+0x3f9e/0x6df0 [ 132.221004] kernel_clone+0xe7/0x890 [ 132.221021] user_mode_thread+0xad/0xf0 [ 132.221040] rest_init+0x24/0x250 [ 132.221070] arch_call_rest_init+0xf/0x14 [ 132.221104] start_kernel+0x4c1/0x4e6 [ 132.221135] secondary_startup_64_no_verify+0xe0/0xeb [ 132.221161] [ 132.221161] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 132.221187] _raw_spin_lock_irqsave+0x39/0x60 [ 132.221214] try_to_wake_up+0xab/0x1920 [ 132.221239] up+0x75/0xb0 [ 132.221260] __up_console_sem+0x6e/0x80 [ 132.221289] console_unlock+0x46a/0x590 [ 132.221319] release_tty+0xce/0x890 [ 132.221340] tty_release_struct+0xb4/0xe0 [ 132.221360] tty_release+0xbfd/0xe90 [ 132.221380] __fput+0x263/0xa40 [ 132.221413] task_work_run+0x170/0x280 [ 132.221435] exit_to_user_mode_prepare+0x199/0x1a0 [ 132.221471] syscall_exit_to_user_mode+0x19/0x40 [ 132.221502] do_syscall_64+0x48/0x90 [ 132.221525] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 132.221556] [ 132.221556] -> #0 ((console_sem).lock){....}-{2:2}: [ 132.221582] __lock_acquire+0x2a02/0x5e70 [ 132.221613] lock_acquire+0x1a2/0x530 [ 132.221642] _raw_spin_lock_irqsave+0x39/0x60 [ 132.221670] down_trylock+0xe/0x70 [ 132.221693] __down_trylock_console_sem+0x3b/0xd0 [ 132.221723] vprintk_emit+0x16b/0x560 [ 132.221754] vprintk+0x84/0xa0 [ 132.221785] _printk+0xba/0xf1 [ 132.221816] report_bug.cold+0x72/0xab [ 132.221860] handle_bug+0x3c/0x70 [ 132.221884] exc_invalid_op+0x14/0x50 [ 132.221908] asm_exc_invalid_op+0x16/0x20 [ 132.221938] group_sched_out.part.0+0x2c7/0x460 [ 132.221957] ctx_sched_out+0x8f1/0xc10 [ 132.221975] __perf_event_task_sched_out+0x6d0/0x18d0 [ 132.221998] __schedule+0xedd/0x2470 [ 132.222015] preempt_schedule_common+0x45/0xc0 [ 132.222034] __cond_resched+0x17/0x30 [ 132.222052] __mutex_lock+0xa3/0x14d0 [ 132.222072] __do_sys_perf_event_open+0x1eec/0x32c0 [ 132.222095] do_syscall_64+0x3b/0x90 [ 132.222119] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 132.222150] [ 132.222150] other info that might help us debug this: [ 132.222150] [ 132.222155] Chain exists of: [ 132.222155] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 132.222155] [ 132.222183] Possible unsafe locking scenario: [ 132.222183] [ 132.222187] CPU0 CPU1 [ 132.222191] ---- ---- [ 132.222196] lock(&ctx->lock); [ 132.222206] lock(&rq->__lock); [ 132.222218] lock(&ctx->lock); [ 132.222230] lock((console_sem).lock); [ 132.222240] [ 132.222240] *** DEADLOCK *** [ 132.222240] [ 132.222244] 2 locks held by syz-executor.3/3578: [ 132.222256] #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 132.222303] #1: ffff888015c92c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 132.222354] [ 132.222354] stack backtrace: [ 132.222359] CPU: 0 PID: 3578 Comm: syz-executor.3 Not tainted 6.0.0-rc5-next-20220912 #1 [ 132.222382] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 132.222397] Call Trace: [ 132.222402] [ 132.222409] dump_stack_lvl+0x8b/0xb3 [ 132.222436] check_noncircular+0x263/0x2e0 [ 132.222467] ? format_decode+0x26c/0xb50 [ 132.222493] ? print_circular_bug+0x450/0x450 [ 132.222526] ? enable_ptr_key_workfn+0x20/0x20 [ 132.222551] ? __lockdep_reset_lock+0x180/0x180 [ 132.222582] ? format_decode+0x26c/0xb50 [ 132.222611] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 132.222644] __lock_acquire+0x2a02/0x5e70 [ 132.222685] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 132.222727] lock_acquire+0x1a2/0x530 [ 132.222759] ? down_trylock+0xe/0x70 [ 132.222786] ? rcu_read_unlock+0x40/0x40 [ 132.222819] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 132.222859] ? vprintk+0x84/0xa0 [ 132.222893] _raw_spin_lock_irqsave+0x39/0x60 [ 132.222921] ? down_trylock+0xe/0x70 [ 132.222946] down_trylock+0xe/0x70 [ 132.222971] ? vprintk+0x84/0xa0 [ 132.223004] __down_trylock_console_sem+0x3b/0xd0 [ 132.223037] vprintk_emit+0x16b/0x560 [ 132.223069] ? lock_downgrade+0x6d0/0x6d0 [ 132.223104] vprintk+0x84/0xa0 [ 132.223137] _printk+0xba/0xf1 [ 132.223170] ? record_print_text.cold+0x16/0x16 [ 132.223207] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 132.223236] ? lock_downgrade+0x6d0/0x6d0 [ 132.223270] ? report_bug.cold+0x66/0xab [ 132.223296] ? group_sched_out.part.0+0x2c7/0x460 [ 132.223317] report_bug.cold+0x72/0xab [ 132.223344] handle_bug+0x3c/0x70 [ 132.223369] exc_invalid_op+0x14/0x50 [ 132.223396] asm_exc_invalid_op+0x16/0x20 [ 132.223428] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 132.223452] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 132.223473] RSP: 0018:ffff8880433a7978 EFLAGS: 00010006 [ 132.223489] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 132.223503] RDX: ffff88801b0c0000 RSI: ffffffff81566027 RDI: 0000000000000005 [ 132.223518] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 132.223532] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888015c92c00 [ 132.223545] R13: ffff88806ce3d100 R14: ffffffff8547bfc0 R15: 0000000000000002 [ 132.223566] ? group_sched_out.part.0+0x2c7/0x460 [ 132.223590] ? group_sched_out.part.0+0x2c7/0x460 [ 132.223614] ctx_sched_out+0x8f1/0xc10 [ 132.223637] __perf_event_task_sched_out+0x6d0/0x18d0 [ 132.223665] ? lock_is_held_type+0xd7/0x130 [ 132.223699] ? __perf_cgroup_move+0x160/0x160 [ 132.223721] ? set_next_entity+0x304/0x550 [ 132.223755] ? update_curr+0x267/0x740 [ 132.223790] ? lock_is_held_type+0xd7/0x130 [ 132.223824] __schedule+0xedd/0x2470 [ 132.223848] ? io_schedule_timeout+0x150/0x150 [ 132.223868] ? find_held_lock+0x2c/0x110 [ 132.223898] ? lock_is_held_type+0xd7/0x130 [ 132.223931] ? __cond_resched+0x17/0x30 [ 132.223951] preempt_schedule_common+0x45/0xc0 [ 132.223974] __cond_resched+0x17/0x30 [ 132.223993] __mutex_lock+0xa3/0x14d0 [ 132.224017] ? lock_is_held_type+0xd7/0x130 [ 132.224048] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 132.224076] ? mutex_lock_io_nested+0x1310/0x1310 [ 132.224099] ? lock_release+0x3b2/0x750 [ 132.224132] ? __up_read+0x192/0x730 [ 132.224159] ? up_write+0x480/0x480 [ 132.224191] __do_sys_perf_event_open+0x1eec/0x32c0 [ 132.224223] ? perf_compat_ioctl+0x130/0x130 [ 132.224246] ? xfd_validate_state+0x59/0x180 [ 132.224288] ? syscall_enter_from_user_mode+0x1d/0x50 [ 132.224323] ? syscall_enter_from_user_mode+0x1d/0x50 [ 132.224360] do_syscall_64+0x3b/0x90 [ 132.224386] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 132.224418] RIP: 0033:0x7f18b034bb19 [ 132.224434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 132.224454] RSP: 002b:00007f18ad8c1188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 132.224474] RAX: ffffffffffffffda RBX: 00007f18b045ef60 RCX: 00007f18b034bb19 [ 132.224489] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 [ 132.224503] RBP: 00007f18b03a5f6d R08: 0000000000000000 R09: 0000000000000000 [ 132.224516] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 132.224530] R13: 00007ffc731280cf R14: 00007f18ad8c1300 R15: 0000000000022000 [ 132.224553] [ 132.338308] WARNING: CPU: 0 PID: 3578 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 132.339515] Modules linked in: [ 132.339945] CPU: 0 PID: 3578 Comm: syz-executor.3 Not tainted 6.0.0-rc5-next-20220912 #1 [ 132.341010] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 132.342478] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 132.343249] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 132.345659] RSP: 0018:ffff8880433a7978 