Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:5334' (ECDSA) to the list of known hosts. 2022/09/12 19:01:34 fuzzer started 2022/09/12 19:01:34 dialing manager at localhost:38027 syzkaller login: [ 39.212743] cgroup: Unknown subsys name 'net' [ 39.306437] cgroup: Unknown subsys name 'rlimit' 2022/09/12 19:01:49 syscalls: 2215 2022/09/12 19:01:49 code coverage: enabled 2022/09/12 19:01:49 comparison tracing: enabled 2022/09/12 19:01:49 extra coverage: enabled 2022/09/12 19:01:49 setuid sandbox: enabled 2022/09/12 19:01:49 namespace sandbox: enabled 2022/09/12 19:01:49 Android sandbox: enabled 2022/09/12 19:01:49 fault injection: enabled 2022/09/12 19:01:49 leak checking: enabled 2022/09/12 19:01:49 net packet injection: enabled 2022/09/12 19:01:49 net device setup: enabled 2022/09/12 19:01:49 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/12 19:01:49 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/12 19:01:49 USB emulation: enabled 2022/09/12 19:01:49 hci packet injection: enabled 2022/09/12 19:01:49 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220912) 2022/09/12 19:01:49 802.15.4 emulation: enabled 2022/09/12 19:01:49 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/12 19:01:49 fetching corpus: 50, signal 31099/34682 (executing program) 2022/09/12 19:01:49 fetching corpus: 100, signal 39308/44510 (executing program) 2022/09/12 19:01:49 fetching corpus: 150, signal 59330/65708 (executing program) 2022/09/12 19:01:49 fetching corpus: 200, signal 62823/70632 (executing program) 2022/09/12 19:01:49 fetching corpus: 250, signal 67224/76381 (executing program) 2022/09/12 19:01:49 fetching corpus: 300, signal 72974/83355 (executing program) 2022/09/12 19:01:50 fetching corpus: 350, signal 77808/89400 (executing program) 2022/09/12 19:01:50 fetching corpus: 400, signal 83092/95777 (executing program) 2022/09/12 19:01:50 fetching corpus: 450, signal 89191/102861 (executing program) 2022/09/12 19:01:50 fetching corpus: 500, signal 95408/109962 (executing program) 2022/09/12 19:01:50 fetching corpus: 550, signal 100954/116345 (executing program) 2022/09/12 19:01:50 fetching corpus: 600, signal 103911/120329 (executing program) 2022/09/12 19:01:51 fetching corpus: 650, signal 106388/123813 (executing program) 2022/09/12 19:01:51 fetching corpus: 700, signal 108907/127355 (executing program) 2022/09/12 19:01:51 fetching corpus: 750, signal 114106/133180 (executing program) 2022/09/12 19:01:51 fetching corpus: 800, signal 116895/136825 (executing program) 2022/09/12 19:01:51 fetching corpus: 850, signal 120386/141054 (executing program) 2022/09/12 19:01:51 fetching corpus: 900, signal 122593/144222 (executing program) 2022/09/12 19:01:51 fetching corpus: 950, signal 124919/147388 (executing program) 2022/09/12 19:01:52 fetching corpus: 1000, signal 128270/151360 (executing program) 2022/09/12 19:01:52 fetching corpus: 1050, signal 130925/154699 (executing program) 2022/09/12 19:01:52 fetching corpus: 1100, signal 132353/156914 (executing program) 2022/09/12 19:01:52 fetching corpus: 1150, signal 133963/159314 (executing program) 2022/09/12 19:01:52 fetching corpus: 1200, signal 136098/162086 (executing program) 2022/09/12 19:01:52 fetching corpus: 1250, signal 137479/164280 (executing program) 2022/09/12 19:01:52 fetching corpus: 1300, signal 138886/166427 (executing program) 2022/09/12 19:01:52 fetching corpus: 1350, signal 139956/168311 (executing program) 2022/09/12 19:01:53 fetching corpus: 1400, signal 141758/170800 (executing program) 2022/09/12 19:01:53 fetching corpus: 1450, signal 144036/173611 (executing program) 2022/09/12 19:01:53 fetching corpus: 1500, signal 146124/176229 (executing program) 2022/09/12 19:01:53 fetching corpus: 1550, signal 147417/178246 (executing program) 2022/09/12 19:01:53 fetching corpus: 1600, signal 148611/180134 (executing program) 2022/09/12 19:01:53 fetching corpus: 1650, signal 151190/183119 (executing program) 2022/09/12 19:01:53 fetching corpus: 1700, signal 152972/185401 (executing program) 2022/09/12 19:01:53 fetching corpus: 1750, signal 154205/187257 (executing program) 2022/09/12 19:01:54 fetching corpus: 1800, signal 156570/189881 (executing program) 2022/09/12 19:01:54 fetching corpus: 1850, signal 157805/191675 (executing program) 2022/09/12 19:01:54 fetching corpus: 1900, signal 159759/193978 (executing program) 2022/09/12 19:01:54 fetching corpus: 1950, signal 161079/195789 (executing program) 2022/09/12 19:01:54 fetching corpus: 2000, signal 162629/197769 (executing program) 2022/09/12 19:01:54 fetching corpus: 2050, signal 163951/199523 (executing program) 2022/09/12 19:01:54 fetching corpus: 2100, signal 165107/201151 (executing program) 2022/09/12 19:01:55 fetching corpus: 2150, signal 167130/203365 (executing program) 2022/09/12 19:01:55 fetching corpus: 2200, signal 168759/205295 (executing program) 2022/09/12 19:01:55 fetching corpus: 2250, signal 170005/206952 (executing program) 2022/09/12 19:01:55 fetching corpus: 2300, signal 171173/208562 (executing program) 2022/09/12 19:01:55 fetching corpus: 2350, signal 172672/210396 (executing program) 2022/09/12 19:01:55 fetching corpus: 2400, signal 173806/211912 (executing program) 2022/09/12 19:01:55 fetching corpus: 2450, signal 174911/213345 (executing program) 2022/09/12 19:01:56 fetching corpus: 2500, signal 176209/214990 (executing program) 2022/09/12 19:01:56 fetching corpus: 2550, signal 177369/216533 (executing program) 2022/09/12 19:01:56 fetching corpus: 2600, signal 178663/218099 (executing program) 2022/09/12 19:01:56 fetching corpus: 2650, signal 179881/219591 (executing program) 2022/09/12 19:01:56 fetching corpus: 2700, signal 180623/220789 (executing program) 2022/09/12 19:01:56 fetching corpus: 2750, signal 181472/222011 (executing program) 2022/09/12 19:01:56 fetching corpus: 2800, signal 182950/223601 (executing program) 2022/09/12 19:01:57 fetching corpus: 2850, signal 184016/224937 (executing program) 2022/09/12 19:01:57 fetching corpus: 2900, signal 185147/226316 (executing program) 2022/09/12 19:01:57 fetching corpus: 2950, signal 186068/227556 (executing program) 2022/09/12 19:01:57 fetching corpus: 3000, signal 187365/228996 (executing program) 2022/09/12 19:01:57 fetching corpus: 3050, signal 188558/230355 (executing program) 2022/09/12 19:01:57 fetching corpus: 3100, signal 189762/231715 (executing program) 2022/09/12 19:01:57 fetching corpus: 3150, signal 190950/233023 (executing program) 2022/09/12 19:01:58 fetching corpus: 3200, signal 192308/234458 (executing program) 2022/09/12 19:01:58 fetching corpus: 3250, signal 193293/235658 (executing program) 2022/09/12 19:01:58 fetching corpus: 3300, signal 194154/236758 (executing program) 2022/09/12 19:01:58 fetching corpus: 3350, signal 195513/238094 (executing program) 2022/09/12 19:01:58 fetching corpus: 3400, signal 196433/239218 (executing program) 2022/09/12 19:01:58 fetching corpus: 3450, signal 197231/240268 (executing program) 2022/09/12 19:01:58 fetching corpus: 3500, signal 198603/241537 (executing program) 2022/09/12 19:01:59 fetching corpus: 3550, signal 200287/242930 (executing program) 2022/09/12 19:01:59 fetching corpus: 3600, signal 200996/243888 (executing program) 2022/09/12 19:01:59 fetching corpus: 3650, signal 201950/244948 (executing program) 2022/09/12 19:01:59 fetching corpus: 3700, signal 203180/246061 (executing program) 2022/09/12 19:01:59 fetching corpus: 3750, signal 204005/247055 (executing program) 2022/09/12 19:01:59 fetching corpus: 3800, signal 204674/247914 (executing program) 2022/09/12 19:01:59 fetching corpus: 3850, signal 205668/248943 (executing program) 2022/09/12 19:01:59 fetching corpus: 3900, signal 206229/249744 (executing program) 2022/09/12 19:02:00 fetching corpus: 3950, signal 206903/250631 (executing program) 2022/09/12 19:02:00 fetching corpus: 4000, signal 207525/251481 (executing program) 2022/09/12 19:02:00 fetching corpus: 4050, signal 208268/252359 (executing program) 2022/09/12 19:02:00 fetching corpus: 4100, signal 208899/253128 (executing program) 2022/09/12 19:02:00 fetching corpus: 4150, signal 209553/253941 (executing program) 2022/09/12 19:02:00 fetching corpus: 4200, signal 210312/254776 (executing program) 2022/09/12 19:02:00 fetching corpus: 4250, signal 210994/255584 (executing program) 2022/09/12 19:02:00 fetching corpus: 4300, signal 211772/256429 (executing program) 2022/09/12 19:02:01 fetching corpus: 4350, signal 212446/257219 (executing program) 2022/09/12 19:02:01 fetching corpus: 4400, signal 213053/257974 (executing program) 2022/09/12 19:02:01 fetching corpus: 4450, signal 213854/258761 (executing program) 2022/09/12 19:02:01 fetching corpus: 4500, signal 214405/259446 (executing program) 2022/09/12 19:02:01 fetching corpus: 4550, signal 215210/260186 (executing program) 2022/09/12 19:02:01 fetching corpus: 