Warning: Permanently added '[localhost]:42606' (ECDSA) to the list of known hosts. 2022/09/28 02:26:09 fuzzer started 2022/09/28 02:26:09 dialing manager at localhost:35827 syzkaller login: [ 45.758717] cgroup: Unknown subsys name 'net' [ 45.870188] cgroup: Unknown subsys name 'rlimit' 2022/09/28 02:26:24 syscalls: 2215 2022/09/28 02:26:24 code coverage: enabled 2022/09/28 02:26:24 comparison tracing: enabled 2022/09/28 02:26:24 extra coverage: enabled 2022/09/28 02:26:24 setuid sandbox: enabled 2022/09/28 02:26:24 namespace sandbox: enabled 2022/09/28 02:26:24 Android sandbox: enabled 2022/09/28 02:26:24 fault injection: enabled 2022/09/28 02:26:24 leak checking: enabled 2022/09/28 02:26:24 net packet injection: enabled 2022/09/28 02:26:24 net device setup: enabled 2022/09/28 02:26:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/28 02:26:24 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/28 02:26:24 USB emulation: enabled 2022/09/28 02:26:24 hci packet injection: enabled 2022/09/28 02:26:24 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220927) 2022/09/28 02:26:24 802.15.4 emulation: enabled 2022/09/28 02:26:24 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/28 02:26:25 fetching corpus: 50, signal 32144/34860 (executing program) 2022/09/28 02:26:25 fetching corpus: 100, signal 41938/45363 (executing program) 2022/09/28 02:26:25 fetching corpus: 150, signal 47160/51327 (executing program) 2022/09/28 02:26:25 fetching corpus: 200, signal 50587/55463 (executing program) 2022/09/28 02:26:25 fetching corpus: 250, signal 57648/62595 (executing program) 2022/09/28 02:26:25 fetching corpus: 300, signal 63753/68615 (executing program) 2022/09/28 02:26:25 fetching corpus: 350, signal 67629/72493 (executing program) 2022/09/28 02:26:26 fetching corpus: 400, signal 70758/75653 (executing program) 2022/09/28 02:26:26 fetching corpus: 450, signal 74656/79292 (executing program) 2022/09/28 02:26:26 fetching corpus: 500, signal 76652/81351 (executing program) 2022/09/28 02:26:26 fetching corpus: 550, signal 78631/83371 (executing program) 2022/09/28 02:26:26 fetching corpus: 600, signal 80445/85090 (executing program) 2022/09/28 02:26:26 fetching corpus: 650, signal 83519/87629 (executing program) 2022/09/28 02:26:26 fetching corpus: 700, signal 85593/89362 (executing program) 2022/09/28 02:26:27 fetching corpus: 750, signal 87774/91060 (executing program) 2022/09/28 02:26:27 fetching corpus: 800, signal 90110/92857 (executing program) 2022/09/28 02:26:27 fetching corpus: 850, signal 92024/94222 (executing program) 2022/09/28 02:26:27 fetching corpus: 900, signal 93657/95439 (executing program) 2022/09/28 02:26:27 fetching corpus: 950, signal 95174/96411 (executing program) 2022/09/28 02:26:27 fetching corpus: 953, signal 95194/96490 (executing program) 2022/09/28 02:26:27 fetching corpus: 953, signal 95194/96545 (executing program) 2022/09/28 02:26:27 fetching corpus: 953, signal 95194/96618 (executing program) 2022/09/28 02:26:27 fetching corpus: 953, signal 95194/96675 (executing program) 2022/09/28 02:26:27 fetching corpus: 953, signal 95194/96734 (executing program) 2022/09/28 02:26:27 fetching corpus: 953, signal 95194/96792 (executing program) 2022/09/28 02:26:27 fetching corpus: 953, signal 95194/96847 (executing program) 2022/09/28 02:26:27 fetching corpus: 953, signal 95194/96907 (executing program) 2022/09/28 02:26:27 fetching corpus: 953, signal 95194/96974 (executing program) 2022/09/28 02:26:27 fetching corpus: 953, signal 95194/97036 (executing program) 2022/09/28 02:26:27 fetching corpus: 953, signal 95194/97116 (executing program) 2022/09/28 02:26:27 fetching corpus: 953, signal 95194/97169 (executing program) 2022/09/28 02:26:27 fetching corpus: 953, signal 95194/97221 (executing program) 2022/09/28 02:26:27 fetching corpus: 953, signal 95194/97291 (executing program) 2022/09/28 02:26:27 fetching corpus: 953, signal 95194/97356 (executing program) 2022/09/28 02:26:27 fetching corpus: 953, signal 95194/97427 (executing program) 2022/09/28 02:26:27 fetching corpus: 953, signal 95194/97478 (executing program) 2022/09/28 02:26:27 fetching corpus: 953, signal 95194/97543 (executing program) 2022/09/28 02:26:27 fetching corpus: 953, signal 95194/97589 (executing program) 2022/09/28 02:26:27 fetching corpus: 953, signal 95194/97643 (executing program) 2022/09/28 02:26:27 fetching corpus: 953, signal 95194/97696 (executing program) 2022/09/28 02:26:28 fetching corpus: 953, signal 95194/97747 (executing program) 2022/09/28 02:26:28 fetching corpus: 953, signal 95194/97811 (executing program) 2022/09/28 02:26:28 fetching corpus: 953, signal 95194/97863 (executing program) 2022/09/28 02:26:28 fetching corpus: 953, signal 95194/97928 (executing program) 2022/09/28 02:26:28 fetching corpus: 953, signal 95194/97991 (executing program) 2022/09/28 02:26:28 