EFLAGS: 00010006 [ 132.346376] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 132.347324] RDX: ffff88801b0c0000 RSI: ffffffff81566027 RDI: 0000000000000005 [ 132.348278] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 132.349215] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888015c92c00 [ 132.350186] R13: ffff88806ce3d100 R14: ffffffff8547bfc0 R15: 0000000000000002 [ 132.351122] FS: 00007f18ad8c1700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 132.352184] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 132.352964] CR2: 0000560776dea4c8 CR3: 000000001d3e0000 CR4: 0000000000350ef0 [ 132.353933] Call Trace: [ 132.354275] [ 132.354604] ctx_sched_out+0x8f1/0xc10 [ 132.355129] __perf_event_task_sched_out+0x6d0/0x18d0 [ 132.355830] ? lock_is_held_type+0xd7/0x130 [ 132.356422] ? __perf_cgroup_move+0x160/0x160 [ 132.357056] ? set_next_entity+0x304/0x550 [ 132.357651] ? update_curr+0x267/0x740 [ 132.358207] ? lock_is_held_type+0xd7/0x130 [ 132.358810] __schedule+0xedd/0x2470 [ 132.359319] ? io_schedule_timeout+0x150/0x150 [ 132.359938] ? find_held_lock+0x2c/0x110 [ 132.360495] ? lock_is_held_type+0xd7/0x130 [ 132.361102] ? __cond_resched+0x17/0x30 [ 132.361658] preempt_schedule_common+0x45/0xc0 [ 132.362289] __cond_resched+0x17/0x30 [ 132.362818] __mutex_lock+0xa3/0x14d0 [ 132.363334] ? lock_is_held_type+0xd7/0x130 [ 132.363928] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 132.364695] ? mutex_lock_io_nested+0x1310/0x1310 [ 132.365395] ? lock_release+0x3b2/0x750 [ 132.366025] ? __up_read+0x192/0x730 [ 132.366590] ? up_write+0x480/0x480 [ 132.367139] __do_sys_perf_event_open+0x1eec/0x32c0 [ 132.367883] ? perf_compat_ioctl+0x130/0x130 [ 132.368549] ? xfd_validate_state+0x59/0x180 [ 132.369220] ? syscall_enter_from_user_mode+0x1d/0x50 [ 132.370023] ? syscall_enter_from_user_mode+0x1d/0x50 [ 132.370797] do_syscall_64+0x3b/0x90 [ 132.371345] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 132.372111] RIP: 0033:0x7f18b034bb19 [ 132.372675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 132.375311] RSP: 002b:00007f18ad8c1188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 132.376414] RAX: ffffffffffffffda RBX: 00007f18b045ef60 RCX: 00007f18b034bb19 [ 132.377462] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 [ 132.378496] RBP: 00007f18b03a5f6d R08: 0000000000000000 R09: 0000000000000000 [ 132.379516] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 132.380572] R13: 00007ffc731280cf R14: 00007f18ad8c1300 R15: 0000000000022000 [ 132.381621] [ 132.381990] irq event stamp: 1350 [ 132.382490] hardirqs last enabled at (1349): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 132.383899] hardirqs last disabled at (1350): [] __schedule+0x1225/0x2470 [ 132.385119] softirqs last enabled at (1342): [] __irq_exit_rcu+0x11b/0x180 [ 132.386381] softirqs last disabled at (949): [] __irq_exit_rcu+0x11b/0x180 [ 132.387616] ---[ end trace 0000000000000000 ]--- 18:55:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4bfa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "1047c359a4f1acb11cad4ebfd27f6921c592f1"}) 18:55:00 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x118c008, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@seclabel}, {@dont_appraise}, {@uid_gt}]}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000001940)={{0x1, 0x1, 0x18, r0, {0x8}}, './file1\x00'}) socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001580)='/proc/vmstat\x00', 0x0, 0x0) readv(r3, &(0x7f00000017c0)=[{&(0x7f00000015c0)=""/211, 0xd3}], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @initdev}, &(0x7f0000000000)=0x8a) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f00000009c0)={0x2, 0x8, @status={[0x8, 0x6, 0x9, 0x436, 0x3, 0x40]}, [0x7, 0x20, 0x7, 0x496, 0xc4, 0x0, 0x5847, 0x9, 0x1, 0x0, 0x3f, 0x2, 0x9, 0x0, 0x8, 0x89db, 0x4, 0x3, 0x2, 0x2, 0x4d8, 0x5, 0xa88, 0x0, 0x7, 0x7, 0xffffffffffffffc1, 0x3, 0x200, 0x9, 0x1b, 0x7417e126, 0x40, 0x7, 0x3f, 0x200, 0x228, 0x5, 0x3, 0xffff, 0x9, 0xd58, 0x7, 0x6c8e, 0x400, 0x80000000, 0x4, 0x3, 0xfffffffffffffcc7, 0x7, 0xffff, 0x1, 0x7, 0x2, 0x5, 0x65773ef5, 0x2e7db773, 0x80000000, 0xf07b, 0x1f, 0xfffffffffffffffe, 0xbae, 0x86, 0x7]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x4, 0x2a) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x8}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000680)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in=@private}, @in=@loopback, {@in6=@local, @in=@private}, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x134}}, 0x0) 18:55:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4bfa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "1047c359a4f1acb11cad4ebfd27f6921c592f1"}) [ 133.391074] loop6: detected capacity change from 0 to 40 [ 133.518321] hrtimer: interrupt took 18565 ns [ 133.605454] syz-executor.6: attempt to access beyond end of device [ 133.605454] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 133.607382] Buffer I/O error on dev loop6, logical block 10, lost async page write [ 134.841214] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 18:55:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000100)=0x8, 0x4) 18:55:05 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0xf1887000) chroot(&(0x7f0000000000)='./file0/file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180a5a268fbd7bbacb70aa9533c5b2b41783b151ad07e5d3ceed7bcdee5006dc37b469f", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = io_uring_setup(0x454c, &(0x7f0000000240)) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x8, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = dup(r0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x4, 0x80, 0x7f, 0xaf, 0x0, 0x7fffffff, 0x40, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x400, 0x2, @perf_bp={&(0x7f0000000180)}, 0x1001a, 0xf987, 0x32, 0x8, 0x9, 0x101, 0x5, 0x0, 0x63d9}, 0x0, 0x10, 0xffffffffffffffff, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000480)=r4, 0x1) sendfile(r2, r0, 0x0, 0xfffffdef) 18:55:05 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=6']) 18:55:05 executing program 7: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x123008, 0x0) mount$9p_unix(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2283ce9, 0x0) acct(&(0x7f0000000000)='./file0\x00') 18:55:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x48, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) 18:55:05 executing program 1: clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$inet(0x2, 0x80000, 0x1) 18:55:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4bfa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "1047c359a4f1acb11cad4ebfd27f6921c592f1"}) 18:55:05 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x118c008, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@seclabel}, {@dont_appraise}, {@uid_gt}]}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000001940)={{0x1, 0x1, 0x18, r0, {0x8}}, './file1\x00'}) socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001580)='/proc/vmstat\x00', 0x0, 0x0) readv(r3, &(0x7f00000017c0)=[{&(0x7f00000015c0)=""/211, 0xd3}], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @initdev}, &(0x7f0000000000)=0x8a) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f00000009c0)={0x2, 0x8, @status={[0x8, 0x6, 0x9, 0x436, 0x3, 0x40]}, [0x7, 0x20, 0x7, 