4600, signal 215873/260911 (executing program) 2022/09/12 19:02:01 fetching corpus: 4650, signal 216841/261726 (executing program) 2022/09/12 19:02:02 fetching corpus: 4700, signal 218035/262599 (executing program) 2022/09/12 19:02:02 fetching corpus: 4750, signal 218887/263362 (executing program) 2022/09/12 19:02:02 fetching corpus: 4800, signal 219774/264139 (executing program) 2022/09/12 19:02:02 fetching corpus: 4850, signal 220788/264880 (executing program) 2022/09/12 19:02:02 fetching corpus: 4900, signal 221400/265482 (executing program) 2022/09/12 19:02:02 fetching corpus: 4950, signal 221806/266084 (executing program) 2022/09/12 19:02:02 fetching corpus: 5000, signal 222723/266823 (executing program) 2022/09/12 19:02:03 fetching corpus: 5050, signal 222996/267368 (executing program) 2022/09/12 19:02:03 fetching corpus: 5100, signal 223957/268048 (executing program) 2022/09/12 19:02:03 fetching corpus: 5150, signal 224523/268635 (executing program) 2022/09/12 19:02:03 fetching corpus: 5200, signal 225028/269192 (executing program) 2022/09/12 19:02:03 fetching corpus: 5250, signal 225685/269788 (executing program) 2022/09/12 19:02:03 fetching corpus: 5300, signal 226140/270303 (executing program) 2022/09/12 19:02:03 fetching corpus: 5350, signal 226587/270843 (executing program) 2022/09/12 19:02:03 fetching corpus: 5400, signal 227949/271677 (executing program) 2022/09/12 19:02:04 fetching corpus: 5450, signal 228652/272215 (executing program) 2022/09/12 19:02:04 fetching corpus: 5500, signal 229389/272756 (executing program) 2022/09/12 19:02:04 fetching corpus: 5550, signal 230121/273276 (executing program) 2022/09/12 19:02:04 fetching corpus: 5600, signal 230784/273812 (executing program) 2022/09/12 19:02:04 fetching corpus: 5650, signal 231851/274388 (executing program) 2022/09/12 19:02:04 fetching corpus: 5700, signal 232366/274832 (executing program) 2022/09/12 19:02:04 fetching corpus: 5750, signal 232904/275368 (executing program) 2022/09/12 19:02:05 fetching corpus: 5800, signal 233442/275866 (executing program) 2022/09/12 19:02:05 fetching corpus: 5850, signal 234036/276313 (executing program) 2022/09/12 19:02:05 fetching corpus: 5900, signal 234370/276702 (executing program) 2022/09/12 19:02:05 fetching corpus: 5950, signal 235089/277196 (executing program) 2022/09/12 19:02:05 fetching corpus: 6000, signal 235798/277652 (executing program) 2022/09/12 19:02:05 fetching corpus: 6050, signal 236297/278052 (executing program) 2022/09/12 19:02:05 fetching corpus: 6100, signal 236989/278515 (executing program) 2022/09/12 19:02:06 fetching corpus: 6150, signal 237598/278934 (executing program) 2022/09/12 19:02:06 fetching corpus: 6200, signal 238094/279366 (executing program) 2022/09/12 19:02:06 fetching corpus: 6250, signal 238730/279732 (executing program) 2022/09/12 19:02:06 fetching corpus: 6300, signal 239250/280104 (executing program) 2022/09/12 19:02:06 fetching corpus: 6350, signal 239720/280546 (executing program) 2022/09/12 19:02:06 fetching corpus: 6400, signal 240585/281043 (executing program) 2022/09/12 19:02:06 fetching corpus: 6450, signal 241321/281429 (executing program) 2022/09/12 19:02:07 fetching corpus: 6500, signal 241750/281755 (executing program) 2022/09/12 19:02:07 fetching corpus: 6550, signal 242164/282106 (executing program) 2022/09/12 19:02:07 fetching corpus: 6600, signal 242663/282448 (executing program) 2022/09/12 19:02:07 fetching corpus: 6650, signal 243216/282782 (executing program) 2022/09/12 19:02:07 fetching corpus: 6700, signal 243640/283123 (executing program) 2022/09/12 19:02:07 fetching corpus: 6750, signal 244143/283447 (executing program) 2022/09/12 19:02:07 fetching corpus: 6800, signal 244921/283776 (executing program) 2022/09/12 19:02:08 fetching corpus: 6850, signal 245634/284054 (executing program) 2022/09/12 19:02:08 fetching corpus: 6900, signal 246225/284296 (executing program) 2022/09/12 19:02:08 fetching corpus: 6950, signal 246786/284304 (executing program) 2022/09/12 19:02:08 fetching corpus: 7000, signal 247361/284305 (executing program) 2022/09/12 19:02:08 fetching corpus: 7050, signal 247865/284352 (executing program) 2022/09/12 19:02:08 fetching corpus: 7100, signal 248968/284379 (executing program) 2022/09/12 19:02:08 fetching corpus: 7150, signal 249500/284418 (executing program) 2022/09/12 19:02:09 fetching corpus: 7200, signal 249899/284440 (executing program) 2022/09/12 19:02:09 fetching corpus: 7250, signal 250518/284522 (executing program) 2022/09/12 19:02:09 fetching corpus: 7300, signal 250957/284543 (executing program) 2022/09/12 19:02:09 fetching corpus: 7350, signal 251763/284612 (executing program) 2022/09/12 19:02:09 fetching corpus: 7400, signal 252196/284622 (executing program) 2022/09/12 19:02:09 fetching corpus: 7450, signal 252542/284632 (executing program) 2022/09/12 19:02:09 fetching corpus: 7500, signal 253021/284642 (executing program) 2022/09/12 19:02:09 fetching corpus: 7550, signal 253484/284653 (executing program) 2022/09/12 19:02:10 fetching corpus: 7600, signal 254071/284678 (executing program) 2022/09/12 19:02:10 fetching corpus: 7650, signal 254346/284691 (executing program) 2022/09/12 19:02:10 fetching corpus: 7700, signal 254747/284705 (executing program) 2022/09/12 19:02:10 fetching corpus: 7750, signal 255266/284732 (executing program) 2022/09/12 19:02:10 fetching corpus: 7800, signal 255590/284739 (executing program) 2022/09/12 19:02:10 fetching corpus: 7850, signal 256196/284759 (executing program) 2022/09/12 19:02:10 fetching corpus: 7900, signal 256494/284766 (executing program) 2022/09/12 19:02:11 fetching corpus: 7950, signal 256963/284786 (executing program) 2022/09/12 19:02:11 fetching corpus: 8000, signal 257424/284796 (executing program) 2022/09/12 19:02:11 fetching corpus: 8050, signal 257693/284799 (executing program) 2022/09/12 19:02:11 fetching corpus: 8100, signal 258133/284803 (executing program) 2022/09/12 19:02:11 fetching corpus: 8150, signal 258432/284806 (executing program) 2022/09/12 19:02:11 fetching corpus: 8200, signal 258925/284858 (executing program) 2022/09/12 19:02:12 fetching corpus: 8250, signal 259586/284862 (executing program) 2022/09/12 19:02:12 fetching corpus: 8300, signal 260042/284866 (executing program) 2022/09/12 19:02:12 fetching corpus: 8350, signal 260448/284871 (executing program) 2022/09/12 19:02:12 fetching corpus: 8400, signal 261034/284882 (executing program) 2022/09/12 19:02:12 fetching corpus: 8450, signal 261485/284903 (executing program) 2022/09/12 19:02:12 fetching corpus: 8500, signal 261767/284911 (executing program) 2022/09/12 19:02:12 fetching corpus: 8550, signal 262217/284938 (executing program) 2022/09/12 19:02:12 fetching corpus: 8600, signal 262737/284954 (executing program) 2022/09/12 19:02:13 fetching corpus: 8650, signal 263429/284984 (executing program) 2022/09/12 19:02:13 fetching corpus: 8700, signal 263845/284992 (executing program) 2022/09/12 19:02:13 fetching corpus: 8750, signal 264538/285055 (executing program) 2022/09/12 19:02:13 fetching corpus: 8800, signal 265235/285159 (executing program) 2022/09/12 19:02:13 fetching corpus: 8850, signal 265546/285163 (executing program) 2022/09/12 19:02:13 fetching corpus: 8900, signal 265929/285182 (executing program) 2022/09/12 19:02:13 fetching corpus: 8950, signal 266386/285191 (executing program) 2022/09/12 19:02:14 fetching corpus: 9000, signal 266878/285191 (executing program) 2022/09/12 19:02:14 fetching corpus: 9050, signal 267376/285278 (executing program) 2022/09/12 19:02:14 fetching corpus: 9100, signal 267920/285306 (executing program) 2022/09/12 19:02:14 fetching corpus: 9150, signal 268348/285307 (executing program) 2022/09/12 19:02:14 fetching corpus: 9200, signal 268752/285321 (executing program) 2022/09/12 19:02:14 fetching corpus: 9250, signal 269123/285323 (executing program) 2022/09/12 19:02:14 fetching corpus: 9300, signal 269688/285373 (executing program) 2022/09/12 19:02:14 fetching corpus: 9350, signal 270121/285433 (executing program) 2022/09/12 19:02:15 fetching corpus: 9400, signal 270621/285446 (executing program) 2022/09/12 19:02:15 fetching corpus: 9450, signal 271089/285446 (executing program) 2022/09/12 19:02:15 fetching corpus: 9500, signal 271624/285460 (executing program) 2022/09/12 19:02:15 fetching corpus: 9550, signal 272036/285470 (executing program) 2022/09/12 19:02:15 fetching corpus: 9600, signal 272482/285561 (executing program) 2022/09/12 19:02:15 fetching corpus: 9650, signal 273249/285565 (executing program) 2022/09/12 19:02:16 fetching corpus: 9700, signal 273550/285565 (executing program) 2022/09/12 19:02:16 fetching corpus: 9750, signal 274076/285570 (executing program) 2022/09/12 19:02:16 fetching corpus: 9800, signal 274499/285575 (executing program) 2022/09/12 19:02:16 fetching corpus: 9808, signal 274520/285581 (executing program) 2022/09/12 19:02:16 fetching corpus: 9808, signal 274520/285581 (executing program) 2022/09/12 19:02:18 starting 8 fuzzer processes 19:02:18 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000004c0)) r0 = syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0xdd89, 0x2, 0x2, 0x392}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000400)) clone3(&(0x7f0000000440)={0x80202800, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000500), {0x3f}, &(0x7f0000000180)=""/79, 0x4f, &(0x7f0000004c80)=""/102400, &(0x7f0000000100)}, 0x58) socket$inet6_udplite(0xa, 0x2, 0x88) write$binfmt_aout(r0, &(0x7f0000000540)={{0x10b, 0x80, 0x1, 0x380, 0x27d, 0x1, 0x1cd, 0x39f6}, "d130c4f232a886e5b28ff1391a08808fd9c6a11b9c78e297d6f7c54d76d6100aad7208761f15ff0fb7bc57bd16f6ecac769e767384ab42fb1c98d63d08a6956c0da279ebd6709e8216a497887fa1436970d012b741f0393c025e3f7e1a93df09c57039fdb6ac7304a1708b5d8fab64f24cb1e055bc93effb7074455c3fd237d1593dc6e2f3d0754412cb", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5aa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 19:02:18 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @loopback}, {0x0, @dev}, 0x18, {0x2, 0x0, @empty}, 'sit0\x00'}) 19:02:18 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x2d, &(0x7f0000001300)="fa35b3a3b9613f0c1a121189905c602184bca110ae5ca7233b86c1cfb71246f915831816c4abc0fc002f93d464ee477f06720f116beea272b505ec04d7c30c27cab6fe653664a1f84aedfb398e7aa2e2b55bec14ebf5b1c4222eeb3b89a03efb679295fcf346bbe8af449d07fd60cc4690b39b74f033994c951b3a09f7183551c864f57731f1714f", 0x88) [ 83.018160] audit: type=1400 audit(1663009338.602:6): avc: denied { execmem } for pid=281 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 19:02:18 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x0) pwrite64(r0, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) 19:02:18 executing program 4: getrusage(0xffffffffffffffff, &(0x7f00000002c0)) 19:02:18 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000000)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000340)={{0x101, 0x7}, 0x100, './file1\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) close_range(0xffffffffffffffff, r1, 0x49ab518b8e729bd9) 19:02:18 executing program 6: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0) 19:02:18 executing program 7: mknod(&(0x7f0000008d80)='./file0\x00', 0x1000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0202, 0x0) [ 84.242868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.246629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.248012] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.251665] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.255678] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.256971] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.263467] Bluetooth: hci0: HCI_REQ-0x0c1a [ 84.289979] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.293979] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.295511] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.300056] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.309926] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.311239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.315842] Bluetooth: hci1: HCI_REQ-0x0c1a [ 84.387769] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.392666] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.394007] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 84.394942] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 84.395631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.397776] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.399595] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.401502] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 84.403188] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 84.405874] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.407256] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 84.408984] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 84.415102] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.417065] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.419237] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 84.420718] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 84.423708] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.425082] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 84.426655] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 84.429699] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.431133] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 84.433650] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.442449] Bluetooth: hci6: HCI_REQ-0x0c1a [ 84.442966] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 84.445072] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 84.446444] Bluetooth: hci5: HCI_REQ-0x0c1a [ 84.448466] Bluetooth: hci3: HCI_REQ-0x0c1a [ 84.451561] Bluetooth: hci7: HCI_REQ-0x0c1a [ 84.562749] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.569769] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.580167] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.588999] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.602008] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.607932] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.609138] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.623117] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.633973] Bluetooth: hci4: HCI_REQ-0x0c1a [ 84.634638] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.686122] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.699295] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.712837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.732430] Bluetooth: hci2: HCI_REQ-0x0c1a [ 86.330027] Bluetooth: hci1: command 0x0409 tx timeout [ 86.330902] Bluetooth: hci0: command 0x0409 tx timeout [ 86.457564] Bluetooth: hci3: command 0x0409 tx timeout [ 86.458032] Bluetooth: hci5: command 0x0409 tx timeout [ 86.521819] Bluetooth: hci7: command 0x0409 tx timeout [ 86.521905] Bluetooth: hci6: command 0x0409 tx timeout [ 86.650581] Bluetooth: hci4: command 0x0409 tx timeout [ 86.777626] Bluetooth: hci2: command 0x0409 tx timeout [ 88.378518] Bluetooth: hci0: command 0x041b tx timeout [ 88.379041] Bluetooth: hci1: command 0x041b tx timeout [ 88.506446] Bluetooth: hci5: command 0x041b tx timeout [ 88.506969] Bluetooth: hci3: command 0x041b tx timeout [ 88.570453] Bluetooth: hci6: command 0x041b tx timeout [ 88.570981] Bluetooth: hci7: command 0x041b tx timeout [ 88.698471] Bluetooth: hci4: command 0x041b tx timeout [ 88.826455] Bluetooth: hci2: command 0x041b tx timeout [ 90.425437] Bluetooth: hci1: command 0x040f tx timeout [ 90.425970] Bluetooth: hci0: command 0x040f tx timeout [ 90.554475] Bluetooth: hci3: command 0x040f tx timeout [ 90.555013] Bluetooth: hci5: command 0x040f tx timeout [ 90.618483] Bluetooth: hci7: command 0x040f tx timeout [ 90.618963] Bluetooth: hci6: command 0x040f tx timeout [ 90.745530] Bluetooth: hci4: command 0x040f tx timeout [ 90.873415] Bluetooth: hci2: command 0x040f tx timeout [ 92.474416] Bluetooth: hci0: command 0x0419 tx timeout [ 92.474903] Bluetooth: hci1: command 0x0419 tx timeout [ 92.602412] Bluetooth: hci5: command 0x0419 tx timeout [ 92.602862] Bluetooth: hci3: command 0x0419 tx timeout [ 92.665440] Bluetooth: hci6: command 0x0419 tx timeout [ 92.665845] Bluetooth: hci7: command 0x0419 tx timeout [ 92.794817] Bluetooth: hci4: command 0x0419 tx timeout [ 92.923073] Bluetooth: hci2: command 0x0419 tx timeout [ 135.440717] audit: type=1400 audit(1663009391.024:7): avc: denied { open } for pid=3781 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 135.442441] audit: type=1400 audit(1663009391.025:8): avc: denied { kernel } for pid=3781 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 135.455110] ------------[ cut here ]------------ [ 135.455131] [ 135.455134] ====================================================== [ 135.455137] WARNING: possible circular locking dependency detected [ 135.455141] 6.0.0-rc5-next-20220912 #1 Not tainted [ 135.455148] ------------------------------------------------------ [ 135.455151] syz-executor.1/3782 is trying to acquire lock: [ 135.455158] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 135.455195] [ 135.455195] but task is already holding lock: [ 135.455198] ffff8880099c3c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 135.455226] [ 135.455226] which lock already depends on the new lock. [ 135.455226] [ 135.455229] [ 135.455229] the existing dependency chain (in reverse order) is: [ 135.455232] [ 135.455232] -> #3 (&ctx->lock){....