Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:6662' (ECDSA) to the list of known hosts. 2022/09/12 19:18:46 fuzzer started 2022/09/12 19:18:47 dialing manager at localhost:38027 syzkaller login: [ 36.691315] cgroup: Unknown subsys name 'net' [ 36.765219] cgroup: Unknown subsys name 'rlimit' 2022/09/12 19:19:01 syscalls: 2215 2022/09/12 19:19:01 code coverage: enabled 2022/09/12 19:19:01 comparison tracing: enabled 2022/09/12 19:19:01 extra coverage: enabled 2022/09/12 19:19:01 setuid sandbox: enabled 2022/09/12 19:19:01 namespace sandbox: enabled 2022/09/12 19:19:01 Android sandbox: enabled 2022/09/12 19:19:01 fault injection: enabled 2022/09/12 19:19:01 leak checking: enabled 2022/09/12 19:19:01 net packet injection: enabled 2022/09/12 19:19:01 net device setup: enabled 2022/09/12 19:19:01 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/12 19:19:01 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/12 19:19:01 USB emulation: enabled 2022/09/12 19:19:01 hci packet injection: enabled 2022/09/12 19:19:01 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220912) 2022/09/12 19:19:01 802.15.4 emulation: enabled 2022/09/12 19:19:01 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/12 19:19:01 fetching corpus: 50, signal 36697/40192 (executing program) 2022/09/12 19:19:01 fetching corpus: 100, signal 45184/50251 (executing program) 2022/09/12 19:19:01 fetching corpus: 150, signal 52398/58956 (executing program) 2022/09/12 19:19:02 fetching corpus: 200, signal 64764/72536 (executing program) 2022/09/12 19:19:02 fetching corpus: 250, signal 70796/79865 (executing program) 2022/09/12 19:19:02 fetching corpus: 300, signal 75519/85857 (executing program) 2022/09/12 19:19:02 fetching corpus: 350, signal 81327/92744 (executing program) 2022/09/12 19:19:02 fetching corpus: 400, signal 87085/99565 (executing program) 2022/09/12 19:19:02 fetching corpus: 450, signal 89843/103527 (executing program) 2022/09/12 19:19:02 fetching corpus: 500, signal 93378/108201 (executing program) 2022/09/12 19:19:02 fetching corpus: 550, signal 98601/114322 (executing program) 2022/09/12 19:19:03 fetching corpus: 600, signal 101750/118511 (executing program) 2022/09/12 19:19:03 fetching corpus: 650, signal 104823/122550 (executing program) 2022/09/12 19:19:03 fetching corpus: 700, signal 107340/126076 (executing program) 2022/09/12 19:19:03 fetching corpus: 750, signal 112398/131810 (executing program) 2022/09/12 19:19:03 fetching corpus: 800, signal 115726/135970 (executing program) 2022/09/12 19:19:03 fetching corpus: 850, signal 119011/140058 (executing program) 2022/09/12 19:19:03 fetching corpus: 900, signal 121775/143629 (executing program) 2022/09/12 19:19:04 fetching corpus: 950, signal 123793/146510 (executing program) 2022/09/12 19:19:04 fetching corpus: 1000, signal 126863/150319 (executing program) 2022/09/12 19:19:04 fetching corpus: 1050, signal 128111/152507 (executing program) 2022/09/12 19:19:04 fetching corpus: 1100, signal 130427/155561 (executing program) 2022/09/12 19:19:04 fetching corpus: 1150, signal 132292/158143 (executing program) 2022/09/12 19:19:04 fetching corpus: 1200, signal 134227/160868 (executing program) 2022/09/12 19:19:04 fetching corpus: 1250, signal 136718/164020 (executing program) 2022/09/12 19:19:05 fetching corpus: 1300, signal 138719/166685 (executing program) 2022/09/12 19:19:05 fetching corpus: 1350, signal 139822/168623 (executing program) 2022/09/12 19:19:05 fetching corpus: 1400, signal 142374/171725 (executing program) 2022/09/12 19:19:05 fetching corpus: 1450, signal 143713/173783 (executing program) 2022/09/12 19:19:05 fetching corpus: 1500, signal 145051/175850 (executing program) 2022/09/12 19:19:05 fetching corpus: 1550, signal 146985/178352 (executing program) 2022/09/12 19:19:05 fetching corpus: 1600, signal 149624/181333 (executing program) 2022/09/12 19:19:05 fetching corpus: 1650, signal 151579/183799 (executing program) 2022/09/12 19:19:06 fetching corpus: 1700, signal 152781/185631 (executing program) 2022/09/12 19:19:06 fetching corpus: 1750, signal 155160/188359 (executing program) 2022/09/12 19:19:06 fetching corpus: 1800, signal 156860/190506 (executing program) 2022/09/12 19:19:06 fetching corpus: 1850, signal 159017/192990 (executing program) 2022/09/12 19:19:06 fetching corpus: 1900, signal 161001/195347 (executing program) 2022/09/12 19:19:06 fetching corpus: 1950, signal 162754/197551 (executing program) 2022/09/12 19:19:06 fetching corpus: 2000, signal 164680/199751 (executing program) 2022/09/12 19:19:07 fetching corpus: 2050, signal 165776/201386 (executing program) 2022/09/12 19:19:07 fetching corpus: 2100, signal 167747/203675 (executing program) 2022/09/12 19:19:07 fetching corpus: 2150, signal 168606/205118 (executing program) 2022/09/12 19:19:07 fetching corpus: 2200, signal 169731/206705 (executing program) 2022/09/12 19:19:07 fetching corpus: 2250, signal 172259/209252 (executing program) 2022/09/12 19:19:07 fetching corpus: 2300, signal 173093/210642 (executing program) 2022/09/12 19:19:07 fetching corpus: 2350, signal 174138/212130 (executing program) 2022/09/12 19:19:08 fetching corpus: 2400, signal 175305/213712 (executing program) 2022/09/12 19:19:08 fetching corpus: 2450, signal 176383/215196 (executing program) 2022/09/12 19:19:08 fetching corpus: 2500, signal 177595/216709 (executing program) 2022/09/12 19:19:08 fetching corpus: 2550, signal 179107/218444 (executing program) 2022/09/12 19:19:08 fetching corpus: 2600, signal 180831/220311 (executing program) 2022/09/12 19:19:08 fetching corpus: 2650, signal 182326/221958 (executing program) 2022/09/12 19:19:08 fetching corpus: 2700, signal 183828/223660 (executing program) 2022/09/12 19:19:09 fetching corpus: 2750, signal 185159/225217 (executing program) 2022/09/12 19:19:09 fetching corpus: 2800, signal 186078/226536 (executing program) 2022/09/12 19:19:09 fetching corpus: 2850, signal 186978/227810 (executing program) 2022/09/12 19:19:09 fetching corpus: 2900, signal 188124/229264 (executing program) 2022/09/12 19:19:09 fetching corpus: 2950, signal 188939/230474 (executing program) 2022/09/12 19:19:09 fetching corpus: 3000, signal 189891/231742 (executing program) 2022/09/12 19:19:09 fetching corpus: 3050, signal 190768/232983 (executing program) 2022/09/12 19:19:10 fetching corpus: 3100, signal 191584/234165 (executing program) 2022/09/12 19:19:10 fetching corpus: 3150, signal 192467/235318 (executing program) 2022/09/12 19:19:10 fetching corpus: 3200, signal 194376/237018 (executing program) 2022/09/12 19:19:10 fetching corpus: 3250, signal 195062/238075 (executing program) 2022/09/12 19:19:10 fetching corpus: 3300, signal 196062/239278 (executing program) 2022/09/12 19:19:10 fetching corpus: 3350, signal 196960/240378 (executing program) 2022/09/12 19:19:10 fetching corpus: 3400, signal 197766/241456 (executing program) 2022/09/12 19:19:10 fetching corpus: 3450, signal 198333/242397 (executing program) 2022/09/12 19:19:11 fetching corpus: 3500, signal 199058/243432 (executing program) 2022/09/12 19:19:11 fetching corpus: 3550, signal 200071/244547 (executing program) 2022/09/12 19:19:11 fetching corpus: 3600, signal 200913/245535 (executing program) 2022/09/12 19:19:11 fetching corpus: 3650, signal 201976/246676 (executing program) 2022/09/12 19:19:11 fetching corpus: 3700, signal 202833/247702 (executing program) 2022/09/12 19:19:11 fetching corpus: 3750, signal 204399/249069 (executing program) 2022/09/12 19:19:12 fetching corpus: 3800, signal 205102/249959 (executing program) 2022/09/12 19:19:12 fetching corpus: 3850, signal 205770/250832 (executing program) 2022/09/12 19:19:12 fetching corpus: 3900, signal 206645/251821 (executing program) 2022/09/12 19:19:12 fetching corpus: 3950, signal 207698/252835 (executing program) 2022/09/12 19:19:12 fetching corpus: 4000, signal 209040/253991 (executing program) 2022/09/12 19:19:12 fetching corpus: 4050, signal 210489/255182 (executing program) 2022/09/12 19:19:12 fetching corpus: 4100, signal 211721/256243 (executing program) 2022/09/12 19:19:13 fetching corpus: 4150, signal 212921/257323 (executing program) 2022/09/12 19:19:13 fetching corpus: 4200, signal 213747/258293 (executing program) 2022/09/12 19:19:13 fetching corpus: 4250, signal 214916/259306 (executing program) 2022/09/12 19:19:13 fetching corpus: 4300, signal 215908/260225 (executing program) 2022/09/12 19:19:13 fetching corpus: 4350, signal 216475/260922 (executing program) 2022/09/12 19:19:13 fetching corpus: 4400, signal 217142/261659 (executing program) 2022/09/12 19:19:13 fetching corpus: 4450, signal 217607/262312 (executing program) 2022/09/12 19:19:14 fetching corpus: 4500, signal 218379/263118 (executing program) 2022/09/12 19:19:14 fetching corpus: 4550, signal 219601/264121 (executing program) 2022/09/12 19:19:14 fetching corpus: 4600, signal 220639/265025 (executing program) 2022/09/12 19:19:14 fetching corpus: 4650, signal 221349/265726 (executing program) 2022/09/12 19:19:14 fetching corpus: 4700, signal 221764/266366 (executing program) 2022/09/12 19:19:14 fetching corpus: 4750, signal 222736/267173 (executing program) 2022/09/12 19:19:15 fetching corpus: 4800, signal 223701/267932 (executing program) 2022/09/12 19:19:15 fetching corpus: 4850, signal 224713/268738 (executing program) 2022/09/12 19:19:15 fetching corpus: 4900, signal 225391/269415 (executing program) 2022/09/12 19:19:15 fetching corpus: 4950, signal 225846/269985 (executing program) 2022/09/12 19:19:15 fetching corpus: 5000, signal 226535/270642 (executing program) 2022/09/12 19:19:15 fetching corpus: 5050, signal 227242/271308 (executing program) 2022/09/12 19:19:15 fetching corpus: 5100, signal 228560/272231 (executing program) 2022/09/12 19:19:16 fetching corpus: 5150, signal 229070/272836 (executing program) 2022/09/12 19:19:16 fetching corpus: 5200, signal 229611/273425 (executing program) 2022/09/12 19:19:16 fetching corpus: 5250, signal 230207/274028 (executing program) 2022/09/12 19:19:16 fetching corpus: 5300, signal 230997/274641 (executing program) 2022/09/12 19:19:16 fetching corpus: 5350, signal 231537/275203 (executing program) 2022/09/12 19:19:16 fetching corpus: 5400, signal 232279/275806 (executing program) 2022/09/12 19:19:17 fetching corpus: 5450, signal 232841/276389 (executing program) 2022/09/12 19:19:17 fetching corpus: 5500, signal 233124/276860 (executing program) 2022/09/12 19:19:17 fetching corpus: 5550, signal 233699/277402 (executing program) 2022/09/12 19:19:17 fetching corpus: 5600, signal 234522/278006 (executing program) 2022/09/12 19:19:17 fetching corpus: 5650, signal 235313/278551 (executing program) 2022/09/12 19:19:17 fetching corpus: 