0x496, 0xc4, 0x0, 0x5847, 0x9, 0x1, 0x0, 0x3f, 0x2, 0x9, 0x0, 0x8, 0x89db, 0x4, 0x3, 0x2, 0x2, 0x4d8, 0x5, 0xa88, 0x0, 0x7, 0x7, 0xffffffffffffffc1, 0x3, 0x200, 0x9, 0x1b, 0x7417e126, 0x40, 0x7, 0x3f, 0x200, 0x228, 0x5, 0x3, 0xffff, 0x9, 0xd58, 0x7, 0x6c8e, 0x400, 0x80000000, 0x4, 0x3, 0xfffffffffffffcc7, 0x7, 0xffff, 0x1, 0x7, 0x2, 0x5, 0x65773ef5, 0x2e7db773, 0x80000000, 0xf07b, 0x1f, 0xfffffffffffffffe, 0xbae, 0x86, 0x7]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x4, 0x2a) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x8}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000680)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in=@private}, @in=@loopback, {@in6=@local, @in=@private}, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x134}}, 0x0) [ 137.803798] loop6: detected capacity change from 0 to 40 [ 137.819901] ======================================================= [ 137.819901] WARNING: The mand mount option has been deprecated and [ 137.819901] and is ignored by this kernel. Remove the mand [ 137.819901] option from the mount to silence this warning. [ 137.819901] ======================================================= 18:55:06 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xbbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x44142, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) openat$ptp0(0xffffffffffffff9c, 0x0, 0x800, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x20, &(0x7f0000000000)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) [ 138.062070] syz-executor.6: attempt to access beyond end of device [ 138.062070] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 138.063909] Buffer I/O error on dev loop6, logical block 10, lost async page write 18:55:06 executing program 7: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x123008, 0x0) mount$9p_unix(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2283ce9, 0x0) acct(&(0x7f0000000000)='./file0\x00') 18:55:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x48, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) 18:55:06 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=6']) 18:55:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4bfa, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "1047c359a4f1acb11cad4ebfd27f6921c592f1"}) 18:55:06 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x118c008, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@seclabel}, {@dont_appraise}, {@uid_gt}]}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000001940)={{0x1, 0x1, 0x18, r0, {0x8}}, './file1\x00'}) socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001580)='/proc/vmstat\x00', 0x0, 0x0) readv(r3, &(0x7f00000017c0)=[{&(0x7f00000015c0)=""/211, 0xd3}], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @initdev}, &(0x7f0000000000)=0x8a) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f00000009c0)={0x2, 0x8, @status={[0x8, 0x6, 0x9, 0x436, 0x3, 0x40]}, [0x7, 0x20, 0x7, 0x496, 0xc4, 0x0, 0x5847, 0x9, 0x1, 0x0, 0x3f, 0x2, 0x9, 0x0, 0x8, 0x89db, 0x4, 0x3, 0x2, 0x2, 0x4d8, 0x5, 0xa88, 0x0, 0x7, 0x7, 0xffffffffffffffc1, 0x3, 0x200, 0x9, 0x1b, 0x7417e126, 0x40, 0x7, 0x3f, 0x200, 0x228, 0x5, 0x3, 0xffff, 0x9, 0xd58, 0x7, 0x6c8e, 0x400, 0x80000000, 0x4, 0x3, 0xfffffffffffffcc7, 0x7, 0xffff, 0x1, 0x7, 0x2, 0x5, 0x65773ef5, 0x2e7db773, 0x80000000, 0xf07b, 0x1f, 0xfffffffffffffffe, 0xbae, 0x86, 0x7]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x4, 0x2a) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x8}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000680)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in=@private}, @in=@loopback, {@in6=@local, @in=@private}, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x134}}, 0x0) 18:55:06 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0xf1887000) chroot(&(0x7f0000000000)='./file0/file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180a5a268fbd7bbacb70aa9533c5b2b41783b151ad07e5d3ceed7bcdee5006dc37b469f", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = io_uring_setup(0x454c, &(0x7f0000000240)) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x8, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = dup(r0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x4, 0x80, 0x7f, 0xaf, 0x0, 0x7fffffff, 0x40, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x400, 0x2, @perf_bp={&(0x7f0000000180)}, 0x1001a, 0xf987, 0x32, 0x8, 0x9, 0x101, 0x5, 0x0, 0x63d9}, 0x0, 0x10, 0xffffffffffffffff, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000480)=r4, 0x1) sendfile(r2, r0, 0x0, 0xfffffdef) 18:55:06 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xbbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x44142, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) openat$ptp0(0xffffffffffffff9c, 0x0, 0x800, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x20, &(0x7f0000000000)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 18:55:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000100)=0x8, 0x4) [ 138.319010] loop6: detected capacity change from 0 to 40 18:55:06 executing program 7: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x123008, 0x0) mount$9p_unix(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2283ce9, 0x0) acct(&(0x7f0000000000)='./file0\x00') 18:55:06 executing program 0: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x123008, 0x0) mount$9p_unix(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2283ce9, 0x0) acct(&(0x7f0000000000)='./file0\x00') 18:55:06 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=6']) [ 138.625415] syz-executor.6: attempt to access beyond end of device [ 138.625415] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 138.627385] Buffer I/O error on dev loop6, logical block 10, lost async page write 18:55:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000100)=0x8, 0x4) 18:55:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x48, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) 18:55:07 executing program 7: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x123008, 0x0) mount$9p_unix(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2283ce9, 0x0) acct(&(0x7f0000000000)='./file0\x00') 18:55:07 executing program 4: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x123008, 0x0) mount$9p_unix(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2283ce9, 0x0) acct(&(0x7f0000000000)='./file0\x00') 18:55:07 executing program 0: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x123008, 0x0) mount$9p_unix(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2283ce9, 0x0) acct(&(0x7f0000000000)='./file0\x00') 18:55:07 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000001b00)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x10, 0x3a, 0x0, @private2, @local, {[], @ndisc_ra={0xc0}}}}}}, 0x0) 18:55:07 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xbbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x44142, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) openat$ptp0(0xffffffffffffff9c, 0x0, 0x800, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x20, &(0x7f0000000000)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 18:55:07 