}-{2:2}: [ 135.455246] _raw_spin_lock+0x2a/0x40 [ 135.455263] __perf_event_task_sched_out+0x53b/0x18d0 [ 135.455277] __schedule+0xedd/0x2470 [ 135.455286] preempt_schedule_common+0x45/0xc0 [ 135.455298] __cond_resched+0x17/0x30 [ 135.455308] __mutex_lock+0xa3/0x14d0 [ 135.455319] __do_sys_perf_event_open+0x1eec/0x32c0 [ 135.455333] do_syscall_64+0x3b/0x90 [ 135.455350] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 135.455367] [ 135.455367] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 135.455382] _raw_spin_lock_nested+0x30/0x40 [ 135.455397] raw_spin_rq_lock_nested+0x1e/0x30 [ 135.455411] task_fork_fair+0x63/0x4d0 [ 135.455429] sched_cgroup_fork+0x3d0/0x540 [ 135.455444] copy_process+0x3f9e/0x6df0 [ 135.455454] kernel_clone+0xe7/0x890 [ 135.455464] user_mode_thread+0xad/0xf0 [ 135.455475] rest_init+0x24/0x250 [ 135.455493] arch_call_rest_init+0xf/0x14 [ 135.455512] start_kernel+0x4c1/0x4e6 [ 135.455530] secondary_startup_64_no_verify+0xe0/0xeb [ 135.455545] [ 135.455545] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 135.455559] _raw_spin_lock_irqsave+0x39/0x60 [ 135.455575] try_to_wake_up+0xab/0x1920 [ 135.455589] up+0x75/0xb0 [ 135.455601] __up_console_sem+0x6e/0x80 [ 135.455618] console_unlock+0x46a/0x590 [ 135.455635] vt_ioctl+0x2822/0x2ca0 [ 135.455648] tty_ioctl+0x7c4/0x1700 [ 135.455660] __x64_sys_ioctl+0x19a/0x210 [ 135.455676] do_syscall_64+0x3b/0x90 [ 135.455689] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 135.455707] [ 135.455707] -> #0 ((console_sem).lock){....}-{2:2}: [ 135.455721] __lock_acquire+0x2a02/0x5e70 [ 135.455739] lock_acquire+0x1a2/0x530 [ 135.455756] _raw_spin_lock_irqsave+0x39/0x60 [ 135.455772] down_trylock+0xe/0x70 [ 135.455785] __down_trylock_console_sem+0x3b/0xd0 [ 135.455802] vprintk_emit+0x16b/0x560 [ 135.455820] vprintk+0x84/0xa0 [ 135.455837] _printk+0xba/0xf1 [ 135.455856] report_bug.cold+0x72/0xab [ 135.455868] handle_bug+0x3c/0x70 [ 135.455882] exc_invalid_op+0x14/0x50 [ 135.455895] asm_exc_invalid_op+0x16/0x20 [ 135.455912] group_sched_out.part.0+0x2c7/0x460 [ 135.455923] ctx_sched_out+0x8f1/0xc10 [ 135.455934] __perf_event_task_sched_out+0x6d0/0x18d0 [ 135.455947] __schedule+0xedd/0x2470 [ 135.455956] preempt_schedule_common+0x45/0xc0 [ 135.455968] __cond_resched+0x17/0x30 [ 135.455978] __mutex_lock+0xa3/0x14d0 [ 135.455989] __do_sys_perf_event_open+0x1eec/0x32c0 [ 135.456002] do_syscall_64+0x3b/0x90 [ 135.456016] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 135.456033] [ 135.456033] other info that might help us debug this: [ 135.456033] [ 135.456036] Chain exists of: [ 135.456036] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 135.456036] [ 135.456052] Possible unsafe locking scenario: [ 135.456052] [ 135.456054] CPU0 CPU1 [ 135.456057] ---- ---- [ 135.456059] lock(&ctx->lock); [ 135.456065] lock(&rq->__lock); [ 135.456071] lock(&ctx->lock); [ 135.456078] lock((console_sem).lock); [ 135.456084] [ 135.456084] *** DEADLOCK *** [ 135.456084] [ 135.456086] 2 locks held by syz-executor.1/3782: [ 135.456093] #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 135.456119] #1: ffff8880099c3c20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 135.456149] [ 135.456149] stack backtrace: [ 135.456152] CPU: 0 PID: 3782 Comm: syz-executor.1 Not tainted 6.0.0-rc5-next-20220912 #1 [ 135.456165] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 135.456174] Call Trace: [ 135.456177] [ 135.456181] dump_stack_lvl+0x8b/0xb3 [ 135.456196] check_noncircular+0x263/0x2e0 [ 135.456214] ? format_decode+0x26c/0xb50 [ 135.456230] ? print_circular_bug+0x450/0x450 [ 135.456249] ? enable_ptr_key_workfn+0x20/0x20 [ 135.456265] ? format_decode+0x26c/0xb50 [ 135.456282] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 135.456301] __lock_acquire+0x2a02/0x5e70 [ 135.456327] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 135.456346] ? __mutex_add_waiter+0x120/0x120 [ 135.456367] lock_acquire+0x1a2/0x530 [ 135.456385] ? down_trylock+0xe/0x70 [ 135.456401] ? rcu_read_unlock+0x40/0x40 [ 135.456425] ? vprintk+0x84/0xa0 [ 135.456445] _raw_spin_lock_irqsave+0x39/0x60 [ 135.456461] ? down_trylock+0xe/0x70 [ 135.456476] down_trylock+0xe/0x70 [ 135.456490] ? vprintk+0x84/0xa0 [ 135.456509] __down_trylock_console_sem+0x3b/0xd0 [ 135.456528] vprintk_emit+0x16b/0x560 [ 135.456549] vprintk+0x84/0xa0 [ 135.456569] _printk+0xba/0xf1 [ 135.456588] ? record_print_text.cold+0x16/0x16 [ 135.456612] ? report_bug.cold+0x66/0xab [ 135.456628] ? group_sched_out.part.0+0x2c7/0x460 [ 135.456640] report_bug.cold+0x72/0xab [ 135.456656] handle_bug+0x3c/0x70 [ 135.456670] exc_invalid_op+0x14/0x50 [ 135.456686] asm_exc_invalid_op+0x16/0x20 [ 135.456704] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 135.456719] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 135.456731] RSP: 0018:ffff88800e017978 EFLAGS: 00010006 [ 135.456741] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 135.456749] RDX: ffff88801740b580 RSI: ffffffff81566027 RDI: 0000000000000005 [ 135.456757] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 135.456765] R10: 0000000000000000 R11: ffffffff865aa01b R12: ffff8880099c3c00 [ 135.456773] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 135.456786] ? group_sched_out.part.0+0x2c7/0x460 [ 135.456800] ? group_sched_out.part.0+0x2c7/0x460 [ 135.456815] ctx_sched_out+0x8f1/0xc10 [ 135.456829] __perf_event_task_sched_out+0x6d0/0x18d0 [ 135.456846] ? lock_is_held_type+0xd7/0x130 [ 135.456866] ? __perf_cgroup_move+0x160/0x160 [ 135.456878] ? set_next_entity+0x304/0x550 [ 135.456898] ? update_curr+0x267/0x740 [ 135.456918] ? lock_is_held_type+0xd7/0x130 [ 135.456939] __schedule+0xedd/0x2470 [ 135.456953] ? io_schedule_timeout+0x150/0x150 [ 135.456965] ? find_held_lock+0x2c/0x110 [ 135.456983] ? lock_is_held_type+0xd7/0x130 [ 135.457001] ? __cond_resched+0x17/0x30 [ 135.457013] preempt_schedule_common+0x45/0xc0 [ 135.457027] __cond_resched+0x17/0x30 [ 135.457038] __mutex_lock+0xa3/0x14d0 [ 135.457052] ? lock_is_held_type+0xd7/0x130 [ 135.457070] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 135.457086] ? mutex_lock_io_nested+0x1310/0x1310 [ 135.457099] ? lock_release+0x3b2/0x750 [ 135.457119] ? __up_read+0x192/0x730 [ 135.457135] ? up_write+0x480/0x480 [ 135.457151] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 135.457171] __do_sys_perf_event_open+0x1eec/0x32c0 [ 135.457190] ? __up_read+0x192/0x730 [ 135.457205] ? perf_compat_ioctl+0x130/0x130 [ 135.457219] ? up_write+0x480/0x480 [ 135.457240] ? syscall_enter_from_user_mode+0x1d/0x50 [ 135.457259] ? syscall_enter_from_user_mode+0x1d/0x50 [ 135.457281] do_syscall_64+0x3b/0x90 [ 135.457296] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 135.457315] RIP: 0033:0x7f55a9626b19 [ 135.457324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 135.457335] RSP: 002b:00007f55a6b9c188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 135.457347] RAX: ffffffffffffffda RBX: 00007f55a9739f60 RCX: 00007f55a9626b19 [ 135.457355] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000340 [ 135.457363] RBP: 00007f55a9680f6d R08: 0000000000000000 R09: 0000000000000000 [ 135.457370] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 135.457378] R13: 00007ffcd50608df R14: 00007f55a6b9c300 R15: 0000000000022000 [ 135.457394] [ 135.516406] WARNING: CPU: 0 PID: 3782 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 135.517028] Modules linked in: [ 135.517250] CPU: 0 PID: 3782 Comm: syz-executor.1 Not tainted 6.0.0-rc5-next-20220912 #1 [ 135.517790] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 135.518553] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 135.518920] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 135.520124] RSP: 0018:ffff88800e017978 EFLAGS: 00010006 [ 135.520574] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 135.521147] RDX: ffff88801740b580 RSI: ffffffff81566027 RDI: 0000000000000005 [ 135.521693] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 135.522247] R10: 0000000000000000 R11: ffffffff865aa01b R12: ffff8880099c3c00 [ 135.522795] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 135.523338] FS: 00007f55a6b9c700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 135.523938] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.524332] CR2: 00007f8def9054a1 CR3: 0000000020588000 CR4: 0000000000350ef0 [ 135.524808] Call Trace: [ 135.524985] [ 135.525147] ctx_sched_out+0x8f1/0xc10 [ 135.525418] __perf_event_task_sched_out+0x6d0/0x18d0 [ 135.525770] ? lock_is_held_type+0xd7/0x130 [ 135.526085] ? __perf_cgroup_move+0x160/0x160 [ 135.526393] ? set_next_entity+0x304/0x550 [ 135.526688] ? update_curr+0x267/0x740 [ 135.526964] ? lock_is_held_type+0xd7/0x130 [ 135.527264] __schedule+0xedd/0x2470 [ 135.527525] ? io_schedule_timeout+0x150/0x150 [ 135.527836] ? find_held_lock+0x2c/0x110 [ 135.528118] ? lock_is_held_type+0xd7/0x130 [ 135.528419] ? __cond_resched+0x17/0x30 [ 135.528694] preempt_schedule_common+0x45/0xc0 [ 135.529005] __cond_resched+0x17/0x30 [ 135.529267] __mutex_lock+0xa3/0x14d0 [ 135.529533] ? lock_is_held_type+0xd7/0x130 [ 135.529833] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 135.530189] ? mutex_lock_io_nested+0x1310/0x1310 [ 135.530546] ? lock_release+0x3b2/0x750 [ 135.530860] ? __up_read+0x192/0x730 [ 135.531174] ? up_write+0x480/0x480 [ 135.531458] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 135.531860] __do_sys_perf_event_open+0x1eec/0x32c0 [ 135.532252] ? __up_read+0x192/0x730 [ 135.532542] ? perf_compat_ioctl+0x130/0x130 [ 135.532887] ? up_write+0x480/0x480 [ 135.533178] ? syscall_enter_from_user_mode+0x1d/0x50 [ 135.533582] ? syscall_enter_from_user_mode+0x1d/0x50 [ 135.533996] do_syscall_64+0x3b/0x90 [ 135.534286] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 135.534686] RIP: 0033:0x7f55a9626b19 [ 135.534975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 135.536314] RSP: 002b:00007f55a6b9c188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 135.536886] RAX: ffffffffffffffda RBX: 00007f55a9739f60 RCX: 00007f55a9626b19 [ 135.537427] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000340 [ 135.537974] RBP: 00007f55a9680f6d R08: 0000000000000000 R09: 0000000000000000 [ 135.538503] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 135.539033] R13: 00007ffcd50608df R14: 00007f55a6b9c300 R15: 0000000000022000 [ 135.539580] [ 135.539767] irq event stamp: 532 [ 135.540028] hardirqs last enabled at (531): [] _raw_spin_unlock_irqrestore+0x28/0x60 [ 135.540731] hardirqs last disabled at (532): [] __schedule+0x1225/0x2470 [ 135.541296] softirqs last enabled at (0): [] copy_process+0x1dfe/0x6df0 [ 135.541845] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 135.542272] ---[ end trace 0000000000000000 ]--- [ 135.543903] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) 19:03:11 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket(0x23, 0x5, 0x401) getsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000180), &(0x7f00000003c0)=0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) shmdt(0x0) openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) sendto$unix(r2, &(0x7f0000000340)="35096a773adb7d1d36d875808da81befb06d941c7e45dd8499cffd0180f67841a413f368df4699ff8e48fff7facc132a5e310e6f1631c880ef5d7c682c374fcc071a408423f98bda4d2b71a4d1c52fe56e6449de857a7bf95de55bdfc7eda7910109a10bd4cb216137edc6c9f6705eb2f2fb31d8affb5d99da19", 0x7a, 0x4000, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) [ 136.096374] hrtimer: interrupt took 19015 ns 19:03:11 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket(0x23, 0x5, 0x401) getsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000180), &(0x7f00000003c0)=0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) shmdt(0x0) openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) sendto$unix(r2, &(0x7f0000000340)="35096a773adb7d1d36d875808da81befb06d941c7e45dd8499cffd0180f67841a413f368df4699ff8e48fff7facc132a5e310e6f1631c880ef5d7c682c374fcc071a408423f98bda4d2b71a4d1c52fe56e6449de857a7bf95de55bdfc7eda7910109a10bd4cb216137edc6c9f6705eb2f2fb31d8affb5d99da19", 0x7a, 0x4000, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) 19:03:11 executing program 2: r0 = socket$inet6(0xa, 0x801, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket(0x23, 0x5, 0x401) getsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000180), &(0x7f00000003c0)=0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) shmdt(0x0) openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) sendto$unix(r2, &(0x7f0000000340)="35096a773adb7d1d36d875808da81befb06d941c7e45dd8499cffd0180f67841a413f368df4699ff8e48fff7facc132a5e310e6f1631c880ef5d7c682c374fcc071a408423f98bda4d2b71a4d1c52fe56e6449de857a7bf95de55bdfc7eda7910109a10bd4cb216137edc6c9f6705eb2f2fb31d8affb5d99da19", 0x7a, 0x4000, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) 19:03:12 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket(0x23, 0x5, 0x401) getsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000180), &(0x7f00000003c0)=0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) shmdt(0x0) openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) sendto$unix(r2, &(0x7f0000000340)="35096a773adb7d1d36d875808da81befb06d941c7e45dd8499cffd0180f67841a413f368df4699ff8e48fff7facc132a5e310e6f1631c880ef5d7c682c374fcc071a408423f98bda4d2b71a4d1c52fe56e6449de857a7bf95de55bdfc7eda7910109a10bd4cb216137edc6c9f6705eb2f2fb31d8affb5d99da19", 0x7a, 0x4000, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) 19:03:12 executing program 2: r0 = socket$inet6(0xa, 0x801, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket(0x23, 0x5, 0x401) getsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000180), &(0x7f00000003c0)=0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) shmdt(0x0) openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) sendto$unix(r2, &(0x7f0000000340)="35096a773adb7d1d36d875808da81befb06d941c7e45dd8499cffd0180f67841a413f368df4699ff8e48fff7facc132a5e310e6f1631c880ef5d7c682c374fcc071a408423f98bda4d2b71a4d1c52fe56e6449de857a7bf95de55bdfc7eda7910109a10bd4cb216137edc6c9f6705eb2f2fb31d8affb5d99da19", 0x7a, 0x4000, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) 19:03:12 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket(0x23, 0x5, 0x401) getsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000180), &(0x7f00000003c0)=0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) shmdt(0x0) openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) sendto$unix(r2, &(0x7f0000000340)="35096a773adb7d1d36d875808da81befb06d941c7e45dd8499cffd0180f67841a413f368df4699ff8e48fff7facc132a5e310e6f1631c880ef5d7c682c374fcc071a408423f98bda4d2b71a4d1c52fe56e6449de857a7bf95de55bdfc7eda7910109a10bd4cb216137edc6c9f6705eb2f2fb31d8affb5d99da19", 0x7a, 0x4000, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) 19:03:12 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket(0x23, 0x5, 0x401) getsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000180), &(0x7f00000003c0)=0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) shmdt(0x0) openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) sendto$unix(r2, &(0x7f0000000340)="35096a773adb7d1d36d875808da81befb06d941c7e45dd8499cffd0180f67841a413f368df4699ff8e48fff7facc132a5e310e6f1631c880ef5d7c682c374fcc071a408423f98bda4d2b71a4d1c52fe56e6449de857a7bf95de55bdfc7eda7910109a10bd4cb216137edc6c9f6705eb2f2fb31d8affb5d99da19", 0x7a, 0x4000, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) 19:03:12 executing program 2: r0 = socket$inet6(0xa, 0x801, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket(0x23, 0x5, 0x401) getsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000180), &(0x7f00000003c0)=0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) shmdt(0x0) openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) sendto$unix(r2, &(0x7f0000000340)="35096a773adb7d1d36d875808da81befb06d941c7e45dd8499cffd0180f67841a413f368df4699ff8e48fff7facc132a5e310e6f1631c880ef5d7c682c374fcc071a408423f98bda4d2b71a4d1c52fe56e6449de857a7bf95de55bdfc7eda7910109a10bd4cb216137edc6c9f6705eb2f2fb31d8affb5d99da19", 0x7a, 0x4000, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) 19:03:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000000)={0x1, @le_write_def_data_len={{0x2024, 0x4}}}, 0x8) 19:03:14 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket(0x23, 0x5, 0x401) getsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000180), &(0x7f00000003c0)=0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) shmdt(0x0) openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) sendto$unix(r2, &(0x7f0000000340)="35096a773adb7d1d36d875808da81befb06d941c7e45dd8499cffd0180f67841a413f368df4699ff8e48fff7facc132a5e310e6f1631c880ef5d7c682c374fcc071a408423f98bda4d2b71a4d1c52fe56e6449de857a7bf95de55bdfc7eda7910109a10bd4cb216137edc6c9f6705eb2f2fb31d8affb5d99da19", 0x7a, 0x4000, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) 19:03:14 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:03:14 executing program 7: mknod(&(0x7f0000008d80)='./file0\x00', 0x1000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0202, 0x0) 19:03:14 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 19:03:14 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000004c0)) r0 = syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0xdd89, 0x2, 0x2, 0x392}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000400)) clone3(&(0x7f0000000440)={0x80202800, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000500), {0x3f}, &(0x7f0000000180)=""/79, 0x4f, &(0x7f0000004c80)=""/102400, &(0x7f0000000100)}, 0x58) socket$inet6_udplite(0xa, 0x2, 0x88) write$binfmt_aout(r0, &(0x7f0000000540)={{0x10b, 0x80, 0x1, 0x380, 0x27d, 0x1, 0x1cd, 0x39f6}, "d130c4f232a886e5b28ff1391a08808fd9c6a11b9c78e297d6f7c54d76d6100aad7208761f15ff0fb7bc57bd16f6ecac769e767384ab42fb1c98d63d08a6956c0da279ebd6709e8216a497887fa1436970d012b741f0393c025e3f7e1a93df09c57039fdb6ac7304a1708b5d8fab64f24cb1e055bc93effb7074455c3fd237d1593dc6e2f3d0754412cb", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5aa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 