Warning: Permanently added '[localhost]:24497' (ECDSA) to the list of known hosts. 2022/09/12 19:24:31 fuzzer started 2022/09/12 19:24:32 dialing manager at localhost:38027 syzkaller login: [ 44.621983] cgroup: Unknown subsys name 'net' [ 44.821638] cgroup: Unknown subsys name 'rlimit' 2022/09/12 19:24:46 syscalls: 2215 2022/09/12 19:24:46 code coverage: enabled 2022/09/12 19:24:46 comparison tracing: enabled 2022/09/12 19:24:46 extra coverage: enabled 2022/09/12 19:24:46 setuid sandbox: enabled 2022/09/12 19:24:46 namespace sandbox: enabled 2022/09/12 19:24:46 Android sandbox: enabled 2022/09/12 19:24:46 fault injection: enabled 2022/09/12 19:24:46 leak checking: enabled 2022/09/12 19:24:46 net packet injection: enabled 2022/09/12 19:24:46 net device setup: enabled 2022/09/12 19:24:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/12 19:24:46 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/12 19:24:46 USB emulation: enabled 2022/09/12 19:24:46 hci packet injection: enabled 2022/09/12 19:24:46 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220912) 2022/09/12 19:24:46 802.15.4 emulation: enabled 2022/09/12 19:24:46 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/12 19:24:46 fetching corpus: 50, signal 26294/29924 (executing program) 2022/09/12 19:24:46 fetching corpus: 100, signal 40460/45581 (executing program) 2022/09/12 19:24:47 fetching corpus: 150, signal 49650/56221 (executing program) 2022/09/12 19:24:47 fetching corpus: 200, signal 58130/66064 (executing program) 2022/09/12 19:24:47 fetching corpus: 250, signal 68833/77930 (executing program) 2022/09/12 19:24:47 fetching corpus: 300, signal 72992/83418 (executing program) 2022/09/12 19:24:47 fetching corpus: 350, signal 79759/91298 (executing program) 2022/09/12 19:24:47 fetching corpus: 400, signal 84950/97605 (executing program) 2022/09/12 19:24:47 fetching corpus: 450, signal 90808/104529 (executing program) 2022/09/12 19:24:48 fetching corpus: 500, signal 95271/110040 (executing program) 2022/09/12 19:24:48 fetching corpus: 550, signal 99925/115669 (executing program) 2022/09/12 19:24:48 fetching corpus: 600, signal 104160/120866 (executing program) 2022/09/12 19:24:48 fetching corpus: 650, signal 106795/124540 (executing program) 2022/09/12 19:24:48 fetching corpus: 700, signal 109605/128321 (executing program) 2022/09/12 19:24:48 fetching corpus: 750, signal 113084/132643 (executing program) 2022/09/12 19:24:48 fetching corpus: 800, signal 115945/136342 (executing program) 2022/09/12 19:24:48 fetching corpus: 850, signal 118177/139519 (executing program) 2022/09/12 19:24:49 fetching corpus: 900, signal 121034/143159 (executing program) 2022/09/12 19:24:49 fetching corpus: 950, signal 123765/146656 (executing program) 2022/09/12 19:24:49 fetching corpus: 1000, signal 125131/148974 (executing program) 2022/09/12 19:24:49 fetching corpus: 1050, signal 127329/151940 (executing program) 2022/09/12 19:24:49 fetching corpus: 1100, signal 129890/155281 (executing program) 2022/09/12 19:24:49 fetching corpus: 1150, signal 132827/158810 (executing program) 2022/09/12 19:24:49 fetching corpus: 1200, signal 134684/161407 (executing program) 2022/09/12 19:24:49 fetching corpus: 1250, signal 137242/164599 (executing program) 2022/09/12 19:24:50 fetching corpus: 1300, signal 140455/168242 (executing program) 2022/09/12 19:24:50 fetching corpus: 1350, signal 142146/170625 (executing program) 2022/09/12 19:24:50 fetching corpus: 1400, signal 144726/173725 (executing program) 2022/09/12 19:24:50 fetching corpus: 1450, signal 146696/176295 (executing program) 2022/09/12 19:24:50 fetching corpus: 1500, signal 148112/178336 (executing program) 2022/09/12 19:24:50 fetching corpus: 1550, signal 150257/181001 (executing program) 2022/09/12 19:24:51 fetching corpus: 1600, signal 151273/182764 (executing program) 2022/09/12 19:24:51 fetching corpus: 1650, signal 152389/184570 (executing program) 2022/09/12 19:24:51 fetching corpus: 1700, signal 154121/186815 (executing program) 2022/09/12 19:24:51 fetching corpus: 1750, signal 155291/188608 (executing program) 2022/09/12 19:24:51 fetching corpus: 1800, signal 157453/191198 (executing program) 2022/09/12 19:24:51 fetching corpus: 1850, signal 158904/193215 (executing program) 2022/09/12 19:24:51 fetching corpus: 1900, signal 159892/194835 (executing program) 2022/09/12 19:24:51 fetching corpus: 1950, signal 161695/197104 (executing program) 2022/09/12 19:24:52 fetching corpus: 2000, signal 162834/198805 (executing program) 2022/09/12 19:24:52 fetching corpus: 2050, signal 163983/200474 (executing program) 2022/09/12 19:24:52 fetching corpus: 2100, signal 165576/202479 (executing program) 2022/09/12 19:24:52 fetching corpus: 2150, signal 167220/204486 (executing program) 2022/09/12 19:24:52 fetching corpus: 2200, signal 168755/206403 (executing program) 2022/09/12 19:24:52 fetching corpus: 2250, signal 170154/208159 (executing program) 2022/09/12 19:24:52 fetching corpus: 2300, signal 172041/210208 (executing program) 2022/09/12 19:24:53 fetching corpus: 2350, signal 173301/211873 (executing program) 2022/09/12 19:24:53 fetching corpus: 2400, signal 175010/213801 (executing program) 2022/09/12 19:24:53 fetching corpus: 2450, signal 176035/215255 (executing program) 2022/09/12 19:24:53 fetching corpus: 2500, signal 177852/217251 (executing program) 2022/09/12 19:24:53 fetching corpus: 2550, signal 179499/219083 (executing program) 2022/09/12 19:24:53 fetching corpus: 2600, signal 180576/220572 (executing program) 2022/09/12 19:24:53 fetching corpus: 2650, signal 181876/222171 (executing program) 2022/09/12 19:24:54 fetching corpus: 2700, signal 183099/223711 (executing program) 2022/09/12 19:24:54 fetching corpus: 2750, signal 184059/225019 (executing program) 2022/09/12 19:24:54 fetching corpus: 2800, signal 185747/226806 (executing program) 2022/09/12 19:24:54 fetching corpus: 2850, signal 186882/228279 (executing program) 2022/09/12 19:24:54 fetching corpus: 2900, signal 187705/229458 (executing program) 2022/09/12 19:24:54 fetching corpus: 2950, signal 188657/230716 (executing program) 2022/09/12 19:24:54 fetching corpus: 3000, signal 189267/231791 (executing program) 2022/09/12 19:24:54 fetching corpus: 3050, signal 190553/233231 (executing program) 2022/09/12 19:24:55 fetching corpus: 3100, signal 191831/234682 (executing program) 2022/09/12 19:24:55 fetching corpus: 3150, signal 193076/236050 (executing program) 2022/09/12 19:24:55 fetching corpus: 3200, signal 194482/237562 (executing program) 2022/09/12 19:24:55 fetching corpus: 3250, signal 195712/238900 (executing program) 2022/09/12 19:24:55 fetching corpus: 3300, signal 196822/240161 (executing program) 2022/09/12 19:24:55 fetching corpus: 3350, signal 197714/241258 (executing program) 2022/09/12 19:24:55 fetching corpus: 3400, signal 198575/242364 (executing program) 2022/09/12 19:24:56 fetching corpus: 3450, signal 199552/243599 (executing program) 2022/09/12 19:24:56 fetching corpus: 3500, signal 200222/244591 (executing program) 2022/09/12 19:24:56 fetching corpus: 3550, signal 200766/245476 (executing program) 2022/09/12 19:24:56 fetching corpus: 3600, signal 201907/246689 (executing program) 2022/09/12 19:24:56 fetching corpus: 3650, signal 202545/247631 (executing program) 2022/09/12 19:24:56 fetching corpus: 3700, signal 203114/248502 (executing program) 2022/09/12 19:24:56 fetching corpus: 3750, signal 204425/249731 (executing program) 2022/09/12 19:24:56 fetching corpus: 3800, signal 205080/250627 (executing program) 2022/09/12 19:24:56 fetching corpus: 3850, signal 205740/251513 (executing program) 2022/09/12 19:24:57 fetching corpus: 3900, signal 206566/252420 (executing program) 2022/09/12 19:24:57 fetching corpus: 3950, signal 207429/253392 (executing program) 2022/09/12 19:24:57 fetching corpus: 4000, signal 208027/254222 (executing program) 2022/09/12 19:24:57 fetching corpus: 4050, signal 208563/255025 (executing program) 2022/09/12 19:24:57 fetching corpus: 4100, signal 209330/255953 (executing program) 2022/09/12 19:24:57 fetching corpus: 4150, signal 210124/256877 (executing program) 2022/09/12 19:24:57 fetching corpus: 4200, signal 210955/257786 (executing program) 2022/09/12 19:24:57 fetching corpus: 4250, signal 211814/258676 (executing program) 2022/09/12 19:24:58 fetching corpus: 4300, signal 213207/259805 (executing program) 2022/09/12 19:24:58 fetching corpus: 4350, signal 213885/260625 (executing program) 2022/09/12 19:24:58 fetching corpus: 4400, signal 214503/261396 (executing program) 2022/09/12 19:24:58 fetching corpus: 4450, signal 215331/262299 (executing program) 2022/09/12 19:24:58 fetching corpus: 4500, signal 216139/263120 (executing program) 2022/09/12 19:24:58 fetching corpus: 4550, signal 217256/264002 (executing program) 2022/09/12 19:24:59 fetching corpus: 4600, signal 218154/264807 (executing program) 2022/09/12 19:24:59 fetching corpus: 4650, signal 219472/265767 (executing program) 2022/09/12 19:24:59 fetching corpus: 4700, signal 220920/266764 (executing program) 2022/09/12 19:24:59 fetching corpus: 4750, signal 221770/267559 (executing program) 2022/09/12 19:24:59 fetching corpus: 4800, signal 222546/268387 (executing program) 2022/09/12 19:24:59 fetching corpus: 4850, signal 223799/269332 (executing program) 2022/09/12 19:24:59 fetching corpus: 4900, signal 224399/270011 (executing program) 2022/09/12 19:25:00 fetching corpus: 4950, signal 224996/270647 (executing program) 2022/09/12 19:25:00 fetching corpus: 5000, signal 225463/271229 (executing program) 2022/09/12 19:25:00 fetching corpus: 5050, signal 225938/271779 (executing program) 2022/09/12 19:25:00 fetching corpus: 5100, signal 226692/272436 (executing program) 2022/09/12 19:25:00 fetching corpus: 5150, signal 228145/273329 (executing program) 2022/09/12 19:25:00 fetching corpus: 5200, signal 228832/273982 (executing program) 2022/09/12 19:25:00 fetching corpus: 5250, signal 229318/274536 (executing program) 2022/09/12 19:25:01 fetching corpus: 5300, signal 229858/275127 (executing program) 2022/09/12 19:25:01 fetching corpus: 5350, signal 230829/275792 (executing program) 2022/09/12 19:25:01 fetching corpus: 5400, signal 231436/276354 (executing program) 2022/09/12 19:25:01 fetching corpus: 5450, signal 232543/277006 (executing program) 2022/09/12 19:25:01 fetching corpus: 5500, signal 232966/277514 (executing program) 2022/09/12 19:25:01 fetching corpus: 5550, signal 233539/278018 (executing program) 2022/09/12 19:25:02 fetching corpus: 5600, signal 234191/278580 (executing program) 2022/09/12 19:25:02 fetching corpus: 5650, signal 234835/279101 (executing program) 2022/09/12 19:25:02 fetching corpus: 5700, signal 236084/279882 (executing program) 2022/09/12 19:25:02 fetching corpus: 5750, signal 236718/280411 (executing program) 2022/09/12 19:25:02 fetching corpus: 5800, signal 237203/280898 (executing program) 2022/09/12 19:25:02 fetching corpus: 5850, signal 237715/281392 (executing program) 2022/09/12 19:25:02 fetching corpus: 5900, signal 238424/281916 (executing program) 2022/09/12 19:25:02 fetching corpus: 5950, signal 238874/282367 (executing program) 2022/09/12 19:25:03 fetching corpus: 6000, signal 239699/282819 (executing program) 2022/09/12 19:25:03 fetching corpus: 6050, signal 240108/283294 (executing program) 2022/09/12 19:25:03 fetching corpus: 6100, signal 240370/283705 (executing program) 2022/09/12 19:25:03 fetching corpus: 6150, signal 241019/284119 (executing program) 2022/09/12 19:25:03 fetching corpus: 6200, signal 241648/284542 (executing program) 2022/09/12 19:25:03 fetching corpus: 6250, signal 242497/284982 (executing program) 2022/09/12 19:25:03 fetching corpus: 6300, signal 243127/285419 (executing program) 2022/09/12 19:25:04 fetching corpus: 6350, signal 244105/285903 (executing program) 2022/09/12 19:25:04 fetching corpus: 6400, signal 244631/286331 (executing program) 2022/09/12 19:25:04 fetching corpus: 6450, signal 245193/286704 (executing program) 2022/09/12 19:25:04 fetching corpus: 6500, signal 245928/287091 (executing program) 2022/09/12 19:25:04 fetching corpus: 6550, signal 246419/287431 (executing program) 2022/09/12 19:25:04 fetching corpus: 6600, signal 247032/287785 (executing program) 2022/09/12 19:25:04 fetching corpus: 6650, signal 247782/288125 (executing program) 2022/09/12 19:25:05 fetching corpus: 6700, signal 248480/288480 (executing program) 2022/09/12 19:25:05 fetching corpus: 6750, signal 249018/288814 (executing program) 2022/09/12 19:25:05 fetching corpus: 6800, signal 249521/289146 (executing program) 2022/09/12 19:25:05 fetching corpus: 6850, signal 249863/289475 (executing program) 2022/09/12 19:25:05 fetching corpus: 6900, signal 250368/289764 (executing program) 2022/09/12 19:25:05 fetching corpus: 6950, signal 250798/290079 (executing program) 2022/09/12 19:25:05 fetching corpus: 7000, signal 251252/290423 (executing program) 2022/09/12 19:25:05 fetching corpus: 7050, signal 251704/290663 (executing program) 2022/09/12 19:25:06 fetching corpus: 7100, signal 252211/290686 (executing program) 2022/09/12 19:25:06 fetching corpus: 7150, signal 252592/290689 (executing program) 2022/09/12 19:25:06 fetching corpus: 7200, signal 253327/290700 (executing program) 2022/09/12 19:25:06 fetching corpus: 7250, signal 254076/290709 (executing program) 2022/09/12 19:25:06 fetching corpus: 7300, signal 254449/290713 (executing program) 2022/09/12 19:25:06 fetching corpus: 7350, signal 254875/290760 (executing program) 2022/09/12 19:25:07 fetching corpus: 7400, signal 255318/290767 (executing program) 2022/09/12 19:25:07 fetching corpus: 7450, signal 256078/290868 (executing program) 2022/09/12 19:25:07 fetching corpus: 7500, signal 256531/290873 (executing program) 2022/09/12 19:25:07 fetching corpus: 7550, signal 257142/290889 (executing program) 2022/09/12 19:25:07 fetching corpus: 7600, signal 257486/290891 (executing program) 2022/09/12 19:25:07 fetching corpus: 7650, signal 257797/290891 (executing program) 2022/09/12 19:25:08 fetching corpus: 7700, signal 258501/290918 (executing program) 2022/09/12 19:25:08 fetching corpus: 7750, signal 258833/290929 (executing program) 2022/09/12 19:25:08 fetching corpus: 7800, signal 259121/290974 (executing program) 2022/09/12 19:25:08 fetching corpus: 7850, signal 259607/290975 (executing program) 2022/09/12 19:25:08 fetching corpus: 7900, signal 259938/290997 (executing program) 2022/09/12 19:25:08 fetching corpus: 7950, signal 260450/291006 (executing program) 2022/09/12 19:25:08 fetching corpus: 8000, signal 260874/291019 (executing program) 2022/09/12 19:25:08 fetching corpus: 8050, signal 261250/291052 (executing program) 2022/09/12 19:25:08 fetching corpus: 8100, signal 261684/291160 (executing program) 2022/09/12 19:25:09 fetching corpus: 8150, signal 262106/291238 (executing program) 2022/09/12 19:25:09 fetching corpus: 8200, signal 262457/291240 (executing program) 2022/09/12 19:25:09 fetching corpus: 8250, signal 263021/291248 (executing program) 2022/09/12 19:25:09 fetching corpus: 8300, signal 263588/291257 (executing program) 2022/09/12 19:25:09 fetching corpus: 8350, signal 264015/291268 (executing program) 2022/09/12 19:25:09 fetching corpus: 8400, signal 264442/291302 (executing program) 2022/09/12 19:25:09 fetching corpus: 8450, signal 264922/291304 (executing program) 2022/09/12 19:25:09 fetching corpus: 8500, signal 265287/291331 (executing program) 2022/09/12 19:25:10 fetching corpus: 8550, signal 265669/291349 (executing program) 2022/09/12 19:25:10 fetching corpus: 8600, signal 266050/291369 (executing program) 2022/09/12 19:25:10 fetching corpus: 8650, signal 266518/291380 (executing program) 2022/09/12 19:25:10 fetching corpus: 8700, signal 267017/291396 (executing program) 2022/09/12 19:25:10 fetching corpus: 8750, signal 267323/291401 (executing program) 2022/09/12 19:25:10 fetching corpus: 8800, signal 267744/291414 (executing program) 2022/09/12 19:25:10 fetching corpus: 8850, signal 268300/291430 (executing program) 2022/09/12 19:25:11 fetching corpus: 8900, signal 268649/291431 (executing program) 2022/09/12 19:25:11 fetching corpus: 8950, signal 269126/291440 (executing program) 2022/09/12 19:25:11 fetching corpus: 9000, signal 269488/291507 (executing program) 2022/09/12 19:25:11 fetching corpus: 9050, signal 269898/291518 (executing program) 2022/09/12 19:25:11 fetching corpus: 9100, signal 270384/291526 (executing program) 2022/09/12 19:25:11 fetching corpus: 9150, signal 270764/291528 (executing program) 2022/09/12 19:25:11 fetching corpus: 9200, signal 271129/291535 (executing program) 2022/09/12 19:25:11 fetching corpus: 9250, signal 271416/291543 (executing program) 2022/09/12 19:25:12 fetching corpus: 9300, signal 271902/291557 (executing program) 2022/09/12 19:25:12 fetching corpus: 9350, signal 272265/291571 (executing program) 2022/09/12 19:25:12 fetching corpus: 9400, signal 272736/291580 (executing program) 2022/09/12 19:25:12 fetching corpus: 9450, signal 273191/291627 (executing program) 2022/09/12 19:25:12 fetching corpus: 9500, signal 273633/291634 (executing program) 2022/09/12 19:25:13 fetching corpus: 9550, signal 274010/291635 (executing program) 2022/09/12 19:25:13 fetching corpus: 9600, signal 274289/291642 (executing program) 2022/09/12 19:25:13 fetching corpus: 9650, signal 274793/291653 (executing program) 2022/09/12 19:25:13 fetching corpus: 9700, signal 275041/291684 (executing program) 2022/09/12 19:25:13 fetching corpus: 9750, signal 275427/291712 (executing program) 2022/09/12 19:25:13 fetching corpus: 9800, signal 275760/291723 (executing program) 2022/09/12 19:25:13 fetching corpus: 9850, signal 276247/291732 (executing program) 2022/09/12 19:25:14 fetching corpus: 9900, signal 276665/291737 (executing program) 2022/09/12 19:25:14 fetching corpus: 9950, signal 277178/291739 (executing program) 2022/09/12 19:25:14 fetching corpus: 10000, signal 277433/291742 (executing program) 2022/09/12 19:25:14 fetching corpus: 10050, signal 277636/291746 (executing program) 2022/09/12 19:25:14 fetching corpus: 10100, signal 278030/291761 (executing program) 2022/09/12 19:25:14 fetching corpus: 10150, signal 278572/291761 (executing program) 2022/09/12 19:25:14 fetching corpus: 10200, signal 279358/291773 (executing program) 2022/09/12 19:25:14 fetching corpus: 10250, signal 279757/291776 (executing program) 2022/09/12 19:25:15 fetching corpus: 10300, signal 280240/291778 (executing program) 2022/09/12 19:25:15 fetching corpus: 10300, signal 280240/291778 (executing program) 2022/09/12 19:25:17 starting 8 fuzzer processes 19:25:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000540)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') utimes(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101342, 0x0) write$binfmt_aout(r0, &(0x7f0000000c40)=ANY=[], 0x820) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='\x00', 0x0, &(0x7f0000000240)='./file0\x00', 0x8, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_CONNECT={0x10, 0xca9e09d5bb4a44c, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) sendfile(r0, r1, 0x0, 0x7fffffff) dup(0xffffffffffffffff) 19:25:17 executing program 1: pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 19:25:17 executing program 2: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) 19:25:17 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x14481, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)) [ 89.775580] audit: type=1400 audit(1663010717.431:6): avc: denied { execmem } for pid=286 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 