5700, signal 236039/279101 (executing program) 2022/09/12 19:19:17 fetching corpus: 5750, signal 237026/279681 (executing program) 2022/09/12 19:19:18 fetching corpus: 5800, signal 237518/280220 (executing program) 2022/09/12 19:19:18 fetching corpus: 5850, signal 238168/280723 (executing program) 2022/09/12 19:19:18 fetching corpus: 5900, signal 238912/281218 (executing program) 2022/09/12 19:19:18 fetching corpus: 5950, signal 239463/281655 (executing program) 2022/09/12 19:19:18 fetching corpus: 6000, signal 240038/282117 (executing program) 2022/09/12 19:19:18 fetching corpus: 6050, signal 240925/282582 (executing program) 2022/09/12 19:19:18 fetching corpus: 6100, signal 241647/283032 (executing program) 2022/09/12 19:19:18 fetching corpus: 6150, signal 242334/283469 (executing program) 2022/09/12 19:19:19 fetching corpus: 6200, signal 242854/283864 (executing program) 2022/09/12 19:19:19 fetching corpus: 6250, signal 243245/284257 (executing program) 2022/09/12 19:19:19 fetching corpus: 6300, signal 243809/284668 (executing program) 2022/09/12 19:19:19 fetching corpus: 6350, signal 244238/284985 (executing program) 2022/09/12 19:19:19 fetching corpus: 6400, signal 244733/285396 (executing program) 2022/09/12 19:19:19 fetching corpus: 6450, signal 245211/285760 (executing program) 2022/09/12 19:19:19 fetching corpus: 6500, signal 245765/286128 (executing program) 2022/09/12 19:19:20 fetching corpus: 6550, signal 246190/286484 (executing program) 2022/09/12 19:19:20 fetching corpus: 6600, signal 247016/286863 (executing program) 2022/09/12 19:19:20 fetching corpus: 6650, signal 247811/287219 (executing program) 2022/09/12 19:19:20 fetching corpus: 6700, signal 248214/287534 (executing program) 2022/09/12 19:19:20 fetching corpus: 6750, signal 248719/287848 (executing program) 2022/09/12 19:19:20 fetching corpus: 6800, signal 249129/288154 (executing program) 2022/09/12 19:19:20 fetching corpus: 6850, signal 249876/288539 (executing program) 2022/09/12 19:19:20 fetching corpus: 6900, signal 250380/288819 (executing program) 2022/09/12 19:19:21 fetching corpus: 6950, signal 251020/289109 (executing program) 2022/09/12 19:19:21 fetching corpus: 7000, signal 251381/289409 (executing program) 2022/09/12 19:19:21 fetching corpus: 7050, signal 251948/289467 (executing program) 2022/09/12 19:19:21 fetching corpus: 7100, signal 252456/289499 (executing program) 2022/09/12 19:19:21 fetching corpus: 7150, signal 252790/289527 (executing program) 2022/09/12 19:19:21 fetching corpus: 7200, signal 253077/289544 (executing program) 2022/09/12 19:19:21 fetching corpus: 7250, signal 253679/289552 (executing program) 2022/09/12 19:19:21 fetching corpus: 7300, signal 254060/289568 (executing program) 2022/09/12 19:19:22 fetching corpus: 7350, signal 254706/289576 (executing program) 2022/09/12 19:19:22 fetching corpus: 7400, signal 255075/289595 (executing program) 2022/09/12 19:19:22 fetching corpus: 7450, signal 255510/289676 (executing program) 2022/09/12 19:19:22 fetching corpus: 7500, signal 255893/289735 (executing program) 2022/09/12 19:19:22 fetching corpus: 7550, signal 256313/289811 (executing program) 2022/09/12 19:19:22 fetching corpus: 7600, signal 256800/289813 (executing program) 2022/09/12 19:19:22 fetching corpus: 7650, signal 257453/289822 (executing program) 2022/09/12 19:19:22 fetching corpus: 7700, signal 257867/289835 (executing program) 2022/09/12 19:19:23 fetching corpus: 7750, signal 258406/289847 (executing program) 2022/09/12 19:19:23 fetching corpus: 7800, signal 258850/289879 (executing program) 2022/09/12 19:19:23 fetching corpus: 7850, signal 259327/289897 (executing program) 2022/09/12 19:19:23 fetching corpus: 7900, signal 259691/289914 (executing program) 2022/09/12 19:19:23 fetching corpus: 7950, signal 260086/289935 (executing program) 2022/09/12 19:19:23 fetching corpus: 8000, signal 260502/289960 (executing program) 2022/09/12 19:19:23 fetching corpus: 8050, signal 261203/289961 (executing program) 2022/09/12 19:19:23 fetching corpus: 8100, signal 261385/289981 (executing program) 2022/09/12 19:19:24 fetching corpus: 8150, signal 261751/289991 (executing program) 2022/09/12 19:19:24 fetching corpus: 8200, signal 262323/290011 (executing program) 2022/09/12 19:19:24 fetching corpus: 8250, signal 262833/290016 (executing program) 2022/09/12 19:19:24 fetching corpus: 8300, signal 263330/290016 (executing program) 2022/09/12 19:19:24 fetching corpus: 8350, signal 263651/290027 (executing program) 2022/09/12 19:19:24 fetching corpus: 8400, signal 264140/290096 (executing program) 2022/09/12 19:19:24 fetching corpus: 8450, signal 264636/290103 (executing program) 2022/09/12 19:19:25 fetching corpus: 8500, signal 265007/290113 (executing program) 2022/09/12 19:19:25 fetching corpus: 8550, signal 265469/290119 (executing program) 2022/09/12 19:19:25 fetching corpus: 8600, signal 265795/290124 (executing program) 2022/09/12 19:19:25 fetching corpus: 8650, signal 266199/290144 (executing program) 2022/09/12 19:19:25 fetching corpus: 8700, signal 266644/290154 (executing program) 2022/09/12 19:19:25 fetching corpus: 8750, signal 267124/290160 (executing program) 2022/09/12 19:19:26 fetching corpus: 8800, signal 267579/290176 (executing program) 2022/09/12 19:19:26 fetching corpus: 8850, signal 267991/290220 (executing program) 2022/09/12 19:19:26 fetching corpus: 8900, signal 268481/290222 (executing program) 2022/09/12 19:19:26 fetching corpus: 8950, signal 268724/290223 (executing program) 2022/09/12 19:19:26 fetching corpus: 9000, signal 269244/290248 (executing program) 2022/09/12 19:19:26 fetching corpus: 9050, signal 269578/290252 (executing program) 2022/09/12 19:19:26 fetching corpus: 9100, signal 269926/290307 (executing program) 2022/09/12 19:19:27 fetching corpus: 9150, signal 270301/290316 (executing program) 2022/09/12 19:19:27 fetching corpus: 9200, signal 270865/290331 (executing program) 2022/09/12 19:19:27 fetching corpus: 9250, signal 271138/290335 (executing program) 2022/09/12 19:19:27 fetching corpus: 9300, signal 271817/290340 (executing program) 2022/09/12 19:19:27 fetching corpus: 9350, signal 272132/290342 (executing program) 2022/09/12 19:19:27 fetching corpus: 9400, signal 272337/290345 (executing program) 2022/09/12 19:19:28 fetching corpus: 9450, signal 272791/290360 (executing program) 2022/09/12 19:19:28 fetching corpus: 9500, signal 273196/290364 (executing program) 2022/09/12 19:19:28 fetching corpus: 9550, signal 274103/290373 (executing program) 2022/09/12 19:19:28 fetching corpus: 9600, signal 274554/290380 (executing program) 2022/09/12 19:19:28 fetching corpus: 9650, signal 275029/290382 (executing program) 2022/09/12 19:19:28 fetching corpus: 9700, signal 275355/290391 (executing program) 2022/09/12 19:19:28 fetching corpus: 9750, signal 275635/290391 (executing program) 2022/09/12 19:19:28 fetching corpus: 9800, signal 275891/290402 (executing program) 2022/09/12 19:19:29 fetching corpus: 9850, signal 276189/290421 (executing program) 2022/09/12 19:19:29 fetching corpus: 9900, signal 276624/290428 (executing program) 2022/09/12 19:19:29 fetching corpus: 9950, signal 276988/290438 (executing program) 2022/09/12 19:19:29 fetching corpus: 10000, signal 277394/290449 (executing program) 2022/09/12 19:19:29 fetching corpus: 10050, signal 277778/290451 (executing program) 2022/09/12 19:19:29 fetching corpus: 10100, signal 278153/290454 (executing program) 2022/09/12 19:19:29 fetching corpus: 10150, signal 278646/290483 (executing program) 2022/09/12 19:19:30 fetching corpus: 10199, signal 279000/290485 (executing program) 2022/09/12 19:19:30 fetching corpus: 10199, signal 279000/290485 (executing program) 2022/09/12 19:19:32 starting 8 fuzzer processes 19:19:32 executing program 0: perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:19:32 executing program 1: clock_nanosleep(0x8, 0xf, &(0x7f0000000000), 0x0) 19:19:32 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x3b, &(0x7f0000000040), 0x8) 19:19:32 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) 19:19:32 executing program 4: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001b40), 0x1, 0x0) write(r0, &(0x7f0000001bc0)="ea", 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) [ 81.954345] audit: type=1400 audit(1663010372.577:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 19:19:32 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x56ad, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x2, 0x384}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f00000007c0)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = dup(0xffffffffffffffff) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) sendmsg$unix(r1, &(0x7f0000000780)={&(0x7f0000000500)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000580)="69b971cc87340e5208e6f1bc2060cf76369fdbadecbf118e1113b52a0e24867c5ad92566e0cef3c8cca60fb6e25f0f065874a020859cdd1d5cdf20288a289606f155d1a369052cc2243b0d5b6f527ff19c283723c7020e6854041c2473026293d03924dda4712ad1786ee7b1f25fa618254c594f16344bb60cc0bd3585da6d653a023513fd6101286b94cb9e219650d7c7a931067b95c694b8f173ad526867b820f52827", 0xa4}, {&(0x7f0000000640)="7aa52aa6e7d4cf1ec960bb1694201fa79e75ba70da3e14ad251a575e8fe206bca54b0485163cba56a20cb9b58fc355649374a1894fc4b186d34ab3a78c3c424996d6764da7f40eeb1d93617aff13842e2ea61f6342bfa0c4cae62e35b441829cf8aa26d1e7d8bff54eb08215f8722b99081b9061db684f68ecec5d0924f40f711ef9ec81a1f06a1339656923d1456c1b8bfc248c2469278ffac30c9697ff12cf8dea373cfd921b0de61ed5c43400319e99276228d9566a749854dfee59c8429dfb23a5370268a79f8a012db69805872e5834449a1706ffd5bc656a39fef216d0fede5ffdf198ae23599effaa60fbd52e4b500c4f310739", 0xf7}], 0x2, &(0x7f0000000740)=[@rights={{0x10}}], 0x10, 0x200400d1}, 0x4042) write$sndseq(0xffffffffffffffff, &(0x7f0000000140), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x68f5, &(0x7f0000000340)={0x0, 0xe8de, 0x10, 0x1, 0x3d, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000004c0)) pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000009c0)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0) close(r2) syz_io_uring_setup(0x35a6, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0x2, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) unshare(0x8040080) semop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x3000}], 0x2aaaabde) 19:19:32 executing program 6: perf_event_open$cgroup(&(0x7f0000000d40)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:19:32 executing program 7: umount2(0x0, 0xae14c5c4a97f050) [ 