fetching corpus: 953, signal 95194/98064 (executing program) 2022/09/28 02:26:28 fetching corpus: 953, signal 95194/98107 (executing program) 2022/09/28 02:26:28 fetching corpus: 953, signal 95194/98107 (executing program) 2022/09/28 02:26:30 starting 8 fuzzer processes 02:26:30 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) 02:26:30 executing program 2: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x20800) 02:26:30 executing program 1: sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$keyring(&(0x7f0000006640), &(0x7f0000006680)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f00000066c0)='\x00', 0x0) 02:26:30 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x4a}}) [ 66.186442] audit: type=1400 audit(1664331990.512:6): avc: denied { execmem } for pid=289 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 02:26:30 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) 02:26:30 executing program 6: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)) 02:26:30 executing program 5: syz_io_uring_setup(0x2846, &(0x7f0000001700), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) 02:26:30 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, r1, 0x321, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) [ 67.436715] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.438407] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.440382] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.443651] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.445989] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.447070] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.454028] Bluetooth: hci0: HCI_REQ-0x0c1a [ 67.502970] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.504282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.507281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.509723] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.510700] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.511419] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.512330] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 67.513436] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.514389] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 67.515183] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.518357] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.520705] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.522875] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 67.525615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.527375] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.528319] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.529366] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.534776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.535643] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.536343] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.537446] Bluetooth: hci2: HCI_REQ-0x0c1a [ 67.560775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.561927] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.562048] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.566705] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.567732] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 67.568417] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.569223] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 67.570185] Bluetooth: hci3: HCI_REQ-0x0c1a [ 67.573612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.577566] Bluetooth: hci1: HCI_REQ-0x0c1a [ 67.590445] Bluetooth: hci4: HCI_REQ-0x0c1a [ 67.610746] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 67.611991] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 67.620024] Bluetooth: hci5: HCI_REQ-0x0c1a [ 67.653149] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 67.659548] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 67.660582] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 67.669275] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 67.672063] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 67.673023] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 67.682585] Bluetooth: hci6: HCI_REQ-0x0c1a [ 69.523020] Bluetooth: hci0: command 0x0409 tx timeout [ 69.587202] Bluetooth: hci3: command 0x0409 tx timeout [ 69.587555] Bluetooth: hci1: command 0x0409 tx timeout [ 69.588131] Bluetooth: hci2: command 0x0409 tx timeout [ 69.589947] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 69.650621] Bluetooth: hci4: command 0x0409 tx timeout [ 69.651418] Bluetooth: hci5: command 0x0409 tx timeout [ 69.714793] Bluetooth: hci6: command 0x0409 tx timeout [ 71.570763] Bluetooth: hci0: command 0x041b tx timeout [ 71.634645] Bluetooth: hci1: command 0x041b tx timeout [ 71.635106] Bluetooth: hci2: command 0x041b tx timeout [ 71.635521] Bluetooth: hci3: command 0x041b tx timeout [ 