19:03:14 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000000)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000340)={{0x101, 0x7}, 0x100, './file1\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) close_range(0xffffffffffffffff, r1, 0x49ab518b8e729bd9) 19:03:14 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x0) pwrite64(r0, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) 19:03:14 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 19:03:14 executing program 7: mknod(&(0x7f0000008d80)='./file0\x00', 0x1000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0202, 0x0) 19:03:15 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000000)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000340)={{0x101, 0x7}, 0x100, './file1\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) close_range(0xffffffffffffffff, r1, 0x49ab518b8e729bd9) 19:03:15 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:03:15 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x0) pwrite64(r0, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) 19:03:15 executing program 7: mknod(&(0x7f0000008d80)='./file0\x00', 0x1000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0202, 0x0) 19:03:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000004c0)) r0 = syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0xdd89, 0x2, 0x2, 0x392}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000400)) clone3(&(0x7f0000000440)={0x80202800, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000500), {0x3f}, &(0x7f0000000180)=""/79, 0x4f, &(0x7f0000004c80)=""/102400, &(0x7f0000000100)}, 0x58) socket$inet6_udplite(0xa, 0x2, 0x88) write$binfmt_aout(r0, &(0x7f0000000540)={{0x10b, 0x80, 0x1, 0x380, 0x27d, 0x1, 0x1cd, 0x39f6}, "d130c4f232a886e5b28ff1391a08808fd9c6a11b9c78e297d6f7c54d76d6100aad7208761f15ff0fb7bc57bd16f6ecac769e767384ab42fb1c98d63d08a6956c0da279ebd6709e8216a497887fa1436970d012b741f0393c025e3f7e1a93df09c57039fdb6ac7304a1708b5d8fab64f24cb1e055bc93effb7074455c3fd237d1593dc6e2f3d0754412cb", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5aa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 19:03:15 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000000)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000340)={{0x101, 0x7}, 0x100, './file1\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) close_range(0xffffffffffffffff, r1, 0x49ab518b8e729bd9) 19:03:15 executing program 6: r0 = socket$inet6(0xa, 0x801, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket(0x23, 0x5, 0x401) getsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000180), &(0x7f00000003c0)=0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) shmdt(0x0) openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) sendto$unix(r2, &(0x7f0000000340)="35096a773adb7d1d36d875808da81befb06d941c7e45dd8499cffd0180f67841a413f368df4699ff8e48fff7facc132a5e310e6f1631c880ef5d7c682c374fcc071a408423f98bda4d2b71a4d1c52fe56e6449de857a7bf95de55bdfc7eda7910109a10bd4cb216137edc6c9f6705eb2f2fb31d8affb5d99da19", 0x7a, 0x4000, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) 19:03:15 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 19:03:15 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 19:03:15 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, &(0x7f0000001cc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 19:03:15 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f00000000c0)='=', 0x1, 0x0, 0x0, 0x0) 19:03:17 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:03:17 executing program 6: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x100}, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 19:03:17 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000000)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000340)={{0x101, 0x7}, 0x100, './file1\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) close_range(0xffffffffffffffff, r1, 0x49ab518b8e729bd9) 19:03:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0x2, 0x0, 0x0, @dev}, 0x1c) 19:03:17 executing program 7: fallocate(0xffffffffffffffff, 0x0, 0x2, 0x3ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000240)={'U+', 0x10001}, 0x16, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB="194b21007d000000"], 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010000000000000000001c"], 0x14}}, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000340)) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f00000001c0), &(0x7f0000000200)=0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) 19:03:17 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x0) pwrite64(r0, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000) 19:03:17 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000000)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000340)={{0x101, 0x7}, 0x100, './file1\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) close_range(0xffffffffffffffff, r1, 0x49ab518b8e729bd9) 19:03:17 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000004c0)) r0 = syz_io_uring_setup(0x0, &(0x7f0000000200)={0x0, 0xdd89, 0x2, 0x2, 0x392}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000400)) clone3(&(0x7f0000000440)={0x80202800, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000500), {0x3f}, &(0x7f0000000180)=""/79, 0x4f, &(0x7f0000004c80)=""/102400, &(0x7f0000000100)}, 0x58) socket$inet6_udplite(0xa, 0x2, 0x88) write$binfmt_aout(r0, &(0x7f0000000540)={{0x10b, 0x80, 0x1, 0x380, 0x27d, 0x1, 0x1cd, 0x39f6}, "d130c4f232a886e5b28ff1391a08808fd9c6a11b9c78e297d6f7c54d76d6100aad7208761f15ff0fb7bc57bd16f6ecac769e767384ab42fb1c98d63d08a6956c0da279ebd6709e8216a497887fa1436970d012b741f0393c025e3f7e1a93df09c57039fdb6ac7304a1708b5d8fab64f24cb1e055bc93effb7074455c3fd237d1593dc6e2f3d0754412cb", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5aa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 19:03:17 executing program 6: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x1d, r0) request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, r0) 19:03:17 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:03:17 executing program 4: mknodat(0xffffffffffffffff, &(0x7f0000001480)='./file1/file0\x00', 0x0, 0x0) 19:03:17 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000000)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xc0000008}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000340)={{0x101, 0x7}, 0x100, './file1\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) close_range(0xffffffffffffffff, r1, 0x49ab518b8e729bd9) 19:03:17 executing program 4: syz_emit_ethernet(0x66, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "f2e2a6", 0x0, 0x3c, 0x0, @private2, @remote}}}}}}}, 0x0) [ 142.098716] audit: type=1326 audit(1663009397.683:9): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4079 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90a2dc3b19 code=0x0 19:03:17 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6}]}) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) 19:03:17 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10160) [ 142.195266] audit: type=1400 audit(1663009397.779:10): avc: denied { write } for pid=4079 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 142.939114] audit: type=1326 audit(1663009398.523:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4079 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90a2dc3b19 code=0x0 19:03:18 executing program 5: setfsuid(0xffffffffffffffff) 19:03:18 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r1, 0xffffffffffffff32, 0x0) 19:03:18 executing program 7: fallocate(0xffffffffffffffff, 0x0, 0x2, 0x3ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000240)={'U+', 0x10001}, 0x16, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB="194b21007d000000"], 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010000000000000000001c"], 0x14}}, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000340)) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f00000001c0), &(0x7f0000000200)=0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) 19:03:18 executing program 3: io_submit(0x0, 0x1, &(0x7f0000000980)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) 19:03:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@multicast1, @in6=@local}, {}, {}, 0x0, 0x0, 0xffffffffffffffff}}}, 0xc0}}, 0x0) 19:03:18 executing program 1: syz_io_uring_setup(0x6526, &(0x7f0000000480), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000500), 0x0) syz_io_uring_setup(0x5514, &(0x7f0000000580)={0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpgid(0x0) syz_io_uring_setup(0x971, &(0x7f0000000f00)={0x0, 0x1105, 