83.226943] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.229192] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.231221] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.233539] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.236605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.238288] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.240594] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.241857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.244473] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.246562] Bluetooth: hci1: HCI_REQ-0x0c1a [ 83.282619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.284671] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 83.286688] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 83.288275] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 83.289674] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.291007] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 83.292299] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 83.293444] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 83.294683] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.295901] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 83.297196] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 83.298420] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 83.300967] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.302874] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 83.303766] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.306195] Bluetooth: hci4: HCI_REQ-0x0c1a [ 83.318637] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 83.320932] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 83.321701] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 83.324899] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 83.326263] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 83.326550] Bluetooth: hci5: HCI_REQ-0x0c1a [ 83.327250] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 83.333786] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 83.334604] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 83.335995] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 83.342192] Bluetooth: hci6: HCI_REQ-0x0c1a [ 83.343923] Bluetooth: hci7: HCI_REQ-0x0c1a [ 83.344163] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.345316] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.346137] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.355854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.356644] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.357742] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.358523] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.359307] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.359832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.364821] Bluetooth: hci0: HCI_REQ-0x0c1a [ 83.367648] Bluetooth: hci2: HCI_REQ-0x0c1a [ 85.302751] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 85.303713] Bluetooth: hci1: command 0x0409 tx timeout [ 85.366275] Bluetooth: hci7: command 0x0409 tx timeout [ 85.366755] Bluetooth: hci6: command 0x0409 tx timeout [ 85.367200] Bluetooth: hci5: command 0x0409 tx timeout [ 85.367605] Bluetooth: hci4: command 0x0409 tx timeout [ 85.430134] Bluetooth: hci2: command 0x0409 tx timeout [ 85.430637] Bluetooth: hci0: command 0x0409 tx timeout [ 87.351256] Bluetooth: hci1: command 0x041b tx timeout [ 87.415313] Bluetooth: hci4: command 0x041b tx timeout [ 87.416297] Bluetooth: hci5: command 0x041b tx timeout [ 87.417243] Bluetooth: hci6: command 0x041b tx timeout [ 87.418115] Bluetooth: hci7: command 0x041b tx timeout [ 87.478180] Bluetooth: hci0: command 0x041b tx timeout [ 87.479204] Bluetooth: hci2: command 0x041b tx timeout [ 89.398174] Bluetooth: hci1: command 0x040f tx timeout [ 89.463291] Bluetooth: hci7: command 0x040f tx timeout [ 89.464359] Bluetooth: hci6: command 0x040f tx timeout [ 89.465899] Bluetooth: hci5: command 0x040f tx timeout [ 89.466835] Bluetooth: hci4: command 0x040f tx timeout [ 89.527153] Bluetooth: hci2: command 0x040f tx timeout [ 89.528432] Bluetooth: hci0: command 0x040f tx timeout [ 90.678137] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 91.447209] Bluetooth: hci1: command 0x0419 tx timeout [ 91.511149] Bluetooth: hci4: command 0x0419 tx timeout [ 91.511625] Bluetooth: hci5: command 0x0419 tx timeout [ 91.512032] Bluetooth: hci6: command 0x0419 tx timeout [ 91.512750] Bluetooth: hci7: command 0x0419 tx timeout [ 91.575138] Bluetooth: hci0: command 0x0419 tx timeout [ 91.575630] Bluetooth: hci2: command 0x0419 tx timeout [ 95.799156] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 100.599179] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 103.398343] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 103.408889] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 103.410507] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.415263] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.418928] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 103.419782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.422603] Bluetooth: hci3: HCI_REQ-0x0c1a [ 105.462120] Bluetooth: hci3: command 0x0409 tx timeout [ 107.511181] Bluetooth: hci3: command 0x041b tx timeout [ 109.559125] Bluetooth: hci3: command 0x040f tx timeout [ 111.607168] Bluetooth: hci3: command 0x0419 tx timeout [ 132.674650] audit: type=1400 audit(1663010423.297:7): avc: denied { open } for pid=3689 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 132.676123] audit: type=1400 audit(1663010423.298:8): avc: denied { kernel } for pid=3689 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 19:20:23 executing program 6: clock_gettime(0xf, 0x0) 19:20:23 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchown(r0, 0x0, 0x0) 19:20:23 executing program 6: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000400", @ANYBLOB="040000f90000000000000000007268"], 0x3c, 0x0) [ 133.032709] ------------[ cut here ]------------ [ 133.032732] [ 133.032736] ====================================================== [ 133.032739] WARNING: possible circular locking dependency detected [ 133.032744] 6.0.0-rc5-next-20220912 #1 Not tainted [ 133.032751] ------------------------------------------------------ [ 133.032754] syz-executor.6/3718 is trying to acquire lock: [ 133.032762] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 133.032800] [ 133.032800] but task is already holding lock: [ 133.032803] ffff88800fa0cc20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 133.032831] [ 133.032831] which lock already depends on the new lock. [ 133.032831] [ 133.032834] [ 133.032834] the existing dependency chain (in reverse order) is: [ 133.032838] [ 133.032838] -> #3 (&ctx->lock){....}-{2:2}: [ 133.032852] _raw_spin_lock+0x2a/0x40 [ 133.032868] __perf_event_task_sched_out+0x53b/0x18d0 [ 133.032881] __schedule+0xedd/0x2470 [ 133.032891] schedule+0xda/0x1b0 [ 133.032900] exit_to_user_mode_prepare+0x114/0x1a0 [ 133.032921] syscall_exit_to_user_mode+0x19/0x40 [ 133.032939] do_syscall_64+0x48/0x90 [ 133.032953] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 133.032971] [ 133.032971] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 133.032984] _raw_spin_lock_nested+0x30/0x40 [ 133.032999] raw_spin_rq_lock_nested+0x1e/0x30 [ 133.033012] task_fork_fair+0x63/0x4d0 [ 133.033029] sched_cgroup_fork+0x3d0/0x540 [ 133.033044] copy_process+0x3f9e/0x6df0 [ 133.033054] kernel_clone+0xe7/0x890 [ 133.033064] user_mode_thread+0xad/0xf0 [ 133.033074] rest_init+0x24/0x250 [ 133.033093] arch_call_rest_init+0xf/0x14 [ 133.033113] start_kernel+0x4c1/0x4e6 [ 133.033130] secondary_startup_64_no_verify+0xe0/0xeb [ 133.033145] [ 133.033145] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 133.033158] _raw_spin_lock_irqsave+0x39/0x60 [ 133.033173] try_to_wake_up+0xab/0x1920 [ 133.033186] up+0x75/0xb0 [ 133.033198] __up_console_sem+0x6e/0x80 [ 133.033221] console_unlock+0x46a/0x590 [ 133.033237] vprintk_emit+0x1bd/0x560 [ 133.033254] vprintk+0x84/0xa0 [ 133.033271] _printk+0xba/0xf1 [ 133.033288] kauditd_hold_skb.cold+0x3f/0x4e [ 133.033302] kauditd_send_queue+0x233/0x290 [ 133.033317] kauditd_thread+0x5da/0x9a0 [ 133.033332] kthread+0x2ed/0x3a0 [ 133.033347] ret_from_fork+0x22/0x30 [ 133.033359] [ 133.033359] -> #0 ((console_sem).lock){....}-{2:2}: [ 133.033373] __lock_acquire+0x2a02/0x5e70 [ 133.033390] lock_acquire+0x1a2/0x530 [ 133.033406] _raw_spin_lock_irqsave+0x39/0x60 [ 133.033421] down_trylock+0xe/0x70 [ 133.033433] __down_trylock_console_sem+0x3b/0xd0 [ 133.033450] vprintk_emit+0x16b/0x560 [ 133.033466] vprintk+0x84/0xa0 [ 133.033483] _printk+0xba/0xf1 [ 133.033499] report_bug.cold+0x72/0xab [ 133.033511] handle_bug+0x3c/0x70 [ 133.033524] exc_invalid_op+0x14/0x50 [ 133.033537] asm_exc_invalid_op+0x16/0x20 [ 133.033553] group_sched_out.part.0+0x2c7/0x460 [ 133.033564] ctx_sched_out+0x8f1/0xc10 [ 133.033573] __perf_event_task_sched_out+0x6d0/0x18d0 [ 133.033586] __schedule+0xedd/0x2470 [ 133.033595] schedule+0xda/0x1b0 [ 133.033604] exit_to_user_mode_prepare+0x114/0x1a0 [ 133.033623] syscall_exit_to_user_mode+0x19/0x40 [ 133.033640] do_syscall_64+0x48/0x90 [ 133.033653] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 133.033670] [ 133.033670] other info that might help us debug this: [ 133.033670] [ 133.033673] Chain exists of: [ 133.033673] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 133.033673] [ 133.033688] Possible unsafe locking scenario: [ 133.033688] [ 133.033690] CPU0 CPU1 [ 133.033693] ---- ---- [ 133.033695] lock(&ctx->lock); [ 133.033701] lock(&rq->__lock); [ 133.033707] lock(&ctx->lock); [ 133.033713] lock((console_sem).lock); [ 133.033719] [ 133.033719] *** DEADLOCK *** [ 133.033719] [ 133.033721] 2 locks held by syz-executor.6/3718: [ 133.033728] #0: ffff88806cf37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 133.033754] #1: ffff88800fa0cc20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 133.033781] [ 133.033781] stack backtrace: [ 133.033784] CPU: 1 PID: 3718 Comm: syz-executor.6 Not tainted 6.0.0-rc5-next-20220912 #1 [ 133.033798] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 133.033808] Call Trace: [ 133.033811] [ 133.033816] dump_stack_lvl+0x8b/0xb3 [ 133.033832] check_noncircular+0x263/0x2e0 [ 133.033849] ? format_decode+0x26c/0xb50 [ 133.033864] ? print_circular_bug+0x450/0x450 [ 133.033881] ? enable_ptr_key_workfn+0x20/0x20 [ 133.033896] ? format_decode+0x26c/0xb50 [ 133.033911] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 133.033929] __lock_acquire+0x2a02/0x5e70 [ 133.033951] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 133.033974] lock_acquire+0x1a2/0x530 [ 133.033991] ? down_trylock+0xe/0x70 [ 133.034006] ? rcu_read_unlock+0x40/0x40 [ 133.034027] ? vprintk+0x84/0xa0 [ 133.034046] _raw_spin_lock_irqsave+0x39/0x60 [ 133.034061] ? down_trylock+0xe/0x70 [ 