71.698651] Bluetooth: hci5: command 0x041b tx timeout [ 71.699101] Bluetooth: hci4: command 0x041b tx timeout [ 71.762541] Bluetooth: hci6: command 0x041b tx timeout [ 72.382232] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 72.391007] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 72.405326] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 72.420515] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 72.422948] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 72.424235] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 72.430458] Bluetooth: hci7: HCI_REQ-0x0c1a [ 73.618593] Bluetooth: hci0: command 0x040f tx timeout [ 73.682556] Bluetooth: hci3: command 0x040f tx timeout [ 73.683028] Bluetooth: hci2: command 0x040f tx timeout [ 73.683416] Bluetooth: hci1: command 0x040f tx timeout [ 73.746599] Bluetooth: hci4: command 0x040f tx timeout [ 73.747065] Bluetooth: hci5: command 0x040f tx timeout [ 73.810536] Bluetooth: hci6: command 0x040f tx timeout [ 74.450573] Bluetooth: hci7: command 0x0409 tx timeout [ 75.666529] Bluetooth: hci0: command 0x0419 tx timeout [ 75.730632] Bluetooth: hci1: command 0x0419 tx timeout [ 75.731097] Bluetooth: hci2: command 0x0419 tx timeout [ 75.731871] Bluetooth: hci3: command 0x0419 tx timeout [ 75.794580] Bluetooth: hci5: command 0x0419 tx timeout [ 75.795026] Bluetooth: hci4: command 0x0419 tx timeout [ 75.858705] Bluetooth: hci6: command 0x0419 tx timeout [ 76.498564] Bluetooth: hci7: command 0x041b tx timeout [ 78.547068] Bluetooth: hci7: command 0x040f tx timeout [ 80.594936] Bluetooth: hci7: command 0x0419 tx timeout [ 129.946016] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 129.961548] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 129.972615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 129.973067] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 129.978195] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 129.980706] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 129.984210] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 129.998061] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 130.000281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 130.031351] Bluetooth: hci2: HCI_REQ-0x0c1a [ 130.058776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 130.068118] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 130.072708] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 130.080895] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 130.083927] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 130.085885] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 130.091723] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 130.093106] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 130.094137] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 130.095644] Bluetooth: hci3: HCI_REQ-0x0c1a [ 130.096286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 130.099705] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 130.101102] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 130.107435] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 130.108468] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 130.109914] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 130.121470] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 130.122968] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 130.125361] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 130.129828] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 130.130878] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 130.132100] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 130.132984] Bluetooth: hci5: HCI_REQ-0x0c1a [ 130.141746] Bluetooth: hci6: HCI_REQ-0x0c1a [ 130.142756] Bluetooth: hci4: HCI_REQ-0x0c1a [ 131.794760] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 131.987084] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 132.050724] Bluetooth: hci2: command 0x0409 tx timeout [ 132.178770] Bluetooth: hci6: command 0x0409 tx timeout [ 132.179628] Bluetooth: hci3: command 0x0409 tx timeout [ 132.180280] Bluetooth: hci4: command 0x0409 tx timeout [ 132.180978] Bluetooth: hci5: command 0x0409 tx timeout [ 134.098615] Bluetooth: hci2: command 0x041b tx timeout [ 134.226661] Bluetooth: hci5: command 0x041b tx timeout [ 134.226891] Bluetooth: hci4: command 0x041b tx timeout [ 134.227256] Bluetooth: hci3: command 0x041b tx timeout [ 134.227805] Bluetooth: hci6: command 0x041b tx timeout [ 134.378780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 134.385333] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 134.386869] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 134.401205] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 134.404431] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 134.407117] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 