19:25:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@private}, 0x8, @in=@dev, 0x0, 0x4}}, 0xe8) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x408000, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1a}, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x50, r2, 0x3) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000180)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r3, &(0x7f0000000240)=[{&(0x7f0000000140)="cf", 0x1}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000340)={0x0, 0x1a}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) rename(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)='./file0\x00') 19:25:17 executing program 4: r0 = syz_io_uring_setup(0xfaf, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x15}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 19:25:17 executing program 6: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000002dc0)=0x3, 0x2) connect$bt_sco(r0, &(0x7f0000000140), 0x8) 19:25:17 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x8, &(0x7f0000000600)=[{&(0x7f0000000180)="19aa170f64d2c05856a93a201e68993ae7d7fdc29737e8d7fc2cabfe0b301acc78e6ee2a77947938996b23f372d121ff847768a6a1a1aaf0c214768e", 0x3c, 0xffffffffffffffff}, {&(0x7f0000000300)="7fdc21192b3ae5b6dbaf95bb38c4bda2f6e510ce0ada7dd66a748cf9045f70dcfd66885c76ac3a89dd59b010fbc3aae82694587ad64bd68007461c4a9a2afec0c15793c9bc6c3788cca2da486c715bb7b4a160230227c12488fd0bb38e45839cbfaae85e68d6acee1ba2c2479b29f40e383d816eb219ad43c174f8c043704eb13f230ec0aa3820d2f4c60a4ff0653cfeb3bdce37be0e281489b564e21682a6fe5fdbd7aac25a032d42d9a0fb4ac7c217a84ef844a9ae414a4ccc2588ffc1635943c7af0b9bb6a2ae3e9a4acf7c6d81a9783a699f91695e20dcb109b4a052e26d9d5972728eeabc1cab5b3bde38", 0xed, 0x2}, {&(0x7f00000001c0)="59e7dbf705b62900bc558cb3636fc86735752cdfd24ac1c3c8d17914ec86", 0x1e, 0xfff}, {&(0x7f0000000200)="4b8094ceac712fb90f7832b5a14b81595d178b7210970cce17d968171e2019", 0x1f, 0x3f}, {&(0x7f0000000400), 0x0, 0x401}, {&(0x7f0000000500)="267d86da6ee0e1dee6acde8c29c499bf769db210237d5665e45907b63c2331c1d2664ed24405b6eaa511446782fc5c89ef4119a1858b660192945c82d93090739ce374d0a05da7a3265a39178c588ce12f0feeebf0a448914700cad6850cd12e0f559fcb794e35563add3ec571780f74bd44da3047e483ddd90ec4d6", 0x7c, 0x5}, {&(0x7f0000000580)="82b7715aad21f98d2f3b37817f220e12eb18fe6c4d96be2b8b316dfadcdff124695cb9f165340527845f89f71447c8bf88156a46ba2bc5da25514adca6f45d20a3f45330541ad121d047cae0", 0x4c, 0x800000000000ecb}, {&(0x7f0000000240)="624657a08fffdca5fad87a18ffe23fe2178c0f5966ace6f89776c083527aaadc32e1cb6cb090e09385a601032ab09446107ea01e068e", 0x36, 0x5}], 0x2000000, &(0x7f00000006c0)={[{@dots}, {@dots}, {@dots}, {@dots}]}) [ 91.026259] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.029471] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.032473] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.036475] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.045431] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.046983] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.052524] Bluetooth: hci0: HCI_REQ-0x0c1a [ 91.087637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.099747] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.107997] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.109551] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.115364] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.116914] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.118453] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.120468] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 91.124646] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.126349] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.128286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.129327] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 91.130805] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 91.132436] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.134188] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.135214] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.136259] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 91.136808] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.137235] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 91.140406] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.141639] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 91.142639] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.144275] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 91.145333] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.148275] Bluetooth: hci2: HCI_REQ-0x0c1a [ 91.149421] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 91.152231] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.157282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.162349] Bluetooth: hci4: HCI_REQ-0x0c1a [ 91.173107] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.175565] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.177509] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 91.180129] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 91.181553] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 91.183269] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.184864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.187544] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 91.189573] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 91.197219] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.198553] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 91.200131] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 91.201263] Bluetooth: hci1: HCI_REQ-0x0c1a [ 91.203178] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 91.206835] Bluetooth: hci3: HCI_REQ-0x0c1a [ 91.208427] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 91.210618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.218032] Bluetooth: hci7: HCI_REQ-0x0c1a [ 91.223983] Bluetooth: hci5: HCI_REQ-0x0c1a [ 91.224991] Bluetooth: hci6: HCI_REQ-0x0c1a [ 93.112303] Bluetooth: hci0: command 0x0409 tx timeout [ 93.175755] Bluetooth: hci2: command 0x0409 tx timeout [ 93.175759] Bluetooth: hci4: command 0x0409 tx timeout [ 93.239836] Bluetooth: hci6: command 0x0409 tx timeout [ 93.240484] Bluetooth: hci1: command 0x0409 tx timeout [ 93.240990] Bluetooth: hci3: command 0x0409 tx timeout [ 93.241416] Bluetooth: hci5: command 0x0409 tx timeout [ 93.303795] Bluetooth: hci7: command 0x0409 tx timeout [ 95.159766] Bluetooth: hci0: command 0x041b tx timeout [ 95.223844] Bluetooth: hci4: command 0x041b tx timeout [ 95.224364] Bluetooth: hci2: command 0x041b tx timeout [ 95.287849] Bluetooth: hci5: command 0x041b tx timeout [ 95.288391] Bluetooth: hci3: command 0x041b tx timeout [ 95.288890] Bluetooth: hci1: command 0x041b tx timeout [ 95.289320] Bluetooth: hci6: command 0x041b tx timeout [ 95.351763] Bluetooth: hci7: command 0x041b tx timeout [ 97.207802] Bluetooth: hci0: command 0x040f tx timeout [ 97.271884] Bluetooth: hci2: command 0x040f tx timeout [ 97.272788] Bluetooth: hci4: command 0x040f tx timeout [ 97.335800] Bluetooth: hci6: command 0x040f tx timeout [ 97.336622] Bluetooth: hci1: command 0x040f tx timeout [ 97.337483] Bluetooth: hci3: command 0x040f tx timeout [ 97.338673] Bluetooth: hci5: command 0x040f tx timeout [ 97.399852] Bluetooth: hci7: command 0x040f tx timeout [ 99.255819] Bluetooth: hci0: command 0x0419 tx timeout [ 99.319880] Bluetooth: hci4: command 0x0419 tx timeout [ 99.321059] Bluetooth: hci2: command 0x0419 tx timeout [ 99.383940] Bluetooth: hci5: command 0x0419 tx timeout [ 99.385012] Bluetooth: hci3: command 0x0419 tx timeout [ 99.386049] Bluetooth: hci1: command 0x0419 tx timeout [ 99.386971] Bluetooth: hci6: command 0x0419 tx timeout [ 99.447789] Bluetooth: hci7: command 0x0419 tx timeout [ 140.732882] audit: type=1400 audit(1663010768.388:7): avc: denied { relabelfrom } for pid=3696 comm="syz-executor.1" name="" dev="pipefs" ino=13638 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 19:26:08 executing program 1: pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 19:26:08 executing program 1: pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 19:26:08 executing program 1: pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 19:26:08 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) 19:26:08 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000300)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xee\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba', 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x5f}, 0x0, 0x0, 0x0, 0x0) 19:26:09 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) [ 141.497674] audit: type=1400 audit(1663010769.153:8): avc: denied { open } for pid=3756 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 141.501376] audit: type=1400 audit(1663010769.153:9): avc: denied { kernel } for pid=3756 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 141.515048] audit: type=1400 audit(1663010769.171:10): avc: denied { write } for pid=3756 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 19:26:09 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) 19:26:09 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) [ 142.962814] ------------[ cut here ]------------ [ 142.962840] [ 142.962844] ====================================================== [ 142.962848] WARNING: possible circular locking dependency detected [ 142.962852] 6.0.0-rc5-next-20220912 #1 Not tainted [ 142.962858] ------------------------------------------------------ [ 142.962862] syz-executor.5/3842 is trying to acquire lock: [ 142.962869] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 142.962909] [ 142.962909] but task is already holding lock: [ 142.962911] ffff8880421fc420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 142.962940] [ 142.962940] which lock already depends on the new lock. [ 142.962940] [ 142.962943] [ 142.962943] the existing dependency chain (in reverse order) is: [ 142.962946] [ 142.962946] -> #3 (&ctx->lock){....