0x8}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000d1e000/0x1000)=nil, &(0x7f0000000f80), &(0x7f0000000fc0)) 19:03:18 executing program 6: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, 0x0) 19:03:18 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) 19:03:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@multicast1, @in6=@local}, {}, {}, 0x0, 0x0, 0xffffffffffffffff}}}, 0xc0}}, 0x0) 19:03:18 executing program 6: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, 0x0) 19:03:18 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) 19:03:18 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x4e, &(0x7f0000000000)={@dev}, 0x14) 19:03:18 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB='d']) 19:03:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@multicast1, @in6=@local}, {}, {}, 0x0, 0x0, 0xffffffffffffffff}}}, 0xc0}}, 0x0) 19:03:18 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x0, 0x2, '\x00', [@calipso={0x7, 0x8}, @generic={0x0, 0x4, 'kI.6'}]}, 0x18) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) [ 143.159212] tmpfs: Bad value for 'gid' [ 143.165882] tmpfs: Bad value for 'gid' 19:03:18 executing program 6: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, 0x0) 19:03:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@multicast1, @in6=@local}, {}, {}, 0x0, 0x0, 0xffffffffffffffff}}}, 0xc0}}, 0x0) 19:03:19 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB='d']) 19:03:19 executing program 0: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000580)) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r0, 0x0, 0xffffffffffffffff) 19:03:19 executing program 6: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, 0x0) 19:03:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) 19:03:19 executing program 7: fallocate(0xffffffffffffffff, 0x0, 0x2, 0x3ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000240)={'U+', 0x10001}, 0x16, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB="194b21007d000000"], 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010000000000000000001c"], 0x14}}, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000340)) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f00000001c0), &(0x7f0000000200)=0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) 19:03:19 executing program 2: r0 = fsopen(&(0x7f0000000140)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 19:03:19 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x29, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000280)='devpts\x00', 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x500) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x1000210) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:03:19 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x0, 0x2, '\x00', [@calipso={0x7, 0x8}, @generic={0x0, 0x4, 'kI.6'}]}, 0x18) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) [ 143.946921] tmpfs: Bad value for 'gid' [ 143.987026] audit: type=1400 audit(1663009399.571:12): avc: denied { watch_reads } for pid=4132 comm="syz-executor.5" path="/syzkaller-testdir398974365/syzkaller.TlwM6Y/6/file0" dev="sda" ino=16011 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 19:03:19 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x0, 0x2, '\x00', [@calipso={0x7, 0x8}, @generic={0x0, 0x4, 'kI.6'}]}, 0x18) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 19:03:19 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000005, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f00000001c0)) 19:03:19 executing program 2: r0 = fsopen(&(0x7f0000000140)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 19:03:19 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB='d']) 19:03:19 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000380), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, &(0x7f0000000280)) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4401000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4020812) fchdir(r0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000240)={0x0, 0x9d}) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f00000001c0)={0x0, 0x1, 0x6, @random="767b24f4e073"}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000480)="e9ff7b3962984728a815aea8dbaa51090337c57c6c329d3bf05ac5050250c4d85bfb5895e1d2232f97e3682f01a08012a3192c7b6b6a3a49b91a9269b43825944f056f1c60edb2af88f9d1e9e23d653cfc60d05d7f21a549673485e08afb4325c9b182136721fb09e2c2e43eee2f1d534793de80b72259d7c76e224b9aa49572dede0797d37b31113f997085dbb3d70e926c2e20ed186bf1592827f34c6710482c865dc732d80591", 0xa8}], 0x1}}], 0x1, 0x8c0) recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37) timer_create(0x0, 0x0, &(0x7f0000000040)) 19:03:19 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000000000000000000000000000002000000001d00000000000000000000000000000000000000000000000000080000000000000000"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0xa, 0x0, &(0x7f00000000c0)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="4e060000000000002e00000000000000"]) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r4, 0x11, 0x65, &(0x7f0000000580), &(0x7f00000005c0)=0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x252}}, './file0\x00'}) getsockopt$inet_int(r1, 0x0, 0x16, &(0x7f0000000400), &(0x7f0000000440)=0x4) setsockopt$inet_mreqn(r1, 0x0, 0x35, &(0x7f0000000040)={@private=0xa010102, @broadcast}, 0xc) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x1ff) syz_emit_ethernet(0xd0, &(0x7f0000000200)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @generic={0xb, 0x6, "6a9961", 0x9a, 0x11, 0xff, @empty, @loopback, {[@routing={0x33, 0x8, 0x0, 0x0, 0x0, [@mcast1, @private1, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @fragment={0x4, 0x0, 0x7f, 0x0, 0x0, 0x9, 0x64}], "b0c25cfe2b5950a856bfd16cd148db4f15f12ff497acb7912bed2b3cfa80a4c46ca6f4fa23995d251f36822961e53be674c758b702bb9296422149660d3f6a58a160b6acb572755d5501"}}}}}, &(0x7f0000000300)={0x0, 0x800002, [0xbad, 0xe11, 0x2c9, 0x3c5]}) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000600)='.pending_reads\x00', 0x131000, 0x118) getsockopt$inet_udp_int(r5, 0x11, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) [ 144.099744] tmpfs: Bad value for 'gid' 19:03:19 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x1) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r2, &(0x7f0000000380)='./file1\x00', 0x18001, 0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) read(0xffffffffffffffff, &(0x7f0000000300)=""/5, 0x5) creat(&(0x7f0000000400)='./file1\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_aout(r4, &(0x7f00000005c0)={{0x0, 0x7f, 0x3, 0x3da, 0xd4, 0xff, 0x19e, 0x7}, "6efcb8fc9ee95561b37e5b60ecf6a3be2d7867506e2f4b80ea7a4acc2ffd62599f85f2d31cfeb500ec931e9021c715ee74301b83240335fd81ae159bb87c32c2e15c2aa0a3e77a9516b8c8588c15f6037f4d496a08e38966845c59492649ca430ea8b4bc8588dad5a70c8ca6bcc69bb3b94c513e0843ed1318fe99c945fadb9a030c65011b17014c77645b8e9f390efabcb47ab19c63b34c05f5d428c735b513027aef3e8e84d85a3394", ['\x00', '\x00', '\x00', '\x00']}, 0x4ca) 19:03:20 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB='d']) 19:03:20 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000005, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f00000001c0)) 19:03:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x0, 0x2, '\x00', [@calipso={0x7, 0x8}, @generic={0x0, 0x4, 'kI.6'}]}, 0x18) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 19:03:20 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000000000000000000000000000002000000001d00000000000000000000000000000000000000000000000000080000000000000000"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0xa, 0x0, &(0x7f00000000c0)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="4e060000000000002e00000000000000"]) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r4, 0x11, 0x65, &(0x7f0000000580), &(0x7f00000005c0)=0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x252}}, './file0\x00'}) getsockopt$inet_int(r1, 0x0, 0x16, &(0x7f0000000400), &(0x7f0000000440)=0x4) setsockopt$inet_mreqn(r1, 0x0, 0x35, &(0x7f0000000040)={@private=0xa010102, @broadcast}, 0xc) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x1ff) syz_emit_ethernet(0xd0, &(0x7f0000000200)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @generic={0xb, 0x6, "6a9961", 0x9a, 0x11, 0xff, @empty, @loopback, {[@routing={0x33, 0x8, 0x0, 0x0, 0x0, [@mcast1, @private1, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @fragment={0x4, 0x0, 0x7f, 0x0, 0x0, 0x9, 0x64}], "b0c25cfe2b5950a856bfd16cd148db4f15f12ff497acb7912bed2b3cfa80a4c46ca6f4fa23995d251f36822961e53be674c758b702bb9296422149660d3f6a58a160b6acb572755d5501"}}}}}, &(0x7f0000000300)={0x0, 0x800002, [0xbad, 0xe11, 0x2c9, 0x3c5]}) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000600)='.pending_reads\x00', 0x131000, 0x118) getsockopt$inet_udp_int(r5, 