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0xf1887000) chroot(&(0x7f0000000000)='./file0/file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180a5a268fbd7bbacb70aa9533c5b2b41783b151ad07e5d3ceed7bcdee5006dc37b469f", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = io_uring_setup(0x454c, &(0x7f0000000240)) setxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0x8, 0x72}, {0xffffffff, 0x2}]}, 0x18, 0x2) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = dup(r0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x4, 0x80, 0x7f, 0xaf, 0x0, 0x7fffffff, 0x40, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x400, 0x2, @perf_bp={&(0x7f0000000180)}, 0x1001a, 0xf987, 0x32, 0x8, 0x9, 0x101, 0x5, 0x0, 0x63d9}, 0x0, 0x10, 0xffffffffffffffff, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000480)=r4, 0x1) sendfile(r2, r0, 0x0, 0xfffffdef) [ 138.900539] loop6: detected capacity change from 0 to 40 18:55:07 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) waitid$P_PIDFD(0x2, r0, 0x0, 0x80000009, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 18:55:07 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000001b00)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x10, 0x3a, 0x0, @private2, @local, {[], @ndisc_ra={0xc0}}}}}}, 0x0) 18:55:07 executing program 4: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x123008, 0x0) mount$9p_unix(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2283ce9, 0x0) acct(&(0x7f0000000000)='./file0\x00') 18:55:07 executing program 0: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x123008, 0x0) mount$9p_unix(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2283ce9, 0x0) acct(&(0x7f0000000000)='./file0\x00') 18:55:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000100)=0x8, 0x4) 18:55:07 executing program 7: io_setup(0x6e, &(0x7f0000000400)) 18:55:07 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000001b00)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x10, 0x3a, 0x0, @private2, @local, {[], @ndisc_ra={0xc0}}}}}}, 0x0) [ 139.151767] syz-executor.6: attempt to access beyond end of device [ 139.151767] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 139.153780] Buffer I/O error on dev loop6, logical block 10, lost async page write 18:55:07 executing program 4: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x123008, 0x0) mount$9p_unix(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2283ce9, 0x0) acct(&(0x7f0000000000)='./file0\x00') 18:55:07 executing program 7: io_setup(0x6e, &(0x7f0000000400)) 18:55:07 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) chmod(&(0x7f0000000580)='./file0\x00', 0x0) 18:55:07 executing program 0: unshare(0x8040080) semop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x3000}], 0x1) unshare(0x48000000) 18:55:07 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000001b00)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x10, 0x3a, 0x0, @private2, @local, {[], @ndisc_ra={0xc0}}}}}}, 0x0) 18:55:07 executing program 6: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) connect$unix(r1, &(0x7f0000000000)=@abs, 0x6e) 18:55:07 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xbbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x44142, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) openat$ptp0(0xffffffffffffff9c, 0x0, 0x800, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x20, &(0x7f0000000000)) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 18:55:07 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) waitid$P_PIDFD(0x2, r0, 0x0, 0x80000009, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 18:55:07 executing program 7: io_setup(0x6e, &(0x7f0000000400)) 18:55:07 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000340)=[{&(0x7f0000010000)="601c6d6b646f736676209600088020000200000004f8000020004000000000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011000)) [ 139.735267] loop2: detected capacity change from 0 to 256 [ 139.751553] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 18:55:07 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 18:55:07 executing program 7: io_setup(0x6e, &(0x7f0000000400)) 18:55:07 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) chmod(&(0x7f0000000580)='./file0\x00', 0x0) 18:55:07 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000000)=@hopopts={0x89, 0x3, '\x00', [@hao={0xc9, 0x10, @mcast2}, @jumbo={0xc2, 0x4, 0x1}]}, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r3, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000d40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000d80)=ANY=[@ANYBLOB="8c000000040a010300000000000000000c000009280008800c00024000000000800000010c00024000000000000003720c000140000000000000001f0b00070066696c74657200000800054000000000080007006e6174000900010073797a300000000008000540fffffffd20000480080002401b301340140003006272696467655f736c6176655f30000061512b3ed960ee7fc4b58cbc38c4dc1ca85027526a507a283bc6a601e69ea1a8fedba63a0d51702d7310f4bb03f3b5c9af0a49b7a72d1e38fb4f5d2298ea4e09fc52ab2d"], 0x8c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000004) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80000000}, 0x1c) sendfile(r1, r1, 0x0, 0x100000) 18:55:08 executing program 6: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r3, r2, &(0x7f0000000800)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index, 0x0, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) io_uring_enter(r0, 0x4059, 0x0, 0x0, 0x0, 0x0) 18:55:08 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) waitid$P_PIDFD(0x2, r0, 0x0, 0x80000009, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 18:55:08 executing program 2: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) close(r0) syz_io_uring_setup(0xaaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) 18:55:08 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) chmod(&(0x7f0000000580)='./file0\x00', 0x0) 18:55:08 executing program 6: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000100)='/dev/l\xd4\xd2j\x97\xd0ME\x12w\xaf\xf2T\xe8#rol\x00', 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000140)=0xac) [ 140.107929] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 140.108715] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 140.109266] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 140.109826] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 140.110476] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 28 prio class 2 [ 140.111717] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.112581] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.113781] Buffer I/O error on dev sr0, logical block 0, async page read [ 140.117847] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.118684] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.121111] Buffer I/O error on dev sr0, logical block 1, async page read [ 140.122350] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.123107] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.124318] Buffer I/O error on dev sr0, logical block 2, async page read [ 140.125465] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.126241] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.127439] Buffer I/O error on dev sr0, logical block 3, async page read [ 140.128586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.129793] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.131003] Buffer I/O error on dev sr0, logical block 4, async page read [ 