133.034075] down_trylock+0xe/0x70 [ 133.034088] ? vprintk+0x84/0xa0 [ 133.034106] __down_trylock_console_sem+0x3b/0xd0 [ 133.034123] vprintk_emit+0x16b/0x560 [ 133.034143] vprintk+0x84/0xa0 [ 133.034161] _printk+0xba/0xf1 [ 133.034178] ? record_print_text.cold+0x16/0x16 [ 133.034200] ? report_bug.cold+0x66/0xab [ 133.034214] ? group_sched_out.part.0+0x2c7/0x460 [ 133.034226] report_bug.cold+0x72/0xab [ 133.034241] handle_bug+0x3c/0x70 [ 133.034254] exc_invalid_op+0x14/0x50 [ 133.034268] asm_exc_invalid_op+0x16/0x20 [ 133.034285] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 133.034298] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 133.034310] RSP: 0018:ffff88803cf67c48 EFLAGS: 00010006 [ 133.034319] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 133.034327] RDX: ffff888015ce1ac0 RSI: ffffffff81566027 RDI: 0000000000000005 [ 133.034335] RBP: ffff88801aca0b90 R08: 0000000000000005 R09: 0000000000000001 [ 133.034342] R10: 0000000000000000 R11: ffffffff865aa05b R12: ffff88800fa0cc00 [ 133.034350] R13: ffff88806cf3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 133.034361] ? group_sched_out.part.0+0x2c7/0x460 [ 133.034374] ? group_sched_out.part.0+0x2c7/0x460 [ 133.034387] ctx_sched_out+0x8f1/0xc10 [ 133.034400] __perf_event_task_sched_out+0x6d0/0x18d0 [ 133.034415] ? lock_is_held_type+0xd7/0x130 [ 133.034434] ? __perf_cgroup_move+0x160/0x160 [ 133.034446] ? set_next_entity+0x304/0x550 [ 133.034464] ? update_curr+0x267/0x740 [ 133.034483] ? lock_is_held_type+0xd7/0x130 [ 133.034501] __schedule+0xedd/0x2470 [ 133.034514] ? io_schedule_timeout+0x150/0x150 [ 133.034526] ? rcu_read_lock_sched_held+0x3e/0x80 [ 133.034548] schedule+0xda/0x1b0 [ 133.034558] exit_to_user_mode_prepare+0x114/0x1a0 [ 133.034579] syscall_exit_to_user_mode+0x19/0x40 [ 133.034597] do_syscall_64+0x48/0x90 [ 133.034611] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 133.034629] RIP: 0033:0x7f4cc419ab19 [ 133.034637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 133.034648] RSP: 002b:00007f4cc1710218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 133.034659] RAX: 0000000000000001 RBX: 00007f4cc42adf68 RCX: 00007f4cc419ab19 [ 133.034667] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4cc42adf6c [ 133.034674] RBP: 00007f4cc42adf60 R08: 000000000000000e R09: 0000000000000000 [ 133.034681] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f4cc42adf6c [ 133.034689] R13: 00007ffd84ef6cef R14: 00007f4cc1710300 R15: 0000000000022000 [ 133.034701] [ 133.091414] WARNING: CPU: 1 PID: 3718 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 133.092112] Modules linked in: [ 133.092356] CPU: 1 PID: 3718 Comm: syz-executor.6 Not tainted 6.0.0-rc5-next-20220912 #1 [ 133.092947] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 133.093769] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 133.094178] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 133.095497] RSP: 0018:ffff88803cf67c48 EFLAGS: 00010006 [ 133.095890] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 133.096414] RDX: ffff888015ce1ac0 RSI: ffffffff81566027 RDI: 0000000000000005 [ 133.096948] RBP: ffff88801aca0b90 R08: 0000000000000005 R09: 0000000000000001 [ 133.097491] R10: 0000000000000000 R11: ffffffff865aa05b R12: ffff88800fa0cc00 [ 133.098020] R13: ffff88806cf3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 133.098555] FS: 00007f4cc1710700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 133.099149] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 133.099584] CR2: 00007f0fba922260 CR3: 000000001d98c000 CR4: 0000000000350ee0 [ 133.100109] Call Trace: [ 133.100303] [ 133.100480] ctx_sched_out+0x8f1/0xc10 [ 133.100776] __perf_event_task_sched_out+0x6d0/0x18d0 [ 133.101163] ? lock_is_held_type+0xd7/0x130 [ 133.101513] ? __perf_cgroup_move+0x160/0x160 [ 133.101848] ? set_next_entity+0x304/0x550 [ 133.102172] ? update_curr+0x267/0x740 [ 133.102477] ? lock_is_held_type+0xd7/0x130 [ 133.102807] __schedule+0xedd/0x2470 [ 133.103097] ? io_schedule_timeout+0x150/0x150 [ 133.103444] ? rcu_read_lock_sched_held+0x3e/0x80 [ 133.103816] schedule+0xda/0x1b0 [ 133.104077] exit_to_user_mode_prepare+0x114/0x1a0 [ 133.104457] syscall_exit_to_user_mode+0x19/0x40 [ 133.104830] do_syscall_64+0x48/0x90 [ 133.105116] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 133.105536] RIP: 0033:0x7f4cc419ab19 [ 133.105823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 133.107143] RSP: 002b:00007f4cc1710218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 133.107699] RAX: 0000000000000001 RBX: 00007f4cc42adf68 RCX: 00007f4cc419ab19 [ 133.108225] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4cc42adf6c [ 133.108760] RBP: 00007f4cc42adf60 R08: 000000000000000e R09: 0000000000000000 [ 133.109293] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f4cc42adf6c [ 133.109827] R13: 00007ffd84ef6cef R14: 00007f4cc1710300 R15: 0000000000022000 [ 133.110353] [ 133.110531] irq event stamp: 586 [ 133.110781] hardirqs last enabled at (585): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 133.111491] hardirqs last disabled at (586): [] __schedule+0x1225/0x2470 [ 133.112096] softirqs last enabled at (232): [] __irq_exit_rcu+0x11b/0x180 [ 133.112728] softirqs last disabled at (181): [] __irq_exit_rcu+0x11b/0x180 [ 133.113384] ---[ end trace 0000000000000000 ]--- 19:20:23 executing program 1: clock_nanosleep(0x8, 0xf, &(0x7f0000000000), 0x0) 19:20:23 executing program 1: clock_nanosleep(0x8, 0xf, &(0x7f0000000000), 0x0) 19:20:23 executing program 6: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000400", @ANYBLOB="040000f90000000000000000007268"], 0x3c, 0x0) 19:20:23 executing program 1: clock_nanosleep(0x8, 0xf, &(0x7f0000000000), 0x0) 19:20:23 executing program 6: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000400", @ANYBLOB="040000f90000000000000000007268"], 0x3c, 0x0) [ 138.559103] hrtimer: interrupt took 19036 ns 19:20:29 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x56ad, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x2, 0x384}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f00000007c0)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = dup(0xffffffffffffffff) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) sendmsg$unix(r1, &(0x7f0000000780)={&(0x7f0000000500)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000580)="69b971cc87340e5208e6f1bc2060cf76369fdbadecbf118e1113b52a0e24867c5ad92566e0cef3c8cca60fb6e25f0f065874a020859cdd1d5cdf20288a289606f155d1a369052cc2243b0d5b6f527ff19c283723c7020e6854041c2473026293d03924dda4712ad1786ee7b1f25fa618254c594f16344bb60cc0bd3585da6d653a023513fd6101286b94cb9e219650d7c7a931067b95c694b8f173ad526867b820f52827", 0xa4}, {&(0x7f0000000640)="7aa52aa6e7d4cf1ec960bb1694201fa79e75ba70da3e14ad251a575e8fe206bca54b0485163cba56a20cb9b58fc355649374a1894fc4b186d34ab3a78c3c424996d6764da7f40eeb1d93617aff13842e2ea61f6342bfa0c4cae62e35b441829cf8aa26d1e7d8bff54eb08215f8722b99081b9061db684f68ecec5d0924f40f711ef9ec81a1f06a1339656923d1456c1b8bfc248c2469278ffac30c9697ff12cf8dea373cfd921b0de61ed5c43400319e99276228d9566a749854dfee59c8429dfb23a5370268a79f8a012db69805872e5834449a1706ffd5bc656a39fef216d0fede5ffdf198ae23599effaa60fbd52e4b500c4f310739", 0xf7}], 0x2, &(0x7f0000000740)=[@rights={{0x10}}], 0x10, 0x200400d1}, 0x4042) write$sndseq(0xffffffffffffffff, &(0x7f0000000140), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x68f5, &(0x7f0000000340)={0x0, 0xe8de, 0x10, 0x1, 0x3d, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000004c0)) pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000009c0)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0) close(r2) syz_io_uring_setup(0x35a6, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0x2, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) unshare(0x8040080) semop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x3000}], 0x2aaaabde) 19:20:29 executing program 2: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000400", @ANYBLOB="040000f90000000000000000007268"], 0x3c, 0x0) 19:20:29 executing program 6: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000400", @ANYBLOB="040000f90000000000000000007268"], 0x3c, 0x0) 19:20:29 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x30, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 19:20:29 executing program 4: shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff9000/0x3000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x0) r1 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ff9000/0x2000)=nil) r2 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffa000/0x2000)=nil) shmat(r2, &(0x7f0000ffa000/0x3000)=nil, 0x1000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/4096) move_pages(0x0, 0x4, &(0x7f0000001000)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000001040)=[0x3, 0x3a], &(0x7f0000001080)=[0x0], 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x7000) r3 = shmget(0x3, 0x1000, 0x1, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r3, 0x0) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x5000) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x1000) 19:20:29 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc0bc5310, &(0x7f0000000040)={0xb3, @time}) 19:20:29 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, 0x0, 0x0) 19:20:29 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x56ad, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x2, 0x384}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f00000007c0)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = dup(0xffffffffffffffff) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) sendmsg$unix(r1, &(0x7f0000000780)={&(0x7f0000000500)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000580)="69b971cc87340e5208e6f1bc2060cf76369fdbadecbf118e1113b52a0e24867c5ad92566e0cef3c8cca60fb6e25f0f065874a020859cdd1d5cdf20288a289606f155d1a369052cc2243b0d5b6f527ff19c283723c7020e6854041c2473026293d03924dda4712ad1786ee7b1f25fa618254c594f16344bb60cc0bd3585da6d653a023513fd6101286b94cb9e219650d7c7a931067b95c694b8f173ad526867b820f52827", 0xa4}, {&(0x7f0000000640)="7aa52aa6e7d4cf1ec960bb1694201fa79e75ba70da3e14ad251a575e8fe206bca54b0485163cba56a20cb9b58fc355649374a1894fc4b186d34ab3a78c3c424996d6764da7f40eeb1d93617aff13842e2ea61f6342bfa0c4cae62e35b441829cf8aa26d1e7d8bff54eb08215f8722b99081b9061db684f68ecec5d0924f40f711ef9ec81a1f06a1339656923d1456c1b8bfc248c2469278ffac30c9697ff12cf8dea373cfd921b0de61ed5c43400319e99276228d9566a749854dfee59c8429dfb23a5370268a79f8a012db69805872e5834449a1706ffd5bc656a39fef216d0fede5ffdf198ae23599effaa60fbd52e4b500c4f310739", 0xf7}], 0x2, &(0x7f0000000740)=[@rights={{0x10}}], 0x10, 0x200400d1}, 