0x11, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) 19:03:20 executing program 2: r0 = fsopen(&(0x7f0000000140)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 19:03:20 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x48551, 0x3, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xde}) syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x40800) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x1) r2 = openat(0xffffffffffffffff, 0x0, 0x40, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r2, &(0x7f0000000380)='./file1\x00', 0x18001, 0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') creat(&(0x7f00000003c0)='./file1\x00', 0x9) read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) read(0xffffffffffffffff, &(0x7f0000000300)=""/5, 0x5) creat(&(0x7f0000000400)='./file1\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_aout(r4, &(0x7f00000005c0)={{0x0, 0x7f, 0x3, 0x3da, 0xd4, 0xff, 0x19e, 0x7}, "6efcb8fc9ee95561b37e5b60ecf6a3be2d7867506e2f4b80ea7a4acc2ffd62599f85f2d31cfeb500ec931e9021c715ee74301b83240335fd81ae159bb87c32c2e15c2aa0a3e77a9516b8c8588c15f6037f4d496a08e38966845c59492649ca430ea8b4bc8588dad5a70c8ca6bcc69bb3b94c513e0843ed1318fe99c945fadb9a030c65011b17014c77645b8e9f390efabcb47ab19c63b34c05f5d428c735b513027aef3e8e84d85a3394", ['\x00', '\x00', '\x00', '\x00']}, 0x4ca) 19:03:20 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000380), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, &(0x7f0000000280)) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4401000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4020812) fchdir(r0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000240)={0x0, 0x9d}) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f00000001c0)={0x0, 0x1, 0x6, @random="767b24f4e073"}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000480)="e9ff7b3962984728a815aea8dbaa51090337c57c6c329d3bf05ac5050250c4d85bfb5895e1d2232f97e3682f01a08012a3192c7b6b6a3a49b91a9269b43825944f056f1c60edb2af88f9d1e9e23d653cfc60d05d7f21a549673485e08afb4325c9b182136721fb09e2c2e43eee2f1d534793de80b72259d7c76e224b9aa49572dede0797d37b31113f997085dbb3d70e926c2e20ed186bf1592827f34c6710482c865dc732d80591", 0xa8}], 0x1}}], 0x1, 0x8c0) recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37) timer_create(0x0, 0x0, &(0x7f0000000040)) 19:03:20 executing program 7: fallocate(0xffffffffffffffff, 0x0, 0x2, 0x3ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000240)={'U+', 0x10001}, 0x16, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB="194b21007d000000"], 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010000000000000000001c"], 0x14}}, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000340)) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f00000001c0), &(0x7f0000000200)=0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) [ 145.093803] tmpfs: Bad value for 'gid' 19:03:20 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000005, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f00000001c0)) 19:03:20 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000380), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, &(0x7f0000000280)) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4401000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4020812) fchdir(r0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000240)={0x0, 0x9d}) setsockopt$packet_add_memb(r2, 0x107, 0x2, &(0x7f00000001c0)={0x0, 0x1, 0x6, @random="767b24f4e073"}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000480)="e9ff7b3962984728a815aea8dbaa51090337c57c6c329d3bf05ac5050250c4d85bfb5895e1d2232f97e3682f01a08012a3192c7b6b6a3a49b91a9269b43825944f056f1c60edb2af88f9d1e9e23d653cfc60d05d7f21a549673485e08afb4325c9b182136721fb09e2c2e43eee2f1d534793de80b72259d7c76e224b9aa49572dede0797d37b31113f997085dbb3d70e926c2e20ed186bf1592827f34c6710482c865dc732d80591", 0xa8}], 0x1}}], 0x1, 0x8c0) recvfrom(r1, &(0x7f00000003c0)=""/77, 0x6bc2bb1, 0x324, 0x0, 0x37) timer_create(0x0, 0x0, &(0x7f0000000040)) 19:03:20 executing program 2: r0 = fsopen(&(0x7f0000000140)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 19:03:20 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000000000000000000000000000002000000001d00000000000000000000000000000000000000000000000000080000000000000000"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0xa, 0x0, &(0x7f00000000c0)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="4e060000000000002e00000000000000"]) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r4, 0x11, 0x65, &(0x7f0000000580), &(0x7f00000005c0)=0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x252}}, './file0\x00'}) getsockopt$inet_int(r1, 0x0, 0x16, &(0x7f0000000400), &(0x7f0000000440)=0x4) setsockopt$inet_mreqn(r1, 0x0, 0x35, &(0x7f0000000040)={@private=0xa010102, @broadcast}, 0xc) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x1ff) syz_emit_ethernet(0xd0, &(0x7f0000000200)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @generic={0xb, 0x6, "6a9961", 0x9a, 0x11, 0xff, @empty, @loopback, {[@routing={0x33, 0x8, 0x0, 0x0, 0x0, [@mcast1, @private1, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @fragment={0x4, 0x0, 0x7f, 0x0, 0x0, 0x9, 0x64}], "b0c25cfe2b5950a856bfd16cd148db4f15f12ff497acb7912bed2b3cfa80a4c46ca6f4fa23995d251f36822961e53be674c758b702bb9296422149660d3f6a58a160b6acb572755d5501"}}}}}, &(0x7f0000000300)={0x0, 0x800002, [0xbad, 0xe11, 0x2c9, 0x3c5]}) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000600)='.pending_reads\x00', 0x131000, 0x118) getsockopt$inet_udp_int(r5, 0x11, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) 19:03:20 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000005, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f00000001c0)) 19:03:20 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000000000000000000000000000002000000001d00000000000000000000000000000000000000000000000000080000000000000000"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0xa, 0x0, &(0x7f00000000c0)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="4e060000000000002e00000000000000"]) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r4, 0x11, 0x65, &(0x7f0000000580), &(0x7f00000005c0)=0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x252}}, './file0\x00'}) getsockopt$inet_int(r1, 0x0, 0x16, &(0x7f0000000400), &(0x7f0000000440)=0x4) setsockopt$inet_mreqn(r1, 0x0, 0x35, &(0x7f0000000040)={@private=0xa010102, @broadcast}, 0xc) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x1ff) syz_emit_ethernet(0xd0, &(0x7f0000000200)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @generic={0xb, 0x6, "6a9961", 0x9a, 0x11, 0xff, @empty, @loopback, {[@routing={0x33, 0x8, 0x0, 0x0, 0x0, [@mcast1, @private1, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @fragment={0x4, 0x0, 0x7f, 0x0, 0x0, 0x9, 0x64}], "b0c25cfe2b5950a856bfd16cd148db4f15f12ff497acb7912bed2b3cfa80a4c46ca6f4fa23995d251f36822961e53be674c758b702bb9296422149660d3f6a58a160b6acb572755d5501"}}}}}, &(0x7f0000000300)={0x0, 0x800002, [0xbad, 0xe11, 0x2c9, 0x3c5]}) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000600)='.pending_reads\x00', 0x131000, 0x118) getsockopt$inet_udp_int(r5, 0x11, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) VM DIAGNOSIS: 19:03:11 Registers: info registers vcpu 0 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b1e41 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff88800e0173c8 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000066 R11=0000000000000001 R12=0000000000000066 R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b1e30 RIP=ffffffff822b1e99 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f55a6b9c700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8def9054a1 CR3=0000000020588000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 2525252525252525 2525252525252525 YMM01=0000000000000000 0000000000000000 0000000000000000 0000ffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000ffffffffffff YMM03=0000000000000000 0000000000000000 65006463682d6963 6865203a65727020 YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 676f6c206d6f7473 7563000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=0000000000022000 RCX=0000000000000000 RDX=1ffff110036f238a RSI=ffffffff816babb2 RDI=ffff88801b791c50 RBP=ffff88801d5d0a00 RSP=ffff88801be67d58 R8 =0000000000000006 R9 =00007ffffffff000 R10=0000000000022000 R11=0000000000000001 R12=ffffffff8108d350 R13=0000000000000000 R14=0000000000000802 R15=0000000000000000 RIP=ffffffff816bac0b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f69425021f0 CR3=000000001dee8000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 6461657268747062 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00302e6f732e6461 657268747062696c YMM03=0000000000000000 0000000000000000 2f756e672d78756e 696c2d34365f3638 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000