140.132145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.132948] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.134194] Buffer I/O error on dev sr0, logical block 5, async page read [ 140.135388] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.136165] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.137404] Buffer I/O error on dev sr0, logical block 6, async page read [ 140.138590] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.139407] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.140646] Buffer I/O error on dev sr0, logical block 7, async page read [ 140.141934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.142803] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.145152] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.146255] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 18:55:08 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x40, 0x58, 0x20, 0xff, 0x0, 0x7, 0x5019, 0xf, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x401, 0x8000}, 0x4000, 0x0, 0x20, 0xc, 0x5, 0x7, 0x2, 0x0, 0x10001, 0x0, 0x3}, r1, 0x5, r0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x5, 0x0, "f2d9f528b3710ff65d6647ff8507ffd7c713301d1b235210d82f9fb111b3f358554f4e80c6fb989cabdadb962f69fece9c56fd2b0a21d29aaeb1cbd983af95ebf751f73960426d35d639a489e0f22845"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001500)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x42, 0x0, "ae41ba3d08ae79cbef4c72343e141dc83dd4a24a447556e055d70b3b61fd7929acb571c66cd984146d66ae44bb567da9a6e26c17246bf5ac5a0b74d1cfdbac75e919f15f27d44a1e807ff95985c6f996"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) close(r2) r3 = gettid() openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x804000, 0x1) rt_sigqueueinfo(r3, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}) rt_tgsigqueueinfo(r3, 0x0, 0x3a, &(0x7f0000000300)={0x1, 0xfffffff9, 0x3}) [ 140.147200] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.149008] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.150023] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.151228] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 140.152196] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 18:55:08 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) chmod(&(0x7f0000000580)='./file0\x00', 0x0) 18:55:08 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x123363500, &(0x7f0000000180)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) waitid$P_PIDFD(0x2, r0, 0x0, 0x80000009, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 18:55:08 executing program 7: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x20010, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x35c3, &(0x7f0000000180)={0x0, 0x39dd, 0x8, 0x3, 0x1f4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)="f7", 0x1}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) bind$unix(r4, &(0x7f00000008c0)=@abs={0x1, 0x0, 0xfffffffd}, 0x6e) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r3, r2, r4, 0xffffffffffffffff], 0x4) 18:55:08 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="001101000737"], 0x90) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 18:55:08 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x40, 0x58, 0x20, 0xff, 0x0, 0x7, 0x5019, 0xf, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x401, 0x8000}, 0x4000, 0x0, 0x20, 0xc, 0x5, 0x7, 0x2, 0x0, 0x10001, 0x0, 0x3}, r1, 0x5, r0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x5, 0x0, "f2d9f528b3710ff65d6647ff8507ffd7c713301d1b235210d82f9fb111b3f358554f4e80c6fb989cabdadb962f69fece9c56fd2b0a21d29aaeb1cbd983af95ebf751f73960426d35d639a489e0f22845"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001500)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x42, 0x0, "ae41ba3d08ae79cbef4c72343e141dc83dd4a24a447556e055d70b3b61fd7929acb571c66cd984146d66ae44bb567da9a6e26c17246bf5ac5a0b74d1cfdbac75e919f15f27d44a1e807ff95985c6f996"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) close(r2) r3 = gettid() openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x804000, 0x1) rt_sigqueueinfo(r3, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}) rt_tgsigqueueinfo(r3, 0x0, 0x3a, &(0x7f0000000300)={0x1, 0xfffffff9, 0x3}) 18:55:08 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x40, 0x58, 0x20, 0xff, 0x0, 0x7, 0x5019, 0xf, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x401, 0x8000}, 0x4000, 0x0, 0x20, 0xc, 0x5, 0x7, 0x2, 0x0, 0x10001, 0x0, 0x3}, r1, 0x5, r0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x5, 0x0, "f2d9f528b3710ff65d6647ff8507ffd7c713301d1b235210d82f9fb111b3f358554f4e80c6fb989cabdadb962f69fece9c56fd2b0a21d29aaeb1cbd983af95ebf751f73960426d35d639a489e0f22845"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001500)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x42, 0x0, "ae41ba3d08ae79cbef4c72343e141dc83dd4a24a447556e055d70b3b61fd7929acb571c66cd984146d66ae44bb567da9a6e26c17246bf5ac5a0b74d1cfdbac75e919f15f27d44a1e807ff95985c6f996"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) close(r2) r3 = gettid() openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x804000, 0x1) rt_sigqueueinfo(r3, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}) rt_tgsigqueueinfo(r3, 0x0, 0x3a, &(0x7f0000000300)={0x1, 0xfffffff9, 0x3}) [ 140.519721] random: crng reseeded on system resumption [ 140.708026] random: crng reseeded on system resumption 18:55:08 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x40, 0x58, 0x20, 0xff, 0x0, 0x7, 0x5019, 0xf, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x401, 0x8000}, 0x4000, 0x0, 0x20, 0xc, 0x5, 0x7, 0x2, 0x0, 0x10001, 0x0, 0x3}, r1, 0x5, r0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x5, 0x0, "f2d9f528b3710ff65d6647ff8507ffd7c713301d1b235210d82f9fb111b3f358554f4e80c6fb989cabdadb962f69fece9c56fd2b0a21d29aaeb1cbd983af95ebf751f73960426d35d639a489e0f22845"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001500)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x42, 0x0, "ae41ba3d08ae79cbef4c72343e141dc83dd4a24a447556e055d70b3b61fd7929acb571c66cd984146d66ae44bb567da9a6e26c17246bf5ac5a0b74d1cfdbac75e919f15f27d44a1e807ff95985c6f996"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) close(r2) r3 = gettid() openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x804000, 0x1) rt_sigqueueinfo(r3, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}) rt_tgsigqueueinfo(r3, 0x0, 0x3a, &(0x7f0000000300)={0x1, 0xfffffff9, 0x3}) 18:55:08 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000000)=@hopopts={0x89, 0x3, '\x00', [@hao={0xc9, 0x10, @mcast2}, @jumbo={0xc2, 0x4, 0x1}]}, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r3, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000d40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000d80)=ANY=[@ANYBLOB="8c000000040a010300000000000000000c000009280008800c00024000000000800000010c00024000000000000003720c000140000000000000001f0b00070066696c74657200000800054000000000080007006e6174000900010073797a300000000008000540fffffffd20000480080002401b301340140003006272696467655f736c6176655f30000061512b3ed960ee7fc4b58cbc38c4dc1ca85027526a507a283bc6a601e69ea1a8fedba63a0d51702d7310f4bb03f3b5c9af0a49b7a72d1e38fb4f5d2298ea4e09fc52ab2d"], 0x8c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000004) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80000000}, 