0x4042) write$sndseq(0xffffffffffffffff, &(0x7f0000000140), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x68f5, &(0x7f0000000340)={0x0, 0xe8de, 0x10, 0x1, 0x3d, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000004c0)) pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000009c0)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0) close(r2) syz_io_uring_setup(0x35a6, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0x2, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) unshare(0x8040080) semop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x3000}], 0x2aaaabde) 19:20:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000240)=ANY=[@ANYBLOB="014e00000028bcbcc4f9233e735d9752a8628468000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) io_uring_setup(0x5766, &(0x7f0000000040)) fallocate(0xffffffffffffffff, 0x4, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="fa1921df803613008b6abca5f40a7f3e8c2a2d648201809b9821a3b8f385b5b7a8bd542b9e1c45f8e3e56b41bb0ee9d59ecd7332c2d2c464c474cc3a6c8d822905a68c5ca4999044e6e056f0dc4ad5c23c1f", 0x52}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e13be9e0100af994fa2f6ae43a22eaf40415d54db9b61b57182d09d0b1e5bb2cc73eccd5c0", 0x36}, {0x0}], 0x3, 0x8001, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x1d5080, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x100000) 19:20:29 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000000)={0x77359400}, 0x10) 19:20:29 executing program 4: shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff9000/0x3000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x0) r1 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ff9000/0x2000)=nil) r2 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffa000/0x2000)=nil) shmat(r2, &(0x7f0000ffa000/0x3000)=nil, 0x1000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/4096) move_pages(0x0, 0x4, &(0x7f0000001000)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000001040)=[0x3, 0x3a], &(0x7f0000001080)=[0x0], 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x7000) r3 = shmget(0x3, 0x1000, 0x1, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r3, 0x0) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x5000) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x1000) 19:20:29 executing program 1: shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff9000/0x3000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x0) r1 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ff9000/0x2000)=nil) r2 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffa000/0x2000)=nil) shmat(r2, &(0x7f0000ffa000/0x3000)=nil, 0x1000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/4096) move_pages(0x0, 0x4, &(0x7f0000001000)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000001040)=[0x3, 0x3a], &(0x7f0000001080)=[0x0], 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x7000) r3 = shmget(0x3, 0x1000, 0x1, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r3, 0x0) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x5000) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x1000) 19:20:29 executing program 7: shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff9000/0x3000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x0) r1 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ff9000/0x2000)=nil) r2 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffa000/0x2000)=nil) shmat(r2, &(0x7f0000ffa000/0x3000)=nil, 0x1000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/4096) move_pages(0x0, 0x4, &(0x7f0000001000)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000001040)=[0x3, 0x3a], &(0x7f0000001080)=[0x0], 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x7000) r3 = shmget(0x3, 0x1000, 0x1, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r3, 0x0) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x5000) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x1000) 19:20:30 executing program 2: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000400", @ANYBLOB="040000f90000000000000000007268"], 0x3c, 0x0) 19:20:30 executing program 6: getresgid(&(0x7f00000051c0), &(0x7f0000005200), &(0x7f0000005240)) 19:20:30 executing program 4: shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff9000/0x3000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x0) r1 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ff9000/0x2000)=nil) r2 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffa000/0x2000)=nil) shmat(r2, &(0x7f0000ffa000/0x3000)=nil, 0x1000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/4096) move_pages(0x0, 0x4, &(0x7f0000001000)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000001040)=[0x3, 0x3a], &(0x7f0000001080)=[0x0], 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x7000) r3 = shmget(0x3, 0x1000, 0x1, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r3, 0x0) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x5000) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x1000) 19:20:30 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x56ad, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x2, 0x384}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f00000007c0)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = dup(0xffffffffffffffff) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) sendmsg$unix(r1, &(0x7f0000000780)={&(0x7f0000000500)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000580)="69b971cc87340e5208e6f1bc2060cf76369fdbadecbf118e1113b52a0e24867c5ad92566e0cef3c8cca60fb6e25f0f065874a020859cdd1d5cdf20288a289606f155d1a369052cc2243b0d5b6f527ff19c283723c7020e6854041c2473026293d03924dda4712ad1786ee7b1f25fa618254c594f16344bb60cc0bd3585da6d653a023513fd6101286b94cb9e219650d7c7a931067b95c694b8f173ad526867b820f52827", 0xa4}, {&(0x7f0000000640)="7aa52aa6e7d4cf1ec960bb1694201fa79e75ba70da3e14ad251a575e8fe206bca54b0485163cba56a20cb9b58fc355649374a1894fc4b186d34ab3a78c3c424996d6764da7f40eeb1d93617aff13842e2ea61f6342bfa0c4cae62e35b441829cf8aa26d1e7d8bff54eb08215f8722b99081b9061db684f68ecec5d0924f40f711ef9ec81a1f06a1339656923d1456c1b8bfc248c2469278ffac30c9697ff12cf8dea373cfd921b0de61ed5c43400319e99276228d9566a749854dfee59c8429dfb23a5370268a79f8a012db69805872e5834449a1706ffd5bc656a39fef216d0fede5ffdf198ae23599effaa60fbd52e4b500c4f310739", 0xf7}], 0x2, &(0x7f0000000740)=[@rights={{0x10}}], 0x10, 0x200400d1}, 0x4042) write$sndseq(0xffffffffffffffff, &(0x7f0000000140), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x68f5, &(0x7f0000000340)={0x0, 0xe8de, 0x10, 0x1, 0x3d, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000004c0)) pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000009c0)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0) close(r2) syz_io_uring_setup(0x35a6, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0x2, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) unshare(0x8040080) semop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x3000}], 0x2aaaabde) 19:20:30 executing program 1: shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff9000/0x3000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x0) r1 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ff9000/0x2000)=nil) r2 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffa000/0x2000)=nil) shmat(r2, &(0x7f0000ffa000/0x3000)=nil, 0x1000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/4096) move_pages(0x0, 0x4, &(0x7f0000001000)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000001040)=[0x3, 0x3a], &(0x7f0000001080)=[0x0], 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x7000) r3 = shmget(0x3, 0x1000, 0x1, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r3, 0x0) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x5000) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x1000) 19:20:30 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x56ad, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x2, 0x384}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f00000007c0)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = dup(0xffffffffffffffff) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) sendmsg$unix(r1, &(0x7f0000000780)={&(0x7f0000000500)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000580)="69b971cc87340e5208e6f1bc2060cf76369fdbadecbf118e1113b52a0e24867c5ad92566e0cef3c8cca60fb6e25f0f065874a020859cdd1d5cdf20288a289606f155d1a369052cc2243b0d5b6f527ff19c283723c7020e6854041c2473026293d03924dda4712ad1786ee7b1f25fa618254c594f16344bb60cc0bd3585da6d653a023513fd6101286b94cb9e219650d7c7a931067b95c694b8f173ad526867b820f52827", 0xa4}, {&(0x7f0000000640)="7aa52aa6e7d4cf1ec960bb1694201fa79e75ba70da3e14ad251a575e8fe206bca54b0485163cba56a20cb9b58fc355649374a1894fc4b186d34ab3a78c3c424996d6764da7f40eeb1d93617aff13842e2ea61f6342bfa0c4cae62e35b441829cf8aa26d1e7d8bff54eb08215f8722b99081b9061db684f68ecec5d0924f40f711ef9ec81a1f06a1339656923d1456c1b8bfc248c2469278ffac30c9697ff12cf8dea373cfd921b0de61ed5c43400319e99276228d9566a749854dfee59c8429dfb23a5370268a79f8a012db69805872e5834449a1706ffd5bc656a39fef216d0fede5ffdf198ae23599effaa60fbd52e4b500c4f310739", 0xf7}], 0x2, &(0x7f0000000740)=[@rights={{0x10}}], 0x10, 0x200400d1}, 0x4042) write$sndseq(0xffffffffffffffff, &(0x7f0000000140), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x68f5, &(0x7f0000000340)={0x0, 0xe8de, 0x10, 0x1, 0x3d, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000004c0)) pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000009c0)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0) close(r2) syz_io_uring_setup(0x35a6, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0x2, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) unshare(0x8040080) semop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x3000}], 0x2aaaabde) 19:20:30 executing program 7: shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff9000/0x3000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x0) r1 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ff9000/0x2000)=nil) r2 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffa000/0x2000)=nil) shmat(r2, &(0x7f0000ffa000/0x3000)=nil, 0x1000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/4096) move_pages(0x0, 0x4, &(0x7f0000001000)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000001040)=[0x3, 0x3a], &(0x7f0000001080)=[0x0], 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x7000) r3 = shmget(0x3, 0x1000, 0x1, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r3, 0x0) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x5000) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x1000) 19:20:30 executing program 4: shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff9000/0x3000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x0) r1 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ff9000/0x2000)=nil) r2 