134.422573] Bluetooth: hci1: HCI_REQ-0x0c1a [ 134.552772] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 134.558854] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 134.561752] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 134.569731] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 134.571954] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 134.573746] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 134.580569] Bluetooth: hci7: HCI_REQ-0x0c1a [ 135.762572] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 136.146677] Bluetooth: hci2: command 0x040f tx timeout [ 136.274721] Bluetooth: hci6: command 0x040f tx timeout [ 136.275307] Bluetooth: hci3: command 0x040f tx timeout [ 136.275879] Bluetooth: hci4: command 0x040f tx timeout [ 136.276401] Bluetooth: hci5: command 0x040f tx timeout [ 136.466635] Bluetooth: hci1: command 0x0409 tx timeout [ 136.658608] Bluetooth: hci7: command 0x0409 tx timeout [ 138.194581] Bluetooth: hci2: command 0x0419 tx timeout [ 138.322601] Bluetooth: hci5: command 0x0419 tx timeout [ 138.323150] Bluetooth: hci4: command 0x0419 tx timeout [ 138.323703] Bluetooth: hci3: command 0x0419 tx timeout [ 138.324203] Bluetooth: hci6: command 0x0419 tx timeout [ 138.514585] Bluetooth: hci1: command 0x041b tx timeout [ 138.706550] Bluetooth: hci7: command 0x041b tx timeout [ 140.498570] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 140.562646] Bluetooth: hci1: command 0x040f tx timeout [ 140.754729] Bluetooth: hci7: command 0x040f tx timeout [ 142.610647] Bluetooth: hci1: command 0x0419 tx timeout [ 142.802567] Bluetooth: hci7: command 0x0419 tx timeout [ 145.170647] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 149.842569] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 152.492870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.505416] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.510717] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.520471] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.532864] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 152.547860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.570556] Bluetooth: hci0: HCI_REQ-0x0c1a [ 154.642626] Bluetooth: hci0: command 0x0409 tx timeout [ 156.690557] Bluetooth: hci0: command 0x041b tx timeout [ 158.738618] Bluetooth: hci0: command 0x040f tx timeout [ 160.786560] Bluetooth: hci0: command 0x0419 tx timeout [ 191.969447] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 191.976677] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 191.984407] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 191.995277] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 192.001631] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 192.011960] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 192.023560] Bluetooth: hci3: HCI_REQ-0x0c1a [ 192.299808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 192.304798] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 192.313232] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 192.342796] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 192.348385] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 192.349434] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 192.367176] Bluetooth: hci4: HCI_REQ-0x0c1a [ 192.473574] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 192.478777] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 192.483729] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 192.492758] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 192.497331] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 192.499700] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 192.506776] Bluetooth: hci5: HCI_REQ-0x0c1a [ 192.549254] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 192.551683] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 192.553726] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 192.555924] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 192.557218] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 192.558649] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 192.568727] Bluetooth: hci6: HCI_REQ-0x0c1a [ 193.874567] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 194.066582] Bluetooth: hci3: command 0x0409 tx timeout [ 194.386554] Bluetooth: hci4: command 0x0409 tx timeout [ 194.578596] Bluetooth: hci5: command 0x0409 tx timeout [ 194.579555] Bluetooth: hci6: command 0x0409 tx timeout [ 195.845939] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 195.846926] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 195.848752] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 195.851852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 195.853610] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 195.854516] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 195.860553] Bluetooth: hci1: HCI_REQ-0x0c1a [ 196.055766] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 196.057214] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 196.058222] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 196.060785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 196.061983] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 196.062980] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 196.066247] Bluetooth: hci2: HCI_REQ-0x0c1a [ 196.114608] Bluetooth: hci3: command 0x041b tx timeout [ 196.434555] Bluetooth: hci4: command 0x041b tx timeout [ 196.626569] Bluetooth: hci6: command 0x041b tx timeout [ 196.626672] Bluetooth: hci5: command 0x041b tx timeout [ 197.907599] Bluetooth: hci1: command 0x0409 tx timeout [ 198.098551] Bluetooth: hci2: command 0x0409 tx timeout [ 198.162640] Bluetooth: hci3: command 0x040f tx timeout [ 198.354626] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 198.482547] Bluetooth: hci4: command 0x040f tx timeout [ 198.674597] Bluetooth: hci6: command 0x040f tx timeout [ 198.675189] Bluetooth: hci5: command 0x040f tx timeout [ 199.954620] Bluetooth: hci1: command 0x041b tx timeout [ 200.146602] Bluetooth: hci2: command 0x041b tx timeout [ 200.210639] Bluetooth: hci3: command 0x0419 tx timeout [ 200.530590] Bluetooth: hci4: command 0x0419 tx timeout [ 200.722624] Bluetooth: hci5: command 0x0419 tx timeout [ 200.723193] Bluetooth: hci6: command 0x0419 tx timeout [ 202.002618] Bluetooth: hci1: command 0x040f tx timeout [ 202.194577] Bluetooth: hci2: command 0x040f tx timeout [ 202.898540] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 204.050543] Bluetooth: hci1: command 0x0419 tx timeout [ 204.242598] Bluetooth: hci2: command 0x0419 tx timeout [ 207.378603] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 211.794583] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 213.661858] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.677034] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.694223] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.704281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.722118] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 213.726264] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.739244] Bluetooth: hci0: HCI_REQ-0x0c1a [ 214.140783] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 214.155083] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 214.158709] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 214.180674] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 214.184068] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 214.190153] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 214.208730] Bluetooth: hci7: HCI_REQ-0x0c1a [ 215.762559] Bluetooth: hci0: command 0x0409 tx timeout [ 216.274595] Bluetooth: hci7: command 0x0409 tx timeout [ 217.810588] Bluetooth: hci0: command 0x041b tx timeout [ 218.322529] Bluetooth: hci7: command 0x041b tx timeout [ 219.858521] Bluetooth: hci0: command 0x040f tx timeout [ 220.370541] Bluetooth: hci7: command 0x040f tx timeout [ 221.906570] Bluetooth: hci0: command 0x0419 tx timeout [ 222.418592] Bluetooth: hci7: command 0x0419 tx timeout 02:29:23 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, r1, 0x321, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) 02:29:23 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, r1, 0x321, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) 02:29:23 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, r1, 0x321, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) 02:29:24 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002bc0)) io_uring_setup(0x0, &(0x7f0000002d00)={0x0, 0x4fc2, 0x0, 0x1, 0x2e0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000004840), r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000005100), 0xffffffffffffffff) 02:29:24 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000440008000f801", 0x17}, {0x0, 0x0, 0xa00}, {&(0x7f0000000440)="636f62515c82f585d0", 0x9}, {&(0x7f0000000480)="55b88e29f1f6194a23a494aa231365fa5a622b9b5d661253a8a36eee", 0x1c, 0x100020000000000}], 0x0, &(0x7f0000000140)=ANY=[]) fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) [ 240.127802] loop7: detected capacity change from 0 to 264192 02:29:24 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000440008000f801", 0x17}, {0x0, 0x0, 0xa00}, {&(0x7f0000000440)="636f62515c82f585d0", 0x9}, {&(0x7f0000000480)="55b88e29f1f6194a23a494aa231365fa5a622b9b5d661253a8a36eee", 0x1c, 0x100020000000000}], 0x0, &(0x7f0000000140)=ANY=[]) fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) [ 240.309964] loop7: detected capacity change from 0 to 264192 02:29:24 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000440008000f801", 0x17}, {0x0, 0x0, 0xa00}, {&(0x7f0000000440)="636f62515c82f585d0", 