0x1c) sendfile(r1, r1, 0x0, 0x100000) 18:55:08 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x40, 0x58, 0x20, 0xff, 0x0, 0x7, 0x5019, 0xf, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x401, 0x8000}, 0x4000, 0x0, 0x20, 0xc, 0x5, 0x7, 0x2, 0x0, 0x10001, 0x0, 0x3}, r1, 0x5, r0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x5, 0x0, "f2d9f528b3710ff65d6647ff8507ffd7c713301d1b235210d82f9fb111b3f358554f4e80c6fb989cabdadb962f69fece9c56fd2b0a21d29aaeb1cbd983af95ebf751f73960426d35d639a489e0f22845"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001500)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x42, 0x0, "ae41ba3d08ae79cbef4c72343e141dc83dd4a24a447556e055d70b3b61fd7929acb571c66cd984146d66ae44bb567da9a6e26c17246bf5ac5a0b74d1cfdbac75e919f15f27d44a1e807ff95985c6f996"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) close(r2) r3 = gettid() openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x804000, 0x1) rt_sigqueueinfo(r3, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}) rt_tgsigqueueinfo(r3, 0x0, 0x3a, &(0x7f0000000300)={0x1, 0xfffffff9, 0x3}) 18:55:09 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="001101000737"], 0x90) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 18:55:09 executing program 7: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x20010, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x35c3, &(0x7f0000000180)={0x0, 0x39dd, 0x8, 0x3, 0x1f4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)="f7", 0x1}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) bind$unix(r4, &(0x7f00000008c0)=@abs={0x1, 0x0, 0xfffffffd}, 0x6e) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r3, r2, r4, 0xffffffffffffffff], 0x4) 18:55:09 executing program 6: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000100)='/dev/l\xd4\xd2j\x97\xd0ME\x12w\xaf\xf2T\xe8#rol\x00', 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000140)=0xac) 18:55:09 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="001101000737"], 0x90) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 18:55:09 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x40, 0x58, 0x20, 0xff, 0x0, 0x7, 0x5019, 0xf, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x401, 0x8000}, 0x4000, 0x0, 0x20, 0xc, 0x5, 0x7, 0x2, 0x0, 0x10001, 0x0, 0x3}, r1, 0x5, r0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x5, 0x0, "f2d9f528b3710ff65d6647ff8507ffd7c713301d1b235210d82f9fb111b3f358554f4e80c6fb989cabdadb962f69fece9c56fd2b0a21d29aaeb1cbd983af95ebf751f73960426d35d639a489e0f22845"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001500)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x42, 0x0, "ae41ba3d08ae79cbef4c72343e141dc83dd4a24a447556e055d70b3b61fd7929acb571c66cd984146d66ae44bb567da9a6e26c17246bf5ac5a0b74d1cfdbac75e919f15f27d44a1e807ff95985c6f996"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) close(r2) r3 = gettid() openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x804000, 0x1) rt_sigqueueinfo(r3, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}) rt_tgsigqueueinfo(r3, 0x0, 0x3a, &(0x7f0000000300)={0x1, 0xfffffff9, 0x3}) 18:55:09 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x40, 0x58, 0x20, 0xff, 0x0, 0x7, 0x5019, 0xf, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x401, 0x8000}, 0x4000, 0x0, 0x20, 0xc, 0x5, 0x7, 0x2, 0x0, 0x10001, 0x0, 0x3}, r1, 0x5, r0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x5, 0x0, "f2d9f528b3710ff65d6647ff8507ffd7c713301d1b235210d82f9fb111b3f358554f4e80c6fb989cabdadb962f69fece9c56fd2b0a21d29aaeb1cbd983af95ebf751f73960426d35d639a489e0f22845"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001500)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x42, 0x0, "ae41ba3d08ae79cbef4c72343e141dc83dd4a24a447556e055d70b3b61fd7929acb571c66cd984146d66ae44bb567da9a6e26c17246bf5ac5a0b74d1cfdbac75e919f15f27d44a1e807ff95985c6f996"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) close(r2) r3 = gettid() openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x804000, 0x1) rt_sigqueueinfo(r3, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}) rt_tgsigqueueinfo(r3, 0x0, 0x3a, &(0x7f0000000300)={0x1, 0xfffffff9, 0x3}) 18:55:09 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x40, 0x58, 0x20, 0xff, 0x0, 0x7, 0x5019, 0xf, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x401, 0x8000}, 0x4000, 0x0, 0x20, 0xc, 0x5, 0x7, 0x2, 0x0, 0x10001, 0x0, 0x3}, r1, 0x5, r0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x5, 0x0, "f2d9f528b3710ff65d6647ff8507ffd7c713301d1b235210d82f9fb111b3f358554f4e80c6fb989cabdadb962f69fece9c56fd2b0a21d29aaeb1cbd983af95ebf751f73960426d35d639a489e0f22845"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001500)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x42, 0x0, "ae41ba3d08ae79cbef4c72343e141dc83dd4a24a447556e055d70b3b61fd7929acb571c66cd984146d66ae44bb567da9a6e26c17246bf5ac5a0b74d1cfdbac75e919f15f27d44a1e807ff95985c6f996"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) close(r2) r3 = gettid() openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x804000, 0x1) rt_sigqueueinfo(r3, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}) rt_tgsigqueueinfo(r3, 0x0, 0x3a, &(0x7f0000000300)={0x1, 0xfffffff9, 0x3}) 18:55:09 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x40, 0x58, 0x20, 0xff, 0x0, 0x7, 0x5019, 0xf, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x401, 0x8000}, 0x4000, 0x0, 0x20, 0xc, 0x5, 0x7, 0x2, 0x0, 0x10001, 0x0, 0x3}, r1, 0x5, r0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x5, 0x0, "f2d9f528b3710ff65d6647ff8507ffd7c713301d1b235210d82f9fb111b3f358554f4e80c6fb989cabdadb962f69fece9c56fd2b0a21d29aaeb1cbd983af95ebf751f73960426d35d639a489e0f22845"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001500)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x42, 0x0, "ae41ba3d08ae79cbef4c72343e141dc83dd4a24a447556e055d70b3b61fd7929acb571c66cd984146d66ae44bb567da9a6e26c17246bf5ac5a0b74d1cfdbac75e919f15f27d44a1e807ff95985c6f996"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) close(r2) r3 = gettid() openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x804000, 0x1) rt_sigqueueinfo(r3, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}) rt_tgsigqueueinfo(r3, 0x0, 0x3a, &(0x7f0000000300)={0x1, 0xfffffff9, 0x3}) 18:55:09 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="001101000737"], 0x90) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) [ 141.016947] random: crng reseeded on system resumption 18:55:09 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="001101000737"], 0x90) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 18:55:09 executing program 7: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x20010, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x35c3, &(0x7f0000000180)={0x0, 0x39dd, 0x8, 0x3, 0x1f4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)="f7", 0x1}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) bind$unix(r4, &(0x7f00000008c0)=@abs={0x1, 0x0, 0xfffffffd}, 0x6e) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r3, r2, r4, 0xffffffffffffffff], 0x4) 18:55:09 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x40, 0x58, 0x20, 0xff, 0x0, 0x7, 0x5019, 0xf, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x401, 0x8000}, 0x4000, 0x0, 0x20, 0xc, 0x5, 0x7, 0x2, 0x0, 0x10001, 0x0, 