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffa000/0x2000)=nil) shmat(r2, &(0x7f0000ffa000/0x3000)=nil, 0x1000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/4096) move_pages(0x0, 0x4, &(0x7f0000001000)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000001040)=[0x3, 0x3a], &(0x7f0000001080)=[0x0], 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x7000) r3 = shmget(0x3, 0x1000, 0x1, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r3, 0x0) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x5000) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x1000) 19:20:30 executing program 2: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000400", @ANYBLOB="040000f90000000000000000007268"], 0x3c, 0x0) 19:20:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000240)=ANY=[@ANYBLOB="014e00000028bcbcc4f9233e735d9752a8628468000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) io_uring_setup(0x5766, &(0x7f0000000040)) fallocate(0xffffffffffffffff, 0x4, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="fa1921df803613008b6abca5f40a7f3e8c2a2d648201809b9821a3b8f385b5b7a8bd542b9e1c45f8e3e56b41bb0ee9d59ecd7332c2d2c464c474cc3a6c8d822905a68c5ca4999044e6e056f0dc4ad5c23c1f", 0x52}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e13be9e0100af994fa2f6ae43a22eaf40415d54db9b61b57182d09d0b1e5bb2cc73eccd5c0", 0x36}, {0x0}], 0x3, 0x8001, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x1d5080, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x100000) 19:20:30 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) dup3(r0, r1, 0x0) 19:20:30 executing program 7: shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff9000/0x3000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x0) r1 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ff9000/0x2000)=nil) r2 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffa000/0x2000)=nil) shmat(r2, &(0x7f0000ffa000/0x3000)=nil, 0x1000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/4096) move_pages(0x0, 0x4, &(0x7f0000001000)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000001040)=[0x3, 0x3a], &(0x7f0000001080)=[0x0], 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x7000) r3 = shmget(0x3, 0x1000, 0x1, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r3, 0x0) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x5000) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x1000) 19:20:30 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000240)=ANY=[@ANYBLOB="014e00000028bcbcc4f9233e735d9752a8628468000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) io_uring_setup(0x5766, &(0x7f0000000040)) fallocate(0xffffffffffffffff, 0x4, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="fa1921df803613008b6abca5f40a7f3e8c2a2d648201809b9821a3b8f385b5b7a8bd542b9e1c45f8e3e56b41bb0ee9d59ecd7332c2d2c464c474cc3a6c8d822905a68c5ca4999044e6e056f0dc4ad5c23c1f", 0x52}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e13be9e0100af994fa2f6ae43a22eaf40415d54db9b61b57182d09d0b1e5bb2cc73eccd5c0", 0x36}, {0x0}], 0x3, 0x8001, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x1d5080, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x100000) 19:20:30 executing program 1: shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ff9000/0x3000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x4000) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x0) r1 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ff9000/0x2000)=nil) r2 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffa000/0x2000)=nil) shmat(r2, &(0x7f0000ffa000/0x3000)=nil, 0x1000) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/4096) move_pages(0x0, 0x4, &(0x7f0000001000)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000001040)=[0x3, 0x3a], &(0x7f0000001080)=[0x0], 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x7000) r3 = shmget(0x3, 0x1000, 0x1, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r3, 0x0) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x5000) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x1000) 19:20:31 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x56ad, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x2, 0x384}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f00000007c0)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = dup(0xffffffffffffffff) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) sendmsg$unix(r1, &(0x7f0000000780)={&(0x7f0000000500)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000580)="69b971cc87340e5208e6f1bc2060cf76369fdbadecbf118e1113b52a0e24867c5ad92566e0cef3c8cca60fb6e25f0f065874a020859cdd1d5cdf20288a289606f155d1a369052cc2243b0d5b6f527ff19c283723c7020e6854041c2473026293d03924dda4712ad1786ee7b1f25fa618254c594f16344bb60cc0bd3585da6d653a023513fd6101286b94cb9e219650d7c7a931067b95c694b8f173ad526867b820f52827", 0xa4}, {&(0x7f0000000640)="7aa52aa6e7d4cf1ec960bb1694201fa79e75ba70da3e14ad251a575e8fe206bca54b0485163cba56a20cb9b58fc355649374a1894fc4b186d34ab3a78c3c424996d6764da7f40eeb1d93617aff13842e2ea61f6342bfa0c4cae62e35b441829cf8aa26d1e7d8bff54eb08215f8722b99081b9061db684f68ecec5d0924f40f711ef9ec81a1f06a1339656923d1456c1b8bfc248c2469278ffac30c9697ff12cf8dea373cfd921b0de61ed5c43400319e99276228d9566a749854dfee59c8429dfb23a5370268a79f8a012db69805872e5834449a1706ffd5bc656a39fef216d0fede5ffdf198ae23599effaa60fbd52e4b500c4f310739", 0xf7}], 0x2, &(0x7f0000000740)=[@rights={{0x10}}], 0x10, 0x200400d1}, 0x4042) write$sndseq(0xffffffffffffffff, &(0x7f0000000140), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x68f5, &(0x7f0000000340)={0x0, 0xe8de, 0x10, 0x1, 0x3d, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000004c0)) pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000009c0)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0) close(r2) syz_io_uring_setup(0x35a6, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0x2, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) unshare(0x8040080) semop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x3000}], 0x2aaaabde) 19:20:31 executing program 4: r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000680)) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000006c0)=0x5, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x10000000) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r2, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) syz_io_uring_setup(0x4051, &(0x7f00000005c0)={0x0, 0x921f, 0x10, 0x2, 0x2b0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000640)) syz_io_uring_submit(0x0, r1, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0xffff) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000500000008dd170230d161483ebf620444cd8999f471744f6373d2fb2e90b88d8df29bfafd7103dbe966e3775075003e0814526cde0479617255cec907ffc603dbe4a1fff2f6ff34c7c7f8a621f21e952bb7a39f496b091cd2d145c836d95351b02914b648a262ac7643868aa73d41f2e8635d4adb5ef24f01bab428570471c510d83275b6c77de422c70e560553d6749c70e6dd26f2b295f96bb8d042dbf9696a43debb0447639902d8a76e2de265ef8195583d96abefe14890db505fae654a2438a0f53859bb674d69"], 0x125) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x4000) socket$netlink(0x10, 0x3, 0xb) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @private, @initdev}, &(0x7f0000000180)=0xc) 19:20:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev, r3}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local, r3}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FITHAW(r0, 0xc0045878) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'macsec0\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94e91b855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 19:20:31 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x7, 0x0) 19:20:31 executing program 7: openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) [ 140.669141] device lo entered promiscuous mode [ 141.270385] device lo left promiscuous mode [ 141.275762] device lo entered promiscuous mode [ 141.384235] syz-executor.6 (4052) used greatest stack depth: 23960 bytes left 19:20:32 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x56ad, &(0x7f0000000140)={0x0, 0x6c4c, 0x10, 0x2, 0x384}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000), &(0x7f00000007c0)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = dup(0xffffffffffffffff) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0) sendmsg$unix(r1, &(0x7f0000000780)={&(0x7f0000000500)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000580)="69b971cc87340e5208e6f1bc2060cf76369fdbadecbf118e1113b52a0e24867c5ad92566e0cef3c8cca60fb6e25f0f065874a020859cdd1d5cdf20288a289606f155d1a369052cc2243b0d5b6f527ff19c283723c7020e6854041c2473026293d03924dda4712ad1786ee7b1f25fa618254c594f16344bb60cc0bd3585da6d653a023513fd6101286b94cb9e219650d7c7a931067b95c694b8f173ad526867b820f52827", 0xa4}, {&(0x7f0000000640)="7aa52aa6e7d4cf1ec960bb1694201fa79e75ba70da3e14ad251a575e8fe206bca54b0485163cba56a20cb9b58fc355649374a1894fc4b186d34ab3a78c3c424996d6764da7f40eeb1d93617aff13842e2ea61f6342bfa0c4cae62e35b441829cf8aa26d1e7d8bff54eb08215f8722b99081b9061db684f68ecec5d0924f40f711ef9ec81a1f06a1339656923d1456c1b8bfc248c2469278ffac30c9697ff12cf8dea373cfd921b0de61ed5c43400319e99276228d9566a749854dfee59c8429dfb23a5370268a79f8a012db69805872e5834449a1706ffd5bc656a39fef216d0fede5ffdf198ae23599effaa60fbd52e4b500c4f310739", 0xf7}], 0x2, &(0x7f0000000740)=[@rights={{0x10}}], 0x10, 0x200400d1}, 0x4042) write$sndseq(0xffffffffffffffff, &(0x7f0000000140), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x68f5, &(0x7f0000000340)={0x0, 0xe8de, 0x10, 0x1, 0x3d, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000004c0)) pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000009c0)) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0) close(r2) syz_io_uring_setup(0x35a6, &(0x7f00000003c0)={0x0, 0x132c, 0x10, 0x2, 0x375}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)) unshare(0x8040080) semop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x3000}], 0x2aaaabde) 19:20:32 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000240)=ANY=[@ANYBLOB="014e00000028bcbcc4f9233e735d9752a8628468000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) io_uring_setup(0x5766, &(0x7f0000000040)) fallocate(0xffffffffffffffff, 0x4, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="fa1921df803613008b6abca5f40a7f3e8c2a2d648201809b9821a3b8f385b5b7a8bd542b9e1c45f8e3e56b41bb0ee9d59ecd7332c2d2c464c474cc3a6c8d822905a68c5ca4999044e6e056f0dc4ad5c23c1f", 0x52}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e13be9e0100af994fa2f6ae43a22eaf40415d54db9b61b57182d09d0b1e5bb2cc73eccd5c0", 0x36}, {0x0}], 0x3, 0x8001, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x1d5080, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x100000) 