}-{2:2}: [ 142.962960] _raw_spin_lock+0x2a/0x40 [ 142.962978] __perf_event_task_sched_out+0x53b/0x18d0 [ 142.962990] __schedule+0xedd/0x2470 [ 142.963000] schedule+0xda/0x1b0 [ 142.963009] futex_wait_queue+0xf5/0x1e0 [ 142.963021] futex_wait+0x28e/0x690 [ 142.963031] do_futex+0x2ff/0x380 [ 142.963040] __x64_sys_futex+0x1c6/0x4d0 [ 142.963050] do_syscall_64+0x3b/0x90 [ 142.963064] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 142.963081] [ 142.963081] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 142.963095] _raw_spin_lock_nested+0x30/0x40 [ 142.963110] raw_spin_rq_lock_nested+0x1e/0x30 [ 142.963123] task_fork_fair+0x63/0x4d0 [ 142.963140] sched_cgroup_fork+0x3d0/0x540 [ 142.963155] copy_process+0x3f9e/0x6df0 [ 142.963165] kernel_clone+0xe7/0x890 [ 142.963175] user_mode_thread+0xad/0xf0 [ 142.963185] rest_init+0x24/0x250 [ 142.963202] arch_call_rest_init+0xf/0x14 [ 142.963221] start_kernel+0x4c1/0x4e6 [ 142.963238] secondary_startup_64_no_verify+0xe0/0xeb [ 142.963253] [ 142.963253] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 142.963267] _raw_spin_lock_irqsave+0x39/0x60 [ 142.963281] try_to_wake_up+0xab/0x1920 [ 142.963295] up+0x75/0xb0 [ 142.963306] __up_console_sem+0x6e/0x80 [ 142.963323] console_unlock+0x46a/0x590 [ 142.963339] vprintk_emit+0x1bd/0x560 [ 142.963356] vprintk+0x84/0xa0 [ 142.963372] _printk+0xba/0xf1 [ 142.963390] kauditd_hold_skb.cold+0x3f/0x4e [ 142.963405] kauditd_send_queue+0x233/0x290 [ 142.963419] kauditd_thread+0x5da/0x9a0 [ 142.963433] kthread+0x2ed/0x3a0 [ 142.963448] ret_from_fork+0x22/0x30 [ 142.963461] [ 142.963461] -> #0 ((console_sem).lock){....}-{2:2}: [ 142.963475] __lock_acquire+0x2a02/0x5e70 [ 142.963491] lock_acquire+0x1a2/0x530 [ 142.963507] _raw_spin_lock_irqsave+0x39/0x60 [ 142.963522] down_trylock+0xe/0x70 [ 142.963535] __down_trylock_console_sem+0x3b/0xd0 [ 142.963551] vprintk_emit+0x16b/0x560 [ 142.963567] vprintk+0x84/0xa0 [ 142.963584] _printk+0xba/0xf1 [ 142.963600] report_bug.cold+0x72/0xab [ 142.963612] handle_bug+0x3c/0x70 [ 142.963625] exc_invalid_op+0x14/0x50 [ 142.963638] asm_exc_invalid_op+0x16/0x20 [ 142.963654] group_sched_out.part.0+0x2c7/0x460 [ 142.963665] ctx_sched_out+0x8f1/0xc10 [ 142.963674] __perf_event_task_sched_out+0x6d0/0x18d0 [ 142.963687] __schedule+0xedd/0x2470 [ 142.963696] preempt_schedule_common+0x45/0xc0 [ 142.963706] __cond_resched+0x17/0x30 [ 142.963716] __mutex_lock+0xa3/0x14d0 [ 142.963727] __do_sys_perf_event_open+0x1eec/0x32c0 [ 142.963739] do_syscall_64+0x3b/0x90 [ 142.963752] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 142.963769] [ 142.963769] other info that might help us debug this: [ 142.963769] [ 142.963772] Chain exists of: [ 142.963772] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 142.963772] [ 142.963787] Possible unsafe locking scenario: [ 142.963787] [ 142.963789] CPU0 CPU1 [ 142.963791] ---- ---- [ 142.963794] lock(&ctx->lock); [ 142.963800] lock(&rq->__lock); [ 142.963806] lock(&ctx->lock); [ 142.963812] lock((console_sem).lock); [ 142.963818] [ 142.963818] *** DEADLOCK *** [ 142.963818] [ 142.963820] 2 locks held by syz-executor.5/3842: [ 142.963827] #0: ffff88806cf37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 142.963852] #1: ffff8880421fc420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 142.963880] [ 142.963880] stack backtrace: [ 142.963882] CPU: 1 PID: 3842 Comm: syz-executor.5 Not tainted 6.0.0-rc5-next-20220912 #1 [ 142.963895] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 142.963904] Call Trace: [ 142.963907] [ 142.963912] dump_stack_lvl+0x8b/0xb3 [ 142.963926] check_noncircular+0x263/0x2e0 [ 142.963943] ? format_decode+0x26c/0xb50 [ 142.963958] ? print_circular_bug+0x450/0x450 [ 142.963976] ? enable_ptr_key_workfn+0x20/0x20 [ 142.963989] ? __lockdep_reset_lock+0x180/0x180 [ 142.964007] ? format_decode+0x26c/0xb50 [ 142.964022] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 142.964040] __lock_acquire+0x2a02/0x5e70 [ 142.964062] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 142.964085] lock_acquire+0x1a2/0x530 [ 142.964102] ? down_trylock+0xe/0x70 [ 142.964117] ? rcu_read_unlock+0x40/0x40 [ 142.964134] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 142.964156] ? vprintk+0x84/0xa0 [ 142.964174] _raw_spin_lock_irqsave+0x39/0x60 [ 142.964190] ? down_trylock+0xe/0x70 [ 142.964203] down_trylock+0xe/0x70 [ 142.964219] ? vprintk+0x84/0xa0 [ 142.964239] __down_trylock_console_sem+0x3b/0xd0 [ 142.964257] vprintk_emit+0x16b/0x560 [ 142.964274] ? lock_downgrade+0x6d0/0x6d0 [ 142.964293] vprintk+0x84/0xa0 [ 142.964311] _printk+0xba/0xf1 [ 142.964329] ? record_print_text.cold+0x16/0x16 [ 142.964349] ? hrtimer_try_to_cancel+0x163/0x2c0 [ 142.964363] ? lock_downgrade+0x6d0/0x6d0 [ 142.964381] ? report_bug.cold+0x66/0xab [ 142.964395] ? group_sched_out.part.0+0x2c7/0x460 [ 142.964406] report_bug.cold+0x72/0xab [ 142.964421] handle_bug+0x3c/0x70 [ 142.964435] exc_invalid_op+0x14/0x50 [ 142.964449] asm_exc_invalid_op+0x16/0x20 [ 142.964466] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 142.964479] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 142.964491] RSP: 0018:ffff888042d1f978 EFLAGS: 00010006 [ 142.964500] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 142.964508] RDX: ffff88801b931ac0 RSI: ffffffff81566027 RDI: 0000000000000005 [ 142.964516] RBP: ffff8880439e1158 R08: 0000000000000005 R09: 0000000000000001 [ 142.964523] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880421fc400 [ 142.964531] R13: ffff88806cf3d100 R14: ffffffff8547bfc0 R15: 0000000000000002 [ 142.964542] ? group_sched_out.part.0+0x2c7/0x460 [ 142.964555] ? group_sched_out.part.0+0x2c7/0x460 [ 142.964568] ctx_sched_out+0x8f1/0xc10 [ 142.964580] __perf_event_task_sched_out+0x6d0/0x18d0 [ 142.964596] ? lock_is_held_type+0xd7/0x130 [ 142.964614] ? __perf_cgroup_move+0x160/0x160 [ 142.964626] ? set_next_entity+0x304/0x550 [ 142.964644] ? update_curr+0x267/0x740 [ 142.964663] ? lock_is_held_type+0xd7/0x130 [ 142.964682] __schedule+0xedd/0x2470 [ 142.964694] ? io_schedule_timeout+0x150/0x150 [ 142.964705] ? lock_is_held_type+0xd7/0x130 [ 142.964723] ? lock_is_held_type+0xd7/0x130 [ 142.964741] ? __cond_resched+0x17/0x30 [ 142.964752] preempt_schedule_common+0x45/0xc0 [ 142.964764] __cond_resched+0x17/0x30 [ 142.964774] __mutex_lock+0xa3/0x14d0 [ 142.964787] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 142.964802] ? mutex_lock_io_nested+0x1310/0x1310 [ 142.964816] ? __up_read+0x192/0x730 [ 142.964831] ? up_write+0x480/0x480 [ 142.964846] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 142.964864] __do_sys_perf_event_open+0x1eec/0x32c0 [ 142.964881] ? perf_compat_ioctl+0x130/0x130 [ 142.964894] ? xfd_validate_state+0x59/0x180 [ 142.964918] ? syscall_enter_from_user_mode+0x1d/0x50 [ 142.964936] ? syscall_enter_from_user_mode+0x1d/0x50 [ 142.964956] do_syscall_64+0x3b/0x90 [ 142.964970] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 142.964987] RIP: 0033:0x7f9533d1ab19 [ 142.964996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 142.965007] RSP: 002b:00007f953126f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 142.965018] RAX: ffffffffffffffda RBX: 00007f9533e2e020 RCX: 00007f9533d1ab19 [ 142.965026] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 [ 142.965034] RBP: 00007f9533d74f6d R08: 0000000000000000 R09: 0000000000000000 [ 142.965041] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 142.965048] R13: 00007fff904d676f R14: 00007f953126f300 R15: 0000000000022000 [ 142.965061] [ 143.029523] WARNING: CPU: 1 PID: 3842 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 143.030236] Modules linked in: [ 143.030489] CPU: 1 PID: 3842 Comm: syz-executor.5 Not tainted 6.0.0-rc5-next-20220912 #1 [ 143.031053] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 143.031883] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 143.032297] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 143.033663] RSP: 0018:ffff888042d1f978 EFLAGS: 00010006 [ 143.034062] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 143.034610] RDX: ffff88801b931ac0 RSI: ffffffff81566027 RDI: 0000000000000005 [ 143.035135] RBP: ffff8880439e1158 R08: 0000000000000005 R09: 0000000000000001 [ 143.035667] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880421fc400 [ 143.036191] R13: ffff88806cf3d100 R14: ffffffff8547bfc0 R15: 0000000000000002 [ 143.036720] FS: 00007f953126f700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 143.037314] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 143.037778] CR2: 00007fb89eedf000 CR3: 000000001f9ba000 CR4: 0000000000350ee0 [ 143.038358] Call Trace: [ 143.038564] [ 143.038755] ctx_sched_out+0x8f1/0xc10 [ 143.039073] __perf_event_task_sched_out+0x6d0/0x18d0 [ 143.039460] ? lock_is_held_type+0xd7/0x130 [ 143.039795] ? __perf_cgroup_move+0x160/0x160 [ 143.040143] ? set_next_entity+0x304/0x550 [ 143.040506] ? update_curr+0x267/0x740 [ 143.040844] ? lock_is_held_type+0xd7/0x130 [ 143.041194] __schedule+0xedd/0x2470 [ 143.041488] ? io_schedule_timeout+0x150/0x150 [ 143.041844] ? lock_is_held_type+0xd7/0x130 [ 143.042179] ? lock_is_held_type+0xd7/0x130 [ 143.042503] ? __cond_resched+0x17/0x30 [ 143.042810] preempt_schedule_common+0x45/0xc0 [ 143.043166] __cond_resched+0x17/0x30 [ 143.043469] __mutex_lock+0xa3/0x14d0 [ 143.043759] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 143.044154] ? mutex_lock_io_nested+0x1310/0x1310 [ 143.044525] ? __up_read+0x192/0x730 [ 143.044810] ? up_write+0x480/0x480 [ 143.045095] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 