0x3}, r1, 0x5, r0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x5, 0x0, "f2d9f528b3710ff65d6647ff8507ffd7c713301d1b235210d82f9fb111b3f358554f4e80c6fb989cabdadb962f69fece9c56fd2b0a21d29aaeb1cbd983af95ebf751f73960426d35d639a489e0f22845"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001500)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x42, 0x0, "ae41ba3d08ae79cbef4c72343e141dc83dd4a24a447556e055d70b3b61fd7929acb571c66cd984146d66ae44bb567da9a6e26c17246bf5ac5a0b74d1cfdbac75e919f15f27d44a1e807ff95985c6f996"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) close(r2) r3 = gettid() openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x804000, 0x1) rt_sigqueueinfo(r3, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}) rt_tgsigqueueinfo(r3, 0x0, 0x3a, &(0x7f0000000300)={0x1, 0xfffffff9, 0x3}) 18:55:09 executing program 0: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000100)='/dev/l\xd4\xd2j\x97\xd0ME\x12w\xaf\xf2T\xe8#rol\x00', 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000140)=0xac) 18:55:09 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="001101000737"], 0x90) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 18:55:09 executing program 6: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000100)='/dev/l\xd4\xd2j\x97\xd0ME\x12w\xaf\xf2T\xe8#rol\x00', 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000140)=0xac) 18:55:09 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x40, 0x58, 0x20, 0xff, 0x0, 0x7, 0x5019, 0xf, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x401, 0x8000}, 0x4000, 0x0, 0x20, 0xc, 0x5, 0x7, 0x2, 0x0, 0x10001, 0x0, 0x3}, r1, 0x5, r0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x5, 0x0, "f2d9f528b3710ff65d6647ff8507ffd7c713301d1b235210d82f9fb111b3f358554f4e80c6fb989cabdadb962f69fece9c56fd2b0a21d29aaeb1cbd983af95ebf751f73960426d35d639a489e0f22845"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001500)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x42, 0x0, "ae41ba3d08ae79cbef4c72343e141dc83dd4a24a447556e055d70b3b61fd7929acb571c66cd984146d66ae44bb567da9a6e26c17246bf5ac5a0b74d1cfdbac75e919f15f27d44a1e807ff95985c6f996"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) close(r2) r3 = gettid() openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x804000, 0x1) rt_sigqueueinfo(r3, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}) rt_tgsigqueueinfo(r3, 0x0, 0x3a, &(0x7f0000000300)={0x1, 0xfffffff9, 0x3}) 18:55:09 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000000)=@hopopts={0x89, 0x3, '\x00', [@hao={0xc9, 0x10, @mcast2}, @jumbo={0xc2, 0x4, 0x1}]}, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r3, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000d40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000d80)=ANY=[@ANYBLOB="8c000000040a010300000000000000000c000009280008800c00024000000000800000010c00024000000000000003720c000140000000000000001f0b00070066696c74657200000800054000000000080007006e6174000900010073797a300000000008000540fffffffd20000480080002401b301340140003006272696467655f736c6176655f30000061512b3ed960ee7fc4b58cbc38c4dc1ca85027526a507a283bc6a601e69ea1a8fedba63a0d51702d7310f4bb03f3b5c9af0a49b7a72d1e38fb4f5d2298ea4e09fc52ab2d"], 0x8c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000004) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80000000}, 0x1c) sendfile(r1, r1, 0x0, 0x100000) 18:55:09 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="001101000737"], 0x90) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 18:55:09 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x40, 0x58, 0x20, 0xff, 0x0, 0x7, 0x5019, 0xf, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x401, 0x8000}, 0x4000, 0x0, 0x20, 0xc, 0x5, 0x7, 0x2, 0x0, 0x10001, 0x0, 0x3}, r1, 0x5, r0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x5, 0x0, "f2d9f528b3710ff65d6647ff8507ffd7c713301d1b235210d82f9fb111b3f358554f4e80c6fb989cabdadb962f69fece9c56fd2b0a21d29aaeb1cbd983af95ebf751f73960426d35d639a489e0f22845"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001500)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x42, 0x0, "ae41ba3d08ae79cbef4c72343e141dc83dd4a24a447556e055d70b3b61fd7929acb571c66cd984146d66ae44bb567da9a6e26c17246bf5ac5a0b74d1cfdbac75e919f15f27d44a1e807ff95985c6f996"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) close(r2) r3 = gettid() openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x804000, 0x1) rt_sigqueueinfo(r3, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}) rt_tgsigqueueinfo(r3, 0x0, 0x3a, &(0x7f0000000300)={0x1, 0xfffffff9, 0x3}) 18:55:09 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x77, 0x0, 0x2, 0x46, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x1000}, 0x80133, 0x4000000000, 0x0, 0x8, 0x20, 0xfffffc00, 0x0, 0x0, 0x4000, 0x0, 0x10000000000000}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x6) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1, 0x417, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) close(r1) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="110000008ef8ca6bf5c0d915000000001085d317"], 0x13) io_setup(0x5, &(0x7f00000003c0)=0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e24, @local}, {0x2, 0x4e21, @remote}, {0x2, 0x4e28, @multicast2}, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb52, 0x4}) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @local}, {0x2, 0x4e20, @broadcast}, 0x186, 0x0, 0x0, 0x0, 0x100, 0x0, 0x80000000, 0x9, 0xfffe}) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000000)=0x5e, 0xfffffffffffffe2e) sendto(r4, &(0x7f0000000280)="ee3bc48c71ffa43c048897aef8d277337f04332ffb70654305187a1a01f94cf6a3218494667c7b5693e61b624e4a6a2de76244610545c7daa91f32b2550409e9e430359ba094da74e03f64690a8cb3ac93f1e81a26c00a8796b42d46a77d17267a923f700d2c4f69bae83624692d7cd3f5c8df9cf0cfa2873de584b66c4840b22c2365d9208c98d91c668a2862d689d0cb8cb39e", 0x94, 0xc010, &(0x7f0000000340)=@caif=@rfm={0x25, 0x5, "01770911920fa6b0cf9a6f6b2b34fce1"}, 0x80) ioctl$FICLONE(r3, 0x40049409, r4) setsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000400)=0xfffffff8, 0x4) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x1, r3, &(0x7f0000000040)="ddbd67ed99e3adaebcfce31cdfefd8aa2bd036e9da9befc85953675f2755440408d1ce5ae2dce9c86a0ef3ecfc39f81e455511fd12ffda6622d37f01e08a89eeee8c7e04bd024feb85f4311aa508d291c0318c49c38586cf774ac595fb83506273982d3d208992c247884c7f1ae1cdbd1018a1871aaf40177b1469101c2e30eb1928eef8e957c55f955fd40c8672dd19109f4acb6a490d4f7e44be394951a2d411f52574165272f568e31e6405661ab4f9b0c73eadee42a615390e4d294c054cca1c6a4839cad3ce638b53330d933603b78c28032c640196a076b2", 0xdb, 0x101, 0x0, 0x1, r5}, &(0x7f00000001c0)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) fsetxattr(r6, &(0x7f00000002c0)=@known='security.selinux\x00', &(0x7f0000000000)='\xf4\xf2\xc5\xa1\xe3\xad\x19\xdcE\xc5\xcc6\x19\xabw\xbcE\xf4\x11\xf5\xb4\xb2\xd2\xb1\xcd\xd6\xa9\xea\xba\x90\x8e=\xec0%9*=Gw\x92t\x1b\xa2\xdd\xe6?