0x9}, {&(0x7f0000000480)="55b88e29f1f6194a23a494aa231365fa5a622b9b5d661253a8a36eee", 0x1c, 0x100020000000000}], 0x0, &(0x7f0000000140)=ANY=[]) fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) 02:29:24 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000440008000f801", 0x17}, {0x0, 0x0, 0xa00}, {&(0x7f0000000440)="636f62515c82f585d0", 0x9}, {&(0x7f0000000480)="55b88e29f1f6194a23a494aa231365fa5a622b9b5d661253a8a36eee", 0x1c, 0x100020000000000}], 0x0, &(0x7f0000000140)=ANY=[]) fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) [ 240.458362] loop2: detected capacity change from 0 to 264192 02:29:32 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) 02:29:32 executing program 6: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)) 02:29:32 executing program 5: syz_io_uring_setup(0x2846, &(0x7f0000001700), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) 02:29:32 executing program 1: sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$keyring(&(0x7f0000006640), &(0x7f0000006680)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f00000066c0)='\x00', 0x0) 02:29:32 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000440008000f801", 0x17}, {0x0, 0x0, 0xa00}, {&(0x7f0000000440)="636f62515c82f585d0", 0x9}, {&(0x7f0000000480)="55b88e29f1f6194a23a494aa231365fa5a622b9b5d661253a8a36eee", 0x1c, 0x100020000000000}], 0x0, &(0x7f0000000140)=ANY=[]) fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) 02:29:32 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x4a}}) 02:29:32 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000440008000f801", 0x17}, {0x0, 0x0, 0xa00}, {&(0x7f0000000440)="636f62515c82f585d0", 0x9}, {&(0x7f0000000480)="55b88e29f1f6194a23a494aa231365fa5a622b9b5d661253a8a36eee", 0x1c, 0x100020000000000}], 0x0, &(0x7f0000000140)=ANY=[]) fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) 02:29:32 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) [ 247.948910] loop2: detected capacity change from 0 to 264192 [ 247.949994] loop7: detected capacity change from 0 to 264192 02:29:32 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x4a}}) 02:29:32 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000440008000f801", 0x17}, {0x0, 0x0, 0xa00}, {&(0x7f0000000440)="636f62515c82f585d0", 0x9}, {&(0x7f0000000480)="55b88e29f1f6194a23a494aa231365fa5a622b9b5d661253a8a36eee", 0x1c, 0x100020000000000}], 0x0, &(0x7f0000000140)=ANY=[]) fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) 02:29:32 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) [ 248.092521] loop2: detected capacity change from 0 to 264192 02:29:32 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) 02:29:32 executing program 1: sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$keyring(&(0x7f0000006640), &(0x7f0000006680)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f00000066c0)='\x00', 0x0) 02:29:32 executing program 7: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)) 02:29:32 executing program 5: syz_io_uring_setup(0x2846, &(0x7f0000001700), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) 02:29:32 executing program 6: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)) 02:29:32 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x4a}}) 02:29:32 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) 02:29:32 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) 02:29:32 executing program 1: sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = add_key$keyring(&(0x7f0000006640), &(0x7f0000006680)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f00000066c0)='\x00', 0x0) 02:29:32 executing program 6: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)) 02:29:32 executing program 7: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)) 02:29:32 executing program 5: syz_io_uring_setup(0x2846, &(0x7f0000001700), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) 02:29:32 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) 02:29:32 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000100), &(0x7f0000000140)=0x10) 02:29:32 executing program 3: syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) 02:29:32 executing program 0: syz_mount_image$nfs4(&(0x7f00000009c0), &(0x7f0000000a00)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)={[{'nl80211\x00'}]}) 02:29:32 executing program 1: shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffd000/0x3000)=nil) 02:29:32 executing program 7: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)) [ 248.388969] nfs4: Unknown parameter 'nl80211' [ 248.393707] nfs4: Unknown parameter 'nl80211' 02:29:32 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@hopopts={{0x18}}, @hopopts_2292={{0x18}}], 0x30}}], 0x2, 0x0) 02:29:32 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000100), &(0x7f0000000140)=0x10) 02:29:32 executing program 3: syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) 02:29:32 