143.045510] __do_sys_perf_event_open+0x1eec/0x32c0 [ 143.045910] ? perf_compat_ioctl+0x130/0x130 [ 143.046255] ? xfd_validate_state+0x59/0x180 [ 143.046645] ? syscall_enter_from_user_mode+0x1d/0x50 [ 143.047056] ? syscall_enter_from_user_mode+0x1d/0x50 [ 143.047468] do_syscall_64+0x3b/0x90 [ 143.047767] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 143.048192] RIP: 0033:0x7f9533d1ab19 [ 143.048489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 143.049810] RSP: 002b:00007f953126f188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 143.050414] RAX: ffffffffffffffda RBX: 00007f9533e2e020 RCX: 00007f9533d1ab19 [ 143.050980] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 [ 143.051525] RBP: 00007f9533d74f6d R08: 0000000000000000 R09: 0000000000000000 [ 143.052091] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 143.052658] R13: 00007fff904d676f R14: 00007f953126f300 R15: 0000000000022000 [ 143.053164] [ 143.053357] irq event stamp: 392 [ 143.053624] hardirqs last enabled at (391): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 143.054428] hardirqs last disabled at (392): [] __schedule+0x1225/0x2470 [ 143.055048] softirqs last enabled at (380): [] __irq_exit_rcu+0x11b/0x180 [ 143.055727] softirqs last disabled at (279): [] __irq_exit_rcu+0x11b/0x180 [ 143.056365] ---[ end trace 0000000000000000 ]--- [ 143.672375] loop0: detected capacity change from 0 to 256 [ 143.687764] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 143.789658] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 144.397220] 9pnet_fd: p9_fd_create_unix (3946): problem connecting socket: ./file0: -30 [ 144.401133] 9pnet_fd: p9_fd_create_unix (3947): problem connecting socket: ./file0: -30 [ 144.905718] hrtimer: interrupt took 16922 ns [ 145.068393] loop7: detected capacity change from 0 to 264192 [ 145.375740] FAT-fs (loop7): invalid media value (0x17) [ 145.382364] FAT-fs (loop7): Can't find a valid FAT filesystem [ 145.695980] loop7: detected capacity change from 0 to 264192 [ 145.698172] FAT-fs (loop7): invalid media value (0x17) [ 145.699057] FAT-fs (loop7): Can't find a valid FAT filesystem [ 145.730393] I/O error, dev loop7, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 19:26:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@private}, 0x8, @in=@dev, 0x0, 0x4}}, 0xe8) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x408000, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1a}, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x50, r2, 0x3) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000180)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r3, &(0x7f0000000240)=[{&(0x7f0000000140)="cf", 0x1}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000340)={0x0, 0x1a}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) rename(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)='./file0\x00') 19:26:13 executing program 2: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000008680)) 19:26:13 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x8, &(0x7f0000000600)=[{&(0x7f0000000180)="19aa170f64d2c05856a93a201e68993ae7d7fdc29737e8d7fc2cabfe0b301acc78e6ee2a77947938996b23f372d121ff847768a6a1a1aaf0c214768e", 0x3c, 0xffffffffffffffff}, {&(0x7f0000000300)="7fdc21192b3ae5b6dbaf95bb38c4bda2f6e510ce0ada7dd66a748cf9045f70dcfd66885c76ac3a89dd59b010fbc3aae82694587ad64bd68007461c4a9a2afec0c15793c9bc6c3788cca2da486c715bb7b4a160230227c12488fd0bb38e45839cbfaae85e68d6acee1ba2c2479b29f40e383d816eb219ad43c174f8c043704eb13f230ec0aa3820d2f4c60a4ff0653cfeb3bdce37be0e281489b564e21682a6fe5fdbd7aac25a032d42d9a0fb4ac7c217a84ef844a9ae414a4ccc2588ffc1635943c7af0b9bb6a2ae3e9a4acf7c6d81a9783a699f91695e20dcb109b4a052e26d9d5972728eeabc1cab5b3bde38", 0xed, 0x2}, {&(0x7f00000001c0)="59e7dbf705b62900bc558cb3636fc86735752cdfd24ac1c3c8d17914ec86", 0x1e, 0xfff}, {&(0x7f0000000200)="4b8094ceac712fb90f7832b5a14b81595d178b7210970cce17d968171e2019", 0x1f, 0x3f}, {&(0x7f0000000400), 0x0, 0x401}, {&(0x7f0000000500)="267d86da6ee0e1dee6acde8c29c499bf769db210237d5665e45907b63c2331c1d2664ed24405b6eaa511446782fc5c89ef4119a1858b660192945c82d93090739ce374d0a05da7a3265a39178c588ce12f0feeebf0a448914700cad6850cd12e0f559fcb794e35563add3ec571780f74bd44da3047e483ddd90ec4d6", 0x7c, 0x5}, {&(0x7f0000000580)="82b7715aad21f98d2f3b37817f220e12eb18fe6c4d96be2b8b316dfadcdff124695cb9f165340527845f89f71447c8bf88156a46ba2bc5da25514adca6f45d20a3f45330541ad121d047cae0", 0x4c, 0x800000000000ecb}, {&(0x7f0000000240)="624657a08fffdca5fad87a18ffe23fe2178c0f5966ace6f89776c083527aaadc32e1cb6cb090e09385a601032ab09446107ea01e068e", 0x36, 0x5}], 0x2000000, &(0x7f00000006c0)={[{@dots}, {@dots}, {@dots}, {@dots}]}) 19:26:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@private}, 0x8, @in=@dev, 0x0, 0x4}}, 0xe8) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x408000, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1a}, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x50, r2, 0x3) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000180)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r3, &(0x7f0000000240)=[{&(0x7f0000000140)="cf", 0x1}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000340)={0x0, 0x1a}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) rename(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)='./file0\x00') 19:26:13 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@private}, 0x8, @in=@dev, 0x0, 0x4}}, 0xe8) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x408000, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1a}, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x50, r2, 0x3) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000180)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r3, &(0x7f0000000240)=[{&(0x7f0000000140)="cf", 0x1}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000340)={0x0, 0x1a}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) rename(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)='./file0\x00') 19:26:13 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) 19:26:13 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d0001"], 0x1c}}, 0x0) 19:26:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@private}, 0x8, @in=@dev, 0x0, 0x4}}, 0xe8) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x408000, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1a}, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x50, r2, 0x3) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000180)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r3, &(0x7f0000000240)=[{&(0x7f0000000140)="cf", 0x1}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000340)={0x0, 0x1a}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) rename(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)='./file0\x00') [ 145.823467] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 19:26:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@private}, 0x8, @in=@dev, 0x0, 0x4}}, 0xe8) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x408000, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1a}, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x50, r2, 0x3) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000180)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r3, &(0x7f0000000240)=[{&(0x7f0000000140)="cf", 0x1}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000340)={0x0, 0x1a}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) rename(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)='./file0\x00') 19:26:13 executing program 4: r0 = syz_io_uring_setup(0x516b, &(0x7f0000000440), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000004c0), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000540)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)=[r0]}, 0x1) 19:26:13 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) 19:26:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0) 19:26:13 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x10000000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) syz_io_uring_setup(0x5d6f, &(0x7f0000000680)={0x0, 0xbcc0, 0x2, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000700), &(0x7f0000000740)) syz_io_uring_setup(0x4051, &(0x7f00000005c0)={0x0, 0x921f, 0x10, 0x2, 0x2b0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000640)) syz_io_uring_submit(0x0, r0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0xffff) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000500000008dd170230d161483ebf620444cd8999f471744f6373d2fb2e90b88d8df29bfafd7103dbe966e3775075003e0814526cde0479617255cec907ffc603dbe4a1fff2f6ff34c7c7f8a621f21e952bb7a39f496b091cd2d145c836d95351b02914b648a262ac7643868aa73d41f2e8635d4adb5ef24f01bab428570471c510d83275b6c77de422c70e560553d6749c70e6dd26f2b295f96bb8d042dbf9696a43debb0447639902d8a76e2de265ef8195583d96abefe14890db505fae654a2438a0f53859bb674d69"], 0x125) socket$netlink(0x10, 0x3, 0xb) syz_open_dev$tty1(0xc, 0x4, 0x1) 19:26:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0) [ 146.377952] loop7: detected capacity change from 0 to 264192 [ 146.429101] FAT-fs (loop7): invalid media value (0x17) [ 146.429880] FAT-fs (loop7): Can't find a valid FAT filesystem 19:26:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0) 19:26:14 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x8, &(0x7f0000000600)=[{&(0x7f0000000180)="19aa170f64d2c05856a93a201e68993ae7d7fdc29737e8d7fc2cabfe0b301acc78e6ee2a77947938996b23f372d121ff847768a6a1a1aaf0c214768e", 0x3c, 0xffffffffffffffff}, {&(0x7f0000000300)="7fdc21192b3ae5b6dbaf95bb38c4bda2f6e510ce0ada7dd66a748cf9045f70dcfd66885c76ac3a89dd59b010fbc3aae82694587ad64bd68007461c4a9a2afec0c15793c9bc6c3788cca2da486c715bb7b4a160230227c12488fd0bb38e45839cbfaae85e68d6acee1ba2c2479b29f40e383d816eb219ad43c174f8c043704eb13f230ec0aa3820d2f4c60a4ff0653cfeb3bdce37be0e281489b564e21682a6fe5fdbd7aac25a032d42d9a0fb4ac7c217a84ef844a9ae414a4ccc2588ffc1635943c7af0b9bb6a2ae3e9a4acf7c6d81a9783a699f91695e20dcb109b4a052e26d9d5972728eeabc1cab5b3bde38", 