\"I\x039o\xc2\xc3j\xe7\xc2s\xef}\xbe\xf8L c\x85v\x7fg\xbe\xf3\xb8\xce', 0x49, 0x0) io_cancel(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x9, r6, &(0x7f0000000180)="4a3d565607804ea56b6df1401bf2c9ec05912fd74e9b6aba9764e29e726b782f686949f044ae5187accdf8622ff50723a8e28958eabe391447bec75451d476e57594c1a9731fceeaac5cbf827be3ca8b6ab1d215040ba28bb26edfb943db45e457008786e0474f91c94ab754b0e09d07c5a3fb2619e2dcf085d7b078afba53e749e4e09716059851eead4661c5b4e7ed44096df252e7f8521d7a5fd77008c2f8c08cf76fa282db9ecf08dd614d19f802d00a1b85f7feb3bf8ae800d9958c1ca6e7af75d2fffe8f93eecf050008c1e9c9f62058180dc6a6338620f92e70003dbdff389af97fdd415c3aae579f84a110e9a1b1aa4f54", 0xf5, 0x92, 0x0, 0x4, r0}, &(0x7f0000000280)) [ 141.194656] random: crng reseeded on system resumption 18:55:09 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) perf_event_open(&(0x7f00000006c0)={0x0, 0x80, 0xa4, 0x94, 0x40, 0x20, 0x0, 0x17, 0x10000, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000180), 0x9}, 0x22, 0xffff, 0x401, 0x0, 0x8000, 0x0, 0x7ff, 0x0, 0x5}, r1, 0xe, r2, 0xb) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000694c1a3547122747b08e4e073494f2ac8999d7009c5196903c2ed99ad4c19522c75bc6f979c6807a9891bc18efcd9d5e2f69fc960780520f996905aab611a112ad9e62e0b0657e33f2d9ebde28999ac27fedc6eda6b935e558e5a83227de285afd1d37ee3b9ab10cb55b819b6e541ff3f300ad13fe5ceb190baa9da9", @ANYRES32, @ANYBLOB="060c0000000000002e2f66696c653000"]) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00'}) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) preadv(r3, &(0x7f0000000640)=[{&(0x7f0000000200)=""/32, 0x20}, {&(0x7f00000003c0)=""/242, 0xf2}, {&(0x7f0000000240)}, {&(0x7f00000004c0)=""/247, 0xf7}, {&(0x7f00000005c0)=""/88, 0x58}], 0x5, 0x9, 0x8000) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2}) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000140)=0x100, 0x4) [ 141.205389] SELinux: Context šE6wEұ֩꺐=0%9*=Gwt?"I9ojs}L cvg is not valid (left unmapped). [ 141.206726] audit: type=1400 audit(1663008909.362:9): avc: denied { relabelto } for pid=4204 comm="syz-executor.5" name="TCP" dev="sockfs" ino=15063 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 trawcon=F4F2C5A1E3AD19DC45C5CC3619AB77BC45F411F5B4B2D2B1CDD6A9EABA908E3DEC3025392A3D477792741BA2DDE63F224903396FC2C36AE7C273EF7DBEF84C206385767F67BEF3B8CE 18:55:09 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, {0x14, 0x0, 0x0, @empty}}}}}, 0x0) 18:55:09 executing program 7: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x20010, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x35c3, &(0x7f0000000180)={0x0, 0x39dd, 0x8, 0x3, 0x1f4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)="f7", 0x1}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) bind$unix(r4, &(0x7f00000008c0)=@abs={0x1, 0x0, 0xfffffffd}, 0x6e) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[r3, r2, r4, 0xffffffffffffffff], 0x4) 18:55:09 executing program 6: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000100)='/dev/l\xd4\xd2j\x97\xd0ME\x12w\xaf\xf2T\xe8#rol\x00', 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000140)=0xac) 18:55:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, 0x0) 18:55:09 executing program 0: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000100)='/dev/l\xd4\xd2j\x97\xd0ME\x12w\xaf\xf2T\xe8#rol\x00', 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000180)=0x1) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000140)=0xac) 18:55:09 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x40, 0x58, 0x20, 0xff, 0x0, 0x7, 0x5019, 0xf, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x4, @perf_config_ext={0x401, 0x8000}, 0x4000, 0x0, 0x20, 0xc, 0x5, 0x7, 0x2, 0x0, 0x10001, 0x0, 0x3}, r1, 0x5, r0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x5, 0x0, "f2d9f528b3710ff65d6647ff8507ffd7c713301d1b235210d82f9fb111b3f358554f4e80c6fb989cabdadb962f69fece9c56fd2b0a21d29aaeb1cbd983af95ebf751f73960426d35d639a489e0f22845"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001500)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x42, 0x0, "ae41ba3d08ae79cbef4c72343e141dc83dd4a24a447556e055d70b3b61fd7929acb571c66cd984146d66ae44bb567da9a6e26c17246bf5ac5a0b74d1cfdbac75e919f15f27d44a1e807ff95985c6f996"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) close(r2) r3 = gettid() openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x804000, 0x1) rt_sigqueueinfo(r3, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}) rt_tgsigqueueinfo(r3, 0x0, 0x3a, &(0x7f0000000300)={0x1, 0xfffffff9, 0x3}) 18:55:09 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioperm(0x0, 0x800, 0x4) ioperm(0x0, 0x4, 0x0) 18:55:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086607, 0x0) 18:55:09 executing program 1: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = openat2(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0) ioctl$SNAPSHOT_FREE(r5, 0x3305) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ff5000/0x2000)=nil) [ 141.429460] random: crng reseeded on system resumption 18:55:09 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='devpts\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x202020, &(0x7f0000000540)={[{@gid}]}) 18:55:09 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) perf_event_open(&(0x7f00000006c0)={0x0, 0x80, 0xa4, 0x94, 0x40, 0x20, 0x0, 0x17, 0x10000, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000180), 0x9}, 0x22, 0xffff, 0x401, 0x0, 0x8000, 0x0, 0x7ff, 0x0, 0x5}, r1, 0xe, r2, 0xb) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000694c1a3547122747b08e4e073494f2ac8999d7009c5196903c2ed99ad4c19522c75bc6f979c6807a9891bc18efcd9d5e2f69fc960780520f996905aab611a112ad9e62e0b0657e33f2d9ebde28999ac27fedc6eda6b935e558e5a83227de285afd1d37ee3b9ab10cb55b819b6e541ff3f300ad13fe5ceb190baa9da9", @ANYRES32, @ANYBLOB="060c0000000000002e2f66696c653000"]) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00'}) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) preadv(r3, &(0x7f0000000640)=[{&(0x7f0000000200)=""/32, 0x20}, {&(0x7f00000003c0)=""/242, 0xf2}, {&(0x7f0000000240)}, {&(0x7f00000004c0)=""/247, 0xf7}, {&(0x7f00000005c0)=""/88, 0x58}], 0x5, 0x9, 0x8000) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2}) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000140)=0x100, 0x4) [ 141.633592] random: crng reseeded on system resumption [ 141.635497] Restarting kernel threads ... done. VM DIAGNOSIS: 18:55:00 Registers: info registers vcpu 0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b1e41 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff8880433a73c8 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000020 R11=0000000000000001 R12=0000000000000020 R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b1e30 RIP=ffffffff822b1e99 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f18ad8c1700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000560776dea4c8 CR3=000000001d3e0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f18b04327c0 00007f18b04327c8 YMM02=0000000000000000 0000000000000000 00007f18b04327e0 00007f18b04327c0 YMM03=0000000000000000 0000000000000000 00007f18b04327c8 00007f18b04327c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff88801b2378b0 RCX=0000000000000000 RDX=1ffff11003646f21 RSI=ffff88801b237ab8 RDI=ffffffff8185c4a2 RBP=ffff88801b237908 RSP=ffff88801b237898 R8 =ffffffff85eef11c R9 =ffffffff85eef120 R10=ffffed1003646f23 R11=ffff88801b2378f0 R12=ffff88801b237978 R13=0000000000000000 R14=ffff88800ff25040 R15=ffff88800f71fcb0 RIP=ffffffff8111b0ce RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555682d400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f60d82b03a4 CR3=000000001d1e0000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000