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) 02:29:32 executing program 0: syz_mount_image$nfs4(&(0x7f00000009c0), &(0x7f0000000a00)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)={[{'nl80211\x00'}]}) 02:29:32 executing program 1: shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffd000/0x3000)=nil) 02:29:32 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) 02:29:32 executing program 3: syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) 02:29:32 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000100), &(0x7f0000000140)=0x10) 02:29:32 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@hopopts={{0x18}}, @hopopts_2292={{0x18}}], 0x30}}], 0x2, 0x0) [ 248.541865] nfs4: Unknown parameter 'nl80211' 02:29:32 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) 02:29:32 executing program 1: shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffd000/0x3000)=nil) 02:29:32 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) 02:29:32 executing program 0: syz_mount_image$nfs4(&(0x7f00000009c0), &(0x7f0000000a00)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)={[{'nl80211\x00'}]}) 02:29:32 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000580)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="26909bff000000000700000000a85700000000000000b9ca65a481d37a3f000000bafecaddf88c11e2fa8af08e9bc8bf1f7a78dd01b67ba20000000000000000000040e6aaf842b51f0572c7a30000000000000000010000000017339d754195234c002c9b6b5855f01810d6342740fec30fb235cc5b8ce24b9a731d623fb060d5abf288102142acae21a3268e36e97f058ad4eec8a4170f2d92c3d61b4c17ec21f8d5b0282087e70b30736232a088fd538212994fe73631f8caf43ff71688d470ddddb8bcb89d1ba2cf16307777416160921b5b730456d0c0fd9f5cc6e0a72e6c4e6e74f3f5491dfda80000000000000000"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/vlan/vlan0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000340)={0x2c, @private=0xa010102, 0x5e23, 0x4, 'wlc\x00', 0x17, 0x1, 0x5a}, 0x2c) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000280)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x490000, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x79, 0x1, 0x81, 0x2, 0x0, 0x4, 0x20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_config_ext={0x46, 0x7}, 0x4800, 0xf, 0x0, 0x8, 0xde, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, r2, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 02:29:32 executing program 3: syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) 02:29:32 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@hopopts={{0x18}}, @hopopts_2292={{0x18}}], 0x30}}], 0x2, 0x0) 02:29:32 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000100), &(0x7f0000000140)=0x10) [ 248.691501] audit: type=1400 audit(1664332173.017:7): avc: denied { open } for pid=10438 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 248.693586] audit: type=1400 audit(1664332173.017:8): avc: denied { kernel } for pid=10438 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 248.705365] nfs4: Unknown parameter 'nl80211' [ 248.717190] ------------[ cut here ]------------ [ 248.717214] [ 248.717217] ====================================================== [ 248.717222] WARNING: possible circular locking dependency detected [ 248.717227] 6.0.0-rc7-next-20220927 #1 Not tainted [ 248.717235] ------------------------------------------------------ [ 248.717238] syz-executor.7/10439 is trying to acquire lock: [ 248.717246] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 248.717298] [ 248.717298] but task is already holding lock: [ 248.717301] ffff88800ef26020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 248.717335] [ 248.717335] which lock already depends on the new lock. [ 248.717335] [ 248.717339] [ 248.717339] the existing dependency chain (in reverse order) is: [ 248.717342] [ 248.717342] -> #3 (&ctx->lock){....}-{2:2}: [ 248.717359] _raw_spin_lock+0x2a/0x40 [ 248.717375] __perf_event_task_sched_out+0x53b/0x18d0 [ 248.717391] __schedule+0xedd/0x2470 [ 248.717410] schedule+0xda/0x1b0 [ 248.717429] exit_to_user_mode_prepare+0x114/0x1a0 [ 248.717444] syscall_exit_to_user_mode+0x19/0x40 [ 248.717461] do_syscall_64+0x48/0x90 [ 248.717474] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 248.717491] [ 248.717491] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 248.717508] _raw_spin_lock_nested+0x30/0x40 [ 248.717523] raw_spin_rq_lock_nested+0x1e/0x30 [ 248.717539] task_fork_fair+0x63/0x4d0 [ 248.717559] sched_cgroup_fork+0x3d0/0x540 [ 248.717576] copy_process+0x4183/0x6e20 [ 248.717589] kernel_clone+0xe7/0x890 [ 248.717601] user_mode_thread+0xad/0xf0 [ 248.717613] rest_init+0x24/0x250 [ 248.717630] arch_call_rest_init+0xf/0x14 [ 248.717647] start_kernel+0x4c6/0x4eb [ 248.717662] secondary_startup_64_no_verify+0xe0/0xeb [ 248.717679] [ 248.717679] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 248.717695] _raw_spin_lock_irqsave+0x39/0x60 [ 248.717711] try_to_wake_up+0xab/0x1930 [ 248.717727] up+0x75/0xb0 [ 248.717746] __up_console_sem+0x6e/0x80 [ 248.717766] console_unlock+0x46a/0x590 [ 248.717785] con_install+0x14e/0x5d0 [ 248.717800] tty_init_dev.part.0+0xa0/0x5e0 [ 248.717818] tty_open+0xba3/0x1350 [ 248.717833] chrdev_open+0x268/0x6e0 [ 248.717850] do_dentry_open+0x6ca/0x12b0 [ 248.717867] path_openat+0x187f/0x2770 [ 248.717881] do_filp_open+0x1b6/0x410 [ 248.717895] do_sys_openat2+0x171/0x4c0 [ 248.717914] __x64_sys_openat+0x13f/0x1f0 [ 248.717933] do_syscall_64+0x3b/0x90 [ 248.717945] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 248.717963] [ 248.717963] -> #0 ((console_sem).lock){....