0xed, 0x2}, {&(0x7f00000001c0)="59e7dbf705b62900bc558cb3636fc86735752cdfd24ac1c3c8d17914ec86", 0x1e, 0xfff}, {&(0x7f0000000200)="4b8094ceac712fb90f7832b5a14b81595d178b7210970cce17d968171e2019", 0x1f, 0x3f}, {&(0x7f0000000400), 0x0, 0x401}, {&(0x7f0000000500)="267d86da6ee0e1dee6acde8c29c499bf769db210237d5665e45907b63c2331c1d2664ed24405b6eaa511446782fc5c89ef4119a1858b660192945c82d93090739ce374d0a05da7a3265a39178c588ce12f0feeebf0a448914700cad6850cd12e0f559fcb794e35563add3ec571780f74bd44da3047e483ddd90ec4d6", 0x7c, 0x5}, {&(0x7f0000000580)="82b7715aad21f98d2f3b37817f220e12eb18fe6c4d96be2b8b316dfadcdff124695cb9f165340527845f89f71447c8bf88156a46ba2bc5da25514adca6f45d20a3f45330541ad121d047cae0", 0x4c, 0x800000000000ecb}, {&(0x7f0000000240)="624657a08fffdca5fad87a18ffe23fe2178c0f5966ace6f89776c083527aaadc32e1cb6cb090e09385a601032ab09446107ea01e068e", 0x36, 0x5}], 0x2000000, &(0x7f00000006c0)={[{@dots}, {@dots}, {@dots}, {@dots}]}) [ 146.591619] loop7: detected capacity change from 0 to 264192 [ 146.635010] FAT-fs (loop7): invalid media value (0x17) [ 146.635678] FAT-fs (loop7): Can't find a valid FAT filesystem 19:26:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@private}, 0x8, @in=@dev, 0x0, 0x4}}, 0xe8) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x408000, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1a}, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x50, r2, 0x3) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000180)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r3, &(0x7f0000000240)=[{&(0x7f0000000140)="cf", 0x1}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000340)={0x0, 0x1a}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) rename(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)='./file0\x00') 19:26:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@private}, 0x8, @in=@dev, 0x0, 0x4}}, 0xe8) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x408000, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1a}, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x50, r2, 0x3) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000180)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r3, &(0x7f0000000240)=[{&(0x7f0000000140)="cf", 0x1}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000340)={0x0, 0x1a}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) rename(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)='./file0\x00') 19:26:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@private}, 0x8, @in=@dev, 0x0, 0x4}}, 0xe8) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x408000, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1a}, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x50, r2, 0x3) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000180)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r3, &(0x7f0000000240)=[{&(0x7f0000000140)="cf", 0x1}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000340)={0x0, 0x1a}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) rename(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)='./file0\x00') 19:26:14 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x10000000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) syz_io_uring_setup(0x5d6f, &(0x7f0000000680)={0x0, 0xbcc0, 0x2, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000700), &(0x7f0000000740)) syz_io_uring_setup(0x4051, &(0x7f00000005c0)={0x0, 0x921f, 0x10, 0x2, 0x2b0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000640)) syz_io_uring_submit(0x0, r0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0xffff) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000500000008dd170230d161483ebf620444cd8999f471744f6373d2fb2e90b88d8df29bfafd7103dbe966e3775075003e0814526cde0479617255cec907ffc603dbe4a1fff2f6ff34c7c7f8a621f21e952bb7a39f496b091cd2d145c836d95351b02914b648a262ac7643868aa73d41f2e8635d4adb5ef24f01bab428570471c510d83275b6c77de422c70e560553d6749c70e6dd26f2b295f96bb8d042dbf9696a43debb0447639902d8a76e2de265ef8195583d96abefe14890db505fae654a2438a0f53859bb674d69"], 0x125) socket$netlink(0x10, 0x3, 0xb) syz_open_dev$tty1(0xc, 0x4, 0x1) 19:26:14 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x8, &(0x7f0000000600)=[{&(0x7f0000000180)="19aa170f64d2c05856a93a201e68993ae7d7fdc29737e8d7fc2cabfe0b301acc78e6ee2a77947938996b23f372d121ff847768a6a1a1aaf0c214768e", 0x3c, 0xffffffffffffffff}, {&(0x7f0000000300)="7fdc21192b3ae5b6dbaf95bb38c4bda2f6e510ce0ada7dd66a748cf9045f70dcfd66885c76ac3a89dd59b010fbc3aae82694587ad64bd68007461c4a9a2afec0c15793c9bc6c3788cca2da486c715bb7b4a160230227c12488fd0bb38e45839cbfaae85e68d6acee1ba2c2479b29f40e383d816eb219ad43c174f8c043704eb13f230ec0aa3820d2f4c60a4ff0653cfeb3bdce37be0e281489b564e21682a6fe5fdbd7aac25a032d42d9a0fb4ac7c217a84ef844a9ae414a4ccc2588ffc1635943c7af0b9bb6a2ae3e9a4acf7c6d81a9783a699f91695e20dcb109b4a052e26d9d5972728eeabc1cab5b3bde38", 0xed, 0x2}, {&(0x7f00000001c0)="59e7dbf705b62900bc558cb3636fc86735752cdfd24ac1c3c8d17914ec86", 0x1e, 0xfff}, {&(0x7f0000000200)="4b8094ceac712fb90f7832b5a14b81595d178b7210970cce17d968171e2019", 0x1f, 0x3f}, {&(0x7f0000000400), 0x0, 0x401}, {&(0x7f0000000500)="267d86da6ee0e1dee6acde8c29c499bf769db210237d5665e45907b63c2331c1d2664ed24405b6eaa511446782fc5c89ef4119a1858b660192945c82d93090739ce374d0a05da7a3265a39178c588ce12f0feeebf0a448914700cad6850cd12e0f559fcb794e35563add3ec571780f74bd44da3047e483ddd90ec4d6", 0x7c, 0x5}, {&(0x7f0000000580)="82b7715aad21f98d2f3b37817f220e12eb18fe6c4d96be2b8b316dfadcdff124695cb9f165340527845f89f71447c8bf88156a46ba2bc5da25514adca6f45d20a3f45330541ad121d047cae0", 0x4c, 0x800000000000ecb}, {&(0x7f0000000240)="624657a08fffdca5fad87a18ffe23fe2178c0f5966ace6f89776c083527aaadc32e1cb6cb090e09385a601032ab09446107ea01e068e", 0x36, 0x5}], 0x2000000, &(0x7f00000006c0)={[{@dots}, {@dots}, {@dots}, {@dots}]}) 19:26:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0) 19:26:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@private}, 0x8, @in=@dev, 0x0, 0x4}}, 0xe8) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x408000, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1a}, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x50, r2, 0x3) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000180)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r3, &(0x7f0000000240)=[{&(0x7f0000000140)="cf", 0x1}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000340)={0x0, 0x1a}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) rename(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)='./file0\x00') 19:26:14 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@private}, 0x8, @in=@dev, 0x0, 0x4}}, 0xe8) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x408000, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1a}, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x50, r2, 0x3) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000180)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r3, &(0x7f0000000240)=[{&(0x7f0000000140)="cf", 0x1}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000340)={0x0, 0x1a}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) rename(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)='./file0\x00') [ 147.037326] loop7: detected capacity change from 0 to 264192 19:26:14 executing program 1: pselect6(0x40, &(0x7f00000005c0)={0x1}, &(0x7f0000000600)={0x3}, &(0x7f0000000640)={0x7}, &(0x7f0000000680)={0x77359400}, &(0x7f0000000700)={&(0x7f00000006c0)={[0x81]}, 0x8}) 19:26:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x22, &(0x7f0000000000)={0x77359400}, 0x10) 19:26:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x22, &(0x7f0000000000)={0x77359400}, 0x10) 19:26:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x22, &(0x7f0000000000)={0x77359400}, 0x10) 19:26:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x22, &(0x7f0000000000)={0x77359400}, 0x10) 19:26:15 executing program 1: statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0, 0x0) 19:26:15 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x10000000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) syz_io_uring_setup(0x5d6f, &(0x7f0000000680)={0x0, 0xbcc0, 0x2, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000700), &(0x7f0000000740)) syz_io_uring_setup(0x4051, &(0x7f00000005c0)={0x0, 0x921f, 0x10, 0x2, 0x2b0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000640)) syz_io_uring_submit(0x0, r0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0xffff) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000500000008dd170230d161483ebf620444cd8999f471744f6373d2fb2e90b88d8df29bfafd7103dbe966e3775075003e0814526cde0479617255cec907ffc603dbe4a1fff2f6ff34c7c7f8a621f21e952bb7a39f496b091cd2d145c836d95351b02914b648a262ac7643868aa73d41f2e8635d4adb5ef24f01bab428570471c510d83275b6c77de422c70e560553d6749c70e6dd26f2b295f96bb8d042dbf9696a43debb0447639902d8a76e2de265ef8195583d96abefe14890db505fae654a2438a0f53859bb674d69"], 0x125) socket$netlink(0x10, 0x3, 0xb) syz_open_dev$tty1(0xc, 0x4, 0x1) 19:26:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x56, &(0x7f00000000c0)={0x0, 0xea60}, 0x10) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) [ 148.285675] FAT-fs (loop7): invalid media value (0x17) [ 148.286433] FAT-fs (loop7): Can't find a valid FAT filesystem [ 148.292113] device lo entered promiscuous mode 19:26:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@private}, 0x8, @in=@dev, 0x0, 0x4}}, 0xe8) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x408000, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1a}, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x50, r2, 