19:20:32 executing program 5: syz_mount_image$ext4(&(0x7f0000004e80)='ext2\x00', &(0x7f0000004ec0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000050c0)={[{@data_err_abort}]}) 19:20:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev, r3}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local, r3}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FITHAW(r0, 0xc0045878) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'macsec0\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94e91b855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 19:20:32 executing program 4: r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000680)) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000006c0)=0x5, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x10000000) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r2, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) syz_io_uring_setup(0x4051, &(0x7f00000005c0)={0x0, 0x921f, 0x10, 0x2, 0x2b0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000640)) syz_io_uring_submit(0x0, r1, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0xffff) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000500000008dd170230d161483ebf620444cd8999f471744f6373d2fb2e90b88d8df29bfafd7103dbe966e3775075003e0814526cde0479617255cec907ffc603dbe4a1fff2f6ff34c7c7f8a621f21e952bb7a39f496b091cd2d145c836d95351b02914b648a262ac7643868aa73d41f2e8635d4adb5ef24f01bab428570471c510d83275b6c77de422c70e560553d6749c70e6dd26f2b295f96bb8d042dbf9696a43debb0447639902d8a76e2de265ef8195583d96abefe14890db505fae654a2438a0f53859bb674d69"], 0x125) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x4000) socket$netlink(0x10, 0x3, 0xb) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @private, @initdev}, &(0x7f0000000180)=0xc) 19:20:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000240)=ANY=[@ANYBLOB="014e00000028bcbcc4f9233e735d9752a8628468000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) io_uring_setup(0x5766, &(0x7f0000000040)) fallocate(0xffffffffffffffff, 0x4, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="fa1921df803613008b6abca5f40a7f3e8c2a2d648201809b9821a3b8f385b5b7a8bd542b9e1c45f8e3e56b41bb0ee9d59ecd7332c2d2c464c474cc3a6c8d822905a68c5ca4999044e6e056f0dc4ad5c23c1f", 0x52}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e13be9e0100af994fa2f6ae43a22eaf40415d54db9b61b57182d09d0b1e5bb2cc73eccd5c0", 0x36}, {0x0}], 0x3, 0x8001, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x1d5080, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x100000) 19:20:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x24}}, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000000000)=ANY=[], 0x20}, {&(0x7f00000000c0)={0x230, 0x0, 0x0, 0x0, 0x0, "", [@nested={0x89, 0x0, 0x0, 0x1, [@generic="cefc0cc6001b18d662b2e3e60d8af1f37f54d5dc80cdc96d2efb1387d9e461884f6f6ff018f58031fb99ffa94afd4212c43c1dafebbd7a99b75635f09d631e89a21801dd1cb8c55626af902be4af8b178ced2f789ed2b8281928338fbec179fef80e95b173", @typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0x185, 0x0, 0x0, 0x1, [@generic="e504758197d32a2ff8fb0b7fe5496fc019", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x4}, @generic="2c081992c7428d34b3b2ed41ed2592094756410e4afde4562b4f2e67f81cbb787b1ad8c4891066e382894816017820d71a36afe10a4abdb4e788af7b4d8a95a25edd88aa018fb5403f4e966eebe43f81b0067dbfb6f2cc37548d2dea133f6cdf4c5171e78c362f9fef678f5531", @generic="d76cd6add22f00ed73d318df13d1e9ec9a46001c35c02ff77ebedfa913fe7b3af80e0fa52bd0", @typed={0xb, 0x0, 0x0, 0x0, @str='\'!*$\'}\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="5c1e7ff9446bcf74fe55c0996d894f62dd72e94e3ab66b065f03757bae0c16de1d33ceb0456fb617d2ea27de2c301063973093452fa3680bc59d5ab9d0e2d71498b30f1fc6966b3814fcdce7e4dfe438a74c1ecf2e5d1f7de1830e5fd07daaceb40b8c4b4d5fd2687ab8dd805ce126767aa439161b300385830b92fc06bab805d99499dda2a0e6f5ea3fa35bf393164ab034ad0a9a50dbccf31d20ddc26885c1e3d80b7d30173cba58dfe0df20d9e31830af8c2d8aaef8cf15bb51db43"]}]}, 0x230}], 0x2}, 0x0) 19:20:32 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000080), 0x4) [ 141.490110] device lo left promiscuous mode [ 141.493013] No source specified [ 141.505116] No source specified 19:20:32 executing program 5: r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000680)) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000006c0)=0x5, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x10000000) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r2, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) syz_io_uring_setup(0x4051, &(0x7f00000005c0)={0x0, 0x921f, 0x10, 0x2, 0x2b0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000640)) syz_io_uring_submit(0x0, r1, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0xffff) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000500000008dd170230d161483ebf620444cd8999f471744f6373d2fb2e90b88d8df29bfafd7103dbe966e3775075003e0814526cde0479617255cec907ffc603dbe4a1fff2f6ff34c7c7f8a621f21e952bb7a39f496b091cd2d145c836d95351b02914b648a262ac7643868aa73d41f2e8635d4adb5ef24f01bab428570471c510d83275b6c77de422c70e560553d6749c70e6dd26f2b295f96bb8d042dbf9696a43debb0447639902d8a76e2de265ef8195583d96abefe14890db505fae654a2438a0f53859bb674d69"], 0x125) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x4000) socket$netlink(0x10, 0x3, 0xb) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @private, @initdev}, &(0x7f0000000180)=0xc) 19:20:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x24}}, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000000000)=ANY=[], 0x20}, {&(0x7f00000000c0)={0x230, 0x0, 0x0, 0x0, 0x0, "", [@nested={0x89, 0x0, 0x0, 0x1, [@generic="cefc0cc6001b18d662b2e3e60d8af1f37f54d5dc80cdc96d2efb1387d9e461884f6f6ff018f58031fb99ffa94afd4212c43c1dafebbd7a99b75635f09d631e89a21801dd1cb8c55626af902be4af8b178ced2f789ed2b8281928338fbec179fef80e95b173", @typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0x185, 0x0, 0x0, 0x1, [@generic="e504758197d32a2ff8fb0b7fe5496fc019", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x4}, @generic="2c081992c7428d34b3b2ed41ed2592094756410e4afde4562b4f2e67f81cbb787b1ad8c4891066e382894816017820d71a36afe10a4abdb4e788af7b4d8a95a25edd88aa018fb5403f4e966eebe43f81b0067dbfb6f2cc37548d2dea133f6cdf4c5171e78c362f9fef678f5531", @generic="d76cd6add22f00ed73d318df13d1e9ec9a46001c35c02ff77ebedfa913fe7b3af80e0fa52bd0", @typed={0xb, 0x0, 0x0, 0x0, @str='\'!*$\'}\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="5c1e7ff9446bcf74fe55c0996d894f62dd72e94e3ab66b065f03757bae0c16de1d33ceb0456fb617d2ea27de2c301063973093452fa3680bc59d5ab9d0e2d71498b30f1fc6966b3814fcdce7e4dfe438a74c1ecf2e5d1f7de1830e5fd07daaceb40b8c4b4d5fd2687ab8dd805ce126767aa439161b300385830b92fc06bab805d99499dda2a0e6f5ea3fa35bf393164ab034ad0a9a50dbccf31d20ddc26885c1e3d80b7d30173cba58dfe0df20d9e31830af8c2d8aaef8cf15bb51db43"]}]}, 0x230}], 0x2}, 0x0) [ 141.652347] device lo entered promiscuous mode 19:20:32 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev, r3}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local, r3}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FITHAW(r0, 0xc0045878) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'macsec0\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94e91b855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) [ 142.073856] device lo entered promiscuous mode 19:20:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x24}}, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000000000)=ANY=[], 0x20}, {&(0x7f00000000c0)={0x230, 0x0, 0x0, 0x0, 0x0, "", [@nested={0x89, 0x0, 0x0, 0x1, [@generic="cefc0cc6001b18d662b2e3e60d8af1f37f54d5dc80cdc96d2efb1387d9e461884f6f6ff018f58031fb99ffa94afd4212c43c1dafebbd7a99b75635f09d631e89a21801dd1cb8c55626af902be4af8b178ced2f789ed2b8281928338fbec179fef80e95b173", @typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0x185, 0x0, 0x0, 0x1, [@generic="e504758197d32a2ff8fb0b7fe5496fc019", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x4}, @generic="2c081992c7428d34b3b2ed41ed2592094756410e4afde4562b4f2e67f81cbb787b1ad8c4891066e382894816017820d71a36afe10a4abdb4e788af7b4d8a95a25edd88aa018fb5403f4e966eebe43f81b0067dbfb6f2cc37548d2dea133f6cdf4c5171e78c362f9fef678f5531", @generic="d76cd6add22f00ed73d318df13d1e9ec9a46001c35c02ff77ebedfa913fe7b3af80e0fa52bd0", @typed={0xb, 0x0, 0x0, 0x0, @str='\'!*$\'}\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="5c1e7ff9446bcf74fe55c0996d894f62dd72e94e3ab66b065f03757bae0c16de1d33ceb0456fb617d2ea27de2c301063973093452fa3680bc59d5ab9d0e2d71498b30f1fc6966b3814fcdce7e4dfe438a74c1ecf2e5d1f7de1830e5fd07daaceb40b8c4b4d5fd2687ab8dd805ce126767aa439161b300385830b92fc06bab805d99499dda2a0e6f5ea3fa35bf393164ab034ad0a9a50dbccf31d20ddc26885c1e3d80b7d30173cba58dfe0df20d9e31830af8c2d8aaef8cf15bb51db43"]}]}, 0x230}], 0x2}, 0x0) 19:20:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev, r3}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local, r3}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FITHAW(r0, 0xc0045878) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'macsec0\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94e91b855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 19:20:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x24}}, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000000000)=ANY=[], 0x20}, {&(0x7f00000000c0)={0x230, 0x0, 0x0, 0x0, 0x0, "", [@nested={0x89, 0x0, 0x0, 0x1, [@generic="cefc0cc6001b18d662b2e3e60d8af1f37f54d5dc80cdc96d2efb1387d9e461884f6f6ff018f58031fb99ffa94afd4212c43c1dafebbd7a99b75635f09d631e89a21801dd1cb8c55626af902be4af8b178ced2f789ed2b8281928338fbec179fef80e95b173", @typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0x185, 0x0, 0x0, 0x1, [@generic="e504758197d32a2ff8fb0b7fe5496fc019", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x4}, @generic="2c081992c7428d34b3b2ed41ed2592094756410e4afde4562b4f2e67f81cbb787b1ad8c4891066e382894816017820d71a36afe10a4abdb4e788af7b4d8a95a25edd88aa018fb5403f4e966eebe43f81b0067dbfb6f2cc37548d2dea133f6cdf4c5171e78c362f9fef678f5531", @generic="d76cd6add22f00ed73d318df13d1e9ec9a46001c35c02ff77ebedfa913fe7b3af80e0fa52bd0", @typed={0xb, 0x0, 0x0, 0x0, @str='\'!