0x3) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000180)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r3, &(0x7f0000000240)=[{&(0x7f0000000140)="cf", 0x1}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000340)={0x0, 0x1a}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) rename(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)='./file0\x00') 19:26:16 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x10000000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r1, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) syz_io_uring_setup(0x5d6f, &(0x7f0000000680)={0x0, 0xbcc0, 0x2, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000700), &(0x7f0000000740)) syz_io_uring_setup(0x4051, &(0x7f00000005c0)={0x0, 0x921f, 0x10, 0x2, 0x2b0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000640)) syz_io_uring_submit(0x0, r0, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000040)=""/30, 0x1e}], 0x3, &(0x7f0000000400)=""/165, 0xa5}, 0x0, 0x40, 0x1, {0x1}}, 0xffff) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000500000008dd170230d161483ebf620444cd8999f471744f6373d2fb2e90b88d8df29bfafd7103dbe966e3775075003e0814526cde0479617255cec907ffc603dbe4a1fff2f6ff34c7c7f8a621f21e952bb7a39f496b091cd2d145c836d95351b02914b648a262ac7643868aa73d41f2e8635d4adb5ef24f01bab428570471c510d83275b6c77de422c70e560553d6749c70e6dd26f2b295f96bb8d042dbf9696a43debb0447639902d8a76e2de265ef8195583d96abefe14890db505fae654a2438a0f53859bb674d69"], 0x125) socket$netlink(0x10, 0x3, 0xb) syz_open_dev$tty1(0xc, 0x4, 0x1) 19:26:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@private}, 0x8, @in=@dev, 0x0, 0x4}}, 0xe8) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x408000, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1a}, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x50, r2, 0x3) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000180)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r3, &(0x7f0000000240)=[{&(0x7f0000000140)="cf", 0x1}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000340)={0x0, 0x1a}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) rename(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)='./file0\x00') 19:26:16 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = eventfd(0x0) signalfd(r0, &(0x7f0000000040), 0x8) 19:26:16 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@private}, 0x8, @in=@dev, 0x0, 0x4}}, 0xe8) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x408000, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1a}, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x50, r2, 0x3) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000180)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r3, &(0x7f0000000240)=[{&(0x7f0000000140)="cf", 0x1}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000340)={0x0, 0x1a}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) rename(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)='./file0\x00') 19:26:16 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@private}, 0x8, @in=@dev, 0x0, 0x4}}, 0xe8) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x408000, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1a}, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x50, r2, 0x3) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000180)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r3, &(0x7f0000000240)=[{&(0x7f0000000140)="cf", 0x1}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000340)={0x0, 0x1a}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) rename(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)='./file0\x00') 19:26:16 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x56, &(0x7f00000000c0)={0x0, 0xea60}, 0x10) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 19:26:16 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@multicast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@private}, 0x8, @in=@dev, 0x0, 0x4}}, 0xe8) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) write(r0, &(0x7f0000000080)="01", 0x20000081) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x408000, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1a}, 0x803}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x50, r2, 0x3) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000180)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r3, &(0x7f0000000240)=[{&(0x7f0000000140)="cf", 0x1}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000340)={0x0, 0x1a}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) rename(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)='./file0\x00') [ 149.088776] device lo left promiscuous mode [ 149.152317] device lo entered promiscuous mode 19:26:16 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000040)) 19:26:17 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000040)) 19:26:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @broadcast}, 0x10) 19:26:17 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000040)) [ 149.628382] device syz_tun entered promiscuous mode [ 149.638020] device syz_tun left promiscuous mode [ 149.643298] device syz_tun entered promiscuous mode [ 149.651016] device syz_tun left promiscuous mode 19:26:17 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000040)) 19:26:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x56, &(0x7f00000000c0)={0x0, 0xea60}, 0x10) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 19:26:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @broadcast}, 0x10) [ 149.764800] device lo left promiscuous mode [ 149.775830] device lo entered promiscuous mode 19:26:17 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @broadcast}, 0x10) [ 149.865004] device syz_tun entered promiscuous mode [ 149.874056] device syz_tun left promiscuous mode [ 149.928243] device syz_tun entered promiscuous mode [ 149.940994] device syz_tun left promiscuous mode 19:26:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @broadcast}, 0x10) 19:26:17 executing program 2: prctl$PR_SCHED_CORE(0x21, 0x0, 0x0, 0x0, 0x0) 19:26:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x56, &(0x7f00000000c0)={0x0, 0xea60}, 0x10) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 19:26:17 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @broadcast}, 0x10) 19:26:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) 19:26:17 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semop(0x0, 0x0, 0x0) [ 150.213536] device lo left promiscuous mode [ 150.215528] device syz_tun entered promiscuous mode [ 150.216922] device lo entered promiscuous mode 19:26:17 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x13}, @hci_ev_le_conn_complete={{}, {0x40, 0xc9, 0x5, 0x1, @none, 0x7, 0x3f, 0xfff0, 0x7f}}}}, 0x16) [ 150.231856] device syz_tun left promiscuous mode [ 150.245908] device syz_tun entered promiscuous mode 19:26:17 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d0001"], 0x1c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x0) [ 150.261884] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 150.261955] device syz_tun left promiscuous mode [ 150.269606] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 19:26:17 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) tgkill(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x1, 0xd5, 0x81, 0x6, 0x0, 0x2, 0x402, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x4, @perf_bp={&(0x7f0000000200), 0x4}, 0x10, 0x7, 0x80000001, 0x3, 0x4, 0x2, 0x2, 0x0, 0x4, 0x0, 0x568}, 0x0, 0x3, r0, 0xa) syncfs(r1) 19:26:17 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @broadcast}, 0x10) 19:26:17 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r0 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x30000004}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) [ 150.322310] device syz_tun entered promiscuous mode [ 150.337141] device syz_tun left promiscuous mode 19:26:18 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @broadcast}, 0x10) 19:26:18 executing program 5: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x4d031, 0xffffffffffffffff, 0x8004000000000000) 19:26:18 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x13}, @hci_ev_le_conn_complete={{}, {0x40, 0xc9, 0x5, 0x1, @none, 0x7, 0x3f, 0xfff0, 0x7f}}}}, 0x16) [ 150.480205] device syz_tun entered promiscuous mode 19:26:18 executing program 7: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000580)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, 0x0) 19:26:18 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f00000001c0)) 19:26:18 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) preadv(r0, 0x0, 0x0, 0x0, 0x0) 19:26:18 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) tgkill(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x1, 0xd5, 0x81, 0x6, 0x0, 0x2, 0x402, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x4, @perf_bp={&(0x7f0000000200), 0x4}, 0x10, 0x7, 0x80000001, 0x3, 0x4, 0x2, 0x2, 0x0, 0x4, 0x0, 0x568}, 0x0, 0x3, r0, 0xa) syncfs(r1) 19:26:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) [ 150.516648] device syz_tun left promiscuous mode 19:26:18 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) tgkill(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x1, 0xd5, 0x81, 0x6, 0x0, 0x2, 0x402, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x4, @perf_bp={&(0x7f0000000200), 0x4}, 0x10, 0x7, 0x80000001, 0x3, 0x4, 0x2, 0x2, 0x0, 0x4, 0x0, 0x568}, 0x0, 0x3, r0, 0xa) syncfs(r1) 19:26:18 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x13}, @hci_ev_le_conn_complete={{}, {0x40, 0xc9, 0x5, 0x1, @none, 0x7, 0x3f, 0xfff0, 0x7f}}}}, 0x16) 19:26:18 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x13}, @hci_ev_le_conn_complete={{}, {0x40, 0xc9, 0x5, 0x1, @none, 0x7, 0x3f, 0xfff0, 0x7f}}}}, 0x16) 19:26:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) 19:26:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, 0x0, 0x0) 19:26:18 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) preadv(r0, 0x0, 0x0, 0x0, 0x0) 19:26:18 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchown(r0, 0x0, 0xffffffffffffffff) 19:26:18 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) tgkill(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x1, 0xd5, 0x81, 0x6, 0x0, 0x2, 0x402, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x4, @perf_bp={&(0x7f0000000200), 0x4}, 0x10, 0x7, 0x80000001, 0x3, 0x4, 0x2, 0x2, 0x0, 0x4, 0x0, 0x568}, 0x0, 0x3, r0, 0xa) syncfs(r1) 19:26:18 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f00000001c0)) 19:26:18 executing program 6: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @source_quench={0x2a, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback}}}}}}, 0x0) 19:26:18 executing program 5: syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local, @empty, @val={@void}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @rand_addr, @broadcast, @loopback}}}}, 0x0) 19:26:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) 19:26:18 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) tgkill(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x1, 0xd5, 0x81, 0x6, 0x0, 0x2, 0x402, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x4, @perf_bp={&(0x7f0000000200), 0x4}, 0x10, 0x7, 0x80000001, 0x3, 0x4, 0x2, 0x2, 0x0, 0x4, 0x0, 0x568}, 0x0, 0x3, r0, 0xa) syncfs(r1) 19:26:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x40000042, 0x0, 0x0) 19:26:18 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) preadv(r0, 0x0, 0x0, 0x0, 0x0) 19:26:18 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) tgkill(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x1, 0xd5, 0x81, 0x6, 0x0, 0x2, 0x402, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x4, @perf_bp={&(0x7f0000000200), 0x4}, 0x10, 0x7, 0x80000001, 0x3, 0x4, 0x2, 0x2, 0x0, 0x4, 0x0, 0x568}, 0x0, 0x3, r0, 0xa) syncfs(r1) 19:26:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write(r0, &(0x7f0000000040)="4374a8a9", 0x4) 19:26:18 executing program 6: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @source_quench={0x2a, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback}}}}}}, 0x0) 19:26:18 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, r0+10000000}, 0x0) 19:26:18 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f00000001c0)) 19:26:18 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) preadv(r0, 0x0, 0x0, 0x0, 0x0) 19:26:18 executing program 2: r0 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x208, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') shmget(0x1, 0x3000, 0x20, &(0x7f0000ff9000/0x3000)=nil) pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) 19:26:18 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) tgkill(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x1, 0xd5, 0x81, 0x6, 0x0, 0x2, 0x402, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x4, @perf_bp={&(0x7f0000000200), 0x4}, 0x10, 0x7, 0x80000001, 0x3, 0x4, 0x2, 0x2, 0x0, 0x4, 0x0, 0x568}, 0x0, 0x3, r0, 0xa) syncfs(r1) 19:26:18 executing program 5: shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) openat$sr(0xffffffffffffff9c, 0x0, 0x40b01, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) 19:26:18 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x14}, {0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) [ 151.019190] audit: type=1326 audit(1663010778.674:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4221 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ce0216b19 code=0x0 19:26:18 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x33, &(0x7f00000000c0), 0x4) 19:26:18 executing program 6: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @source_quench={0x2a, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback}}}}}}, 0x0) 19:26:18 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x33, &(0x7f00000000c0), 0x4) 19:26:18 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f00000001c0)) 19:26:18 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x33, &(0x7f00000000c0), 0x4) 19:26:18 executing program 2: r0 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x208, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') shmget(0x1, 0x3000, 0x20, &(0x7f0000ff9000/0x3000)=nil) pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) 19:26:18 executing program 5: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x1c3c00, 0x0) ioctl$CDROM_DISC_STATUS(r0, 0x5327) 19:26:18 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', 0x0}) dup3(r0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000440)=0x1) [ 151.850797] audit: type=1326 audit(1663010779.506:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4221 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ce0216b19 code=0x0 19:26:20 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x33, &(0x7f00000000c0), 0x4) 19:26:20 executing program 6: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @source_quench={0x2a, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback}}}}}}, 0x0) 19:26:20 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) 19:26:20 executing program 4: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001140), 0x2000, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) dup2(r1, r0) 19:26:20 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x14}, {0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 19:26:20 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$msdos(0x0, 0x0, 0x100000001, 0x2, &(0x7f0000000240)=[{&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000000200)="84f446a627a0b79c96e18fb3b522ae2bd2776c4056b0", 0x16, 0x8}], 0x41400, &(0x7f0000001780)=ANY=[@ANYBLOB="732c646f74732c646d61736b3d3030303030303030303030303030303030313733362231000000007375722c726f6f74636f6e746578743d756e636e65645f752c686173682c7569643d116a46d91ba23992bf654af6281b675f3237d16e1686110600"/114, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',smackfsdef=vfat\x00,pcr=00000000000000000025,\x00']) creat(&(0x7f0000000100)='./file0\x00', 0x80) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setaffinity(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x4, 0x80, 0x1f, 0xff, 0x5, 0x7, 0x0, 0x4f0, 0xa, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x8, 0x9}, 0x10000, 0xbf, 0x0, 0x3, 0x6d, 0x80, 0x2, 0x0, 0x2, 0x0, 0x8}, r1, 0x5, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x9d, 0x9}}, './file0\x00'}) fcntl$setpipe(r3, 0x407, 0x6) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000340)=0x4) 19:26:20 executing program 2: r0 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x208, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') shmget(0x1, 0x3000, 0x20, &(0x7f0000ff9000/0x3000)=nil) pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) 19:26:20 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x201100a0}, 0xc) [ 152.791200] audit: type=1326 audit(1663010780.447:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4256 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ce0216b19 code=0x0 [ 152.823941] loop7: detected capacity change from 0 to 264192 19:26:20 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = gettid() process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:26:20 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x201100a0}, 0xc) 19:26:20 executing program 0: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB]) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x143400, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x44, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) perf_event_open(&(0x7f0000000340)={0x646e08775f38d9c, 0x80, 0x3f, 0xff, 0x6, 0x7, 0x0, 0x2, 0x800, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xfffffffffffffffc, 0x40}, 0x40, 0xe92, 0x3, 0x9, 0x5, 0x4, 0xfff, 0x0, 0x1000, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0xb58a, 0x100000001, 0x2}) pwritev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) 19:26:20 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000480)) 19:26:20 executing program 4: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001140), 0x2000, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) dup2(r1, r0) 19:26:20 executing program 6: r0 = epoll_create(0x4) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)={0x80000004}) 19:26:20 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x201100a0}, 0xc) VM DIAGNOSIS: 19:26:10 Registers: info registers vcpu 0 RAX=0000000080000001 RBX=0000000000000001 RCX=0000000080000001 RDX=ffff88801b7dd040 RSI=ffffffff815f748c RDI=0000000000000001 RBP=ffffea000018e880 RSP=ffff888043a9f8d0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffff888043a9fcf8 R13=ffffea000018e880 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff8146174d RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe4a40e16f4 CR3=0000000042b68000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007fe4a40f0470 00007fe4a40eff20 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 756e20796d6d7564 20736e6f6974706f YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 73253d656d616e6c 6165722073253d73 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b1e41 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff888042d1f3c8 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000064 R11=0000000000000001 R12=0000000000000064 R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b1e30 RIP=ffffffff822b1e99 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f953126f700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb89eedf000 CR3=000000001f9ba000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 00524f5252450040 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000