*$\'}\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="5c1e7ff9446bcf74fe55c0996d894f62dd72e94e3ab66b065f03757bae0c16de1d33ceb0456fb617d2ea27de2c301063973093452fa3680bc59d5ab9d0e2d71498b30f1fc6966b3814fcdce7e4dfe438a74c1ecf2e5d1f7de1830e5fd07daaceb40b8c4b4d5fd2687ab8dd805ce126767aa439161b300385830b92fc06bab805d99499dda2a0e6f5ea3fa35bf393164ab034ad0a9a50dbccf31d20ddc26885c1e3d80b7d30173cba58dfe0df20d9e31830af8c2d8aaef8cf15bb51db43"]}]}, 0x230}], 0x2}, 0x0) 19:20:32 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev, r3}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local, r3}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FITHAW(r0, 0xc0045878) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'macsec0\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94e91b855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) [ 142.269148] device lo left promiscuous mode 19:20:32 executing program 4: r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000680)) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000006c0)=0x5, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x10000000) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r2, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) syz_io_uring_setup(0x4051, &(0x7f00000005c0)={0x0, 0x921f, 0x10, 0x2, 0x2b0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000640)) syz_io_uring_submit(0x0, r1, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0xffff) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000500000008dd170230d161483ebf620444cd8999f471744f6373d2fb2e90b88d8df29bfafd7103dbe966e3775075003e0814526cde0479617255cec907ffc603dbe4a1fff2f6ff34c7c7f8a621f21e952bb7a39f496b091cd2d145c836d95351b02914b648a262ac7643868aa73d41f2e8635d4adb5ef24f01bab428570471c510d83275b6c77de422c70e560553d6749c70e6dd26f2b295f96bb8d042dbf9696a43debb0447639902d8a76e2de265ef8195583d96abefe14890db505fae654a2438a0f53859bb674d69"], 0x125) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x4000) socket$netlink(0x10, 0x3, 0xb) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @private, @initdev}, &(0x7f0000000180)=0xc) [ 142.307111] device lo left promiscuous mode [ 142.332799] device lo entered promiscuous mode [ 142.374966] device lo entered promiscuous mode 19:20:33 executing program 5: r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000680)) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000006c0)=0x5, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x10000000) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r2, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) syz_io_uring_setup(0x4051, &(0x7f00000005c0)={0x0, 0x921f, 0x10, 0x2, 0x2b0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000640)) syz_io_uring_submit(0x0, r1, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0xffff) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000500000008dd170230d161483ebf620444cd8999f471744f6373d2fb2e90b88d8df29bfafd7103dbe966e3775075003e0814526cde0479617255cec907ffc603dbe4a1fff2f6ff34c7c7f8a621f21e952bb7a39f496b091cd2d145c836d95351b02914b648a262ac7643868aa73d41f2e8635d4adb5ef24f01bab428570471c510d83275b6c77de422c70e560553d6749c70e6dd26f2b295f96bb8d042dbf9696a43debb0447639902d8a76e2de265ef8195583d96abefe14890db505fae654a2438a0f53859bb674d69"], 0x125) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x4000) socket$netlink(0x10, 0x3, 0xb) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @private, @initdev}, &(0x7f0000000180)=0xc) 19:20:33 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x200000000000000, 0x0, &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='personality\x00') r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{0x0, 0x24}], 0x1}, 0x0) write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYRES16], 0x120) readv(r1, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffffffffffffa) sendmmsg(r0, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, &(0x7f0000005800)=ANY=[], 0x240}}], 0x1, 0x0) 19:20:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000240)=ANY=[@ANYBLOB="014e00000028bcbcc4f9233e735d9752a8628468000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) io_uring_setup(0x5766, &(0x7f0000000040)) fallocate(0xffffffffffffffff, 0x4, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="fa1921df803613008b6abca5f40a7f3e8c2a2d648201809b9821a3b8f385b5b7a8bd542b9e1c45f8e3e56b41bb0ee9d59ecd7332c2d2c464c474cc3a6c8d822905a68c5ca4999044e6e056f0dc4ad5c23c1f", 0x52}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e13be9e0100af994fa2f6ae43a22eaf40415d54db9b61b57182d09d0b1e5bb2cc73eccd5c0", 0x36}, {0x0}], 0x3, 0x8001, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x1d5080, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x100000) 19:20:33 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev, r3}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local, r3}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FITHAW(r0, 0xc0045878) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'macsec0\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94e91b855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 19:20:33 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000240)=ANY=[@ANYBLOB="014e00000028bcbcc4f9233e735d9752a8628468000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) io_uring_setup(0x5766, &(0x7f0000000040)) fallocate(0xffffffffffffffff, 0x4, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="fa1921df803613008b6abca5f40a7f3e8c2a2d648201809b9821a3b8f385b5b7a8bd542b9e1c45f8e3e56b41bb0ee9d59ecd7332c2d2c464c474cc3a6c8d822905a68c5ca4999044e6e056f0dc4ad5c23c1f", 0x52}, {&(0x7f0000000000)="dbf225f5a4568675d4b9d93506777ce8e7e13be9e0100af994fa2f6ae43a22eaf40415d54db9b61b57182d09d0b1e5bb2cc73eccd5c0", 0x36}, {0x0}], 0x3, 0x8001, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x1d5080, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x100000) 19:20:33 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev, r3}, 0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@private=0xa010102, @local, r3}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FITHAW(r0, 0xc0045878) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'macsec0\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94e91b855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 19:20:33 executing program 4: r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000680)) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000006c0)=0x5, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x10000000) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r2, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) syz_io_uring_setup(0x4051, &(0x7f00000005c0)={0x0, 0x921f, 0x10, 0x2, 0x2b0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000640)) syz_io_uring_submit(0x0, r1, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0xffff) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000500000008dd170230d161483ebf620444cd8999f471744f6373d2fb2e90b88d8df29bfafd7103dbe966e3775075003e0814526cde0479617255cec907ffc603dbe4a1fff2f6ff34c7c7f8a621f21e952bb7a39f496b091cd2d145c836d95351b02914b648a262ac7643868aa73d41f2e8635d4adb5ef24f01bab428570471c510d83275b6c77de422c70e560553d6749c70e6dd26f2b295f96bb8d042dbf9696a43debb0447639902d8a76e2de265ef8195583d96abefe14890db505fae654a2438a0f53859bb674d69"], 0x125) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x4000) socket$netlink(0x10, 0x3, 0xb) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @private, @initdev}, &(0x7f0000000180)=0xc) [ 142.585499] device lo left promiscuous mode [ 142.598368] loop1: detected capacity change from 0 to 264192 [ 142.613186] device lo left promiscuous mode [ 142.634936] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.648952] device lo entered promiscuous mode 19:20:33 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x0, 0x0) [ 142.668496] device lo entered promiscuous mode 19:20:33 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) 19:20:33 executing program 5: r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000680)) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000006c0)=0x5, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x10000000) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r2, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) syz_io_uring_setup(0x4051, &(0x7f00000005c0)={0x0, 0x921f, 0x10, 0x2, 0x2b0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000640)) syz_io_uring_submit(0x0, r1, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0xffff) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000500000008dd170230d161483ebf620444cd8999f471744f6373d2fb2e90b88d8df29bfafd7103dbe966e3775075003e0814526cde0479617255cec907ffc603dbe4a1fff2f6ff34c7c7f8a621f21e952bb7a39f496b091cd2d145c836d95351b02914b648a262ac7643868aa73d41f2e8635d4adb5ef24f01bab428570471c510d83275b6c77de422c70e560553d6749c70e6dd26f2b295f96bb8d042dbf9696a43debb0447639902d8a76e2de265ef8195583d96abefe14890db505fae654a2438a0f53859bb674d69"], 0x125) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) write(r3, &(0x7f0000000200)='E', 0x4000) socket$netlink(0x10, 0x3, 0xb) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @private, @initdev}, &(0x7f0000000180)=0xc) 19:20:33 executing program 1: r0 = syz_io_uring_setup(0xed6, &(0x7f0000000100), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000000), 0x0) 19:20:33 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmmsg(r0, &(0x7f0000001240)=[{{&(0x7f0000000000)=@ll={0x11, 0x8864, r2}, 0x80, 0x0}}], 0x1, 0x0) 19:20:33 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) 19:20:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) sendfile(r3, r3, 0x0, 0x100900) 19:20:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000500), 0x4) VM DIAGNOSIS: 19:20:23 Registers: info registers vcpu 0 RAX=0000000080010001 RBX=00277589f80db16c RCX=ffffffff81375b4a RDX=ffff88801826d040 RSI=0000000000000000 RDI=0000000000000007 RBP=ffff88806ce09da0 RSP=ffff88806ce09cd8 R8 =0000000000000007 R9 =0000000000000000 R10=00277589f80db16c R11=0000000000000001 R12=00000000005b99af R13=003b9aca00000000 R14=ffffffff85295ae0 R15=0000000000000000 RIP=ffffffff81461747 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4b4f9971f0 CR3=000000000fa00000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 6f732e616d7a6c62 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00352e6f732e616d 7a6c62696c2f756e YMM03=0000000000000000 0000000000000000 672d78756e696c2d 34365f3638782f62 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b1e41 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff88803cf67698 R8 =0000000000000001 R9 =000000000000000a R10=000000000000005b R11=0000000000000001 R12=000000000000005b R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b1e30 RIP=ffffffff822b1e99 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f4cc1710700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0fba922260 CR3=000000001d98c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f4cc42817c0 00007f4cc42817c8 YMM02=0000000000000000 0000000000000000 00007f4cc42817e0 00007f4cc42817c0 YMM03=0000000000000000 0000000000000000 00007f4cc42817c8 00007f4cc42817c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000