}-{2:2}: [ 248.717980] __lock_acquire+0x2a02/0x5e70 [ 248.718001] lock_acquire+0x1a2/0x530 [ 248.718020] _raw_spin_lock_irqsave+0x39/0x60 [ 248.718035] down_trylock+0xe/0x70 [ 248.718056] __down_trylock_console_sem+0x3b/0xd0 [ 248.718075] vprintk_emit+0x16b/0x560 [ 248.718095] vprintk+0x84/0xa0 [ 248.718115] _printk+0xba/0xf1 [ 248.718131] report_bug.cold+0x72/0xab [ 248.718143] handle_bug+0x3c/0x70 [ 248.718155] exc_invalid_op+0x14/0x50 [ 248.718168] asm_exc_invalid_op+0x16/0x20 [ 248.718184] group_sched_out.part.0+0x2c7/0x460 [ 248.718198] ctx_sched_out+0x8f1/0xc10 [ 248.718211] __perf_event_task_sched_out+0x6d0/0x18d0 [ 248.718227] __schedule+0xedd/0x2470 [ 248.718245] schedule+0xda/0x1b0 [ 248.718264] exit_to_user_mode_prepare+0x114/0x1a0 [ 248.718277] syscall_exit_to_user_mode+0x19/0x40 [ 248.718295] do_syscall_64+0x48/0x90 [ 248.718307] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 248.718325] [ 248.718325] other info that might help us debug this: [ 248.718325] [ 248.718328] Chain exists of: [ 248.718328] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 248.718328] [ 248.718347] Possible unsafe locking scenario: [ 248.718347] [ 248.718349] CPU0 CPU1 [ 248.718352] ---- ---- [ 248.718355] lock(&ctx->lock); [ 248.718362] lock(&rq->__lock); [ 248.718370] lock(&ctx->lock); [ 248.718377] lock((console_sem).lock); [ 248.718385] [ 248.718385] *** DEADLOCK *** [ 248.718385] [ 248.718387] 2 locks held by syz-executor.7/10439: [ 248.718395] #0: ffff88806ce37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 248.718434] #1: ffff88800ef26020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 248.718469] [ 248.718469] stack backtrace: [ 248.718472] CPU: 0 PID: 10439 Comm: syz-executor.7 Not tainted 6.0.0-rc7-next-20220927 #1 [ 248.718488] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 248.718497] Call Trace: [ 248.718501] [ 248.718507] dump_stack_lvl+0x8b/0xb3 [ 248.718521] check_noncircular+0x263/0x2e0 [ 248.718542] ? format_decode+0x26c/0xb50 [ 248.718564] ? print_circular_bug+0x450/0x450 [ 248.718585] ? enable_ptr_key_workfn+0x20/0x20 [ 248.718608] ? format_decode+0x26c/0xb50 [ 248.718632] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 248.718654] __lock_acquire+0x2a02/0x5e70 [ 248.718681] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 248.718709] lock_acquire+0x1a2/0x530 [ 248.718729] ? down_trylock+0xe/0x70 [ 248.718753] ? lock_release+0x750/0x750 [ 248.718778] ? vprintk+0x84/0xa0 [ 248.718800] _raw_spin_lock_irqsave+0x39/0x60 [ 248.718817] ? down_trylock+0xe/0x70 [ 248.718838] down_trylock+0xe/0x70 [ 248.718860] ? vprintk+0x84/0xa0 [ 248.718881] __down_trylock_console_sem+0x3b/0xd0 [ 248.718902] vprintk_emit+0x16b/0x560 [ 248.718926] vprintk+0x84/0xa0 [ 248.718947] _printk+0xba/0xf1 [ 248.718964] ? record_print_text.cold+0x16/0x16 [ 248.718985] ? report_bug.cold+0x66/0xab [ 248.719000] ? group_sched_out.part.0+0x2c7/0x460 [ 248.719015] report_bug.cold+0x72/0xab [ 248.719030] handle_bug+0x3c/0x70 [ 248.719044] exc_invalid_op+0x14/0x50 [ 248.719058] asm_exc_invalid_op+0x16/0x20 [ 248.719076] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 248.719094] Code: 5e 41 5f e9 ab a9 ef ff e8 a6 a9 ef ff 65 8b 1d 1b 0f ac 7e 31 ff 89 de e8 46 a6 ef ff 85 db 0f 84 8a 00 00 00 e8 89 a9 ef ff <0f> 0b e9 a5 fe ff ff e8 7d a9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 248.719108] RSP: 0018:ffff88803fe3fc48 EFLAGS: 00010006 [ 248.719120] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 248.719129] RDX: ffff88803fbc0000 RSI: ffffffff815666b7 RDI: 0000000000000005 [ 248.719138] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 248.719147] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800ef26000 [ 248.719157] R13: ffff88806ce3d140 R14: ffffffff8547cf80 R15: 0000000000000002 [ 248.719171] ? group_sched_out.part.0+0x2c7/0x460 [ 248.719188] ? group_sched_out.part.0+0x2c7/0x460 [ 248.719205] ctx_sched_out+0x8f1/0xc10 [ 248.719221] __perf_event_task_sched_out+0x6d0/0x18d0 [ 248.719241] ? lock_is_held_type+0xd7/0x130 [ 248.719260] ? __perf_cgroup_move+0x160/0x160 [ 248.719275] ? set_next_entity+0x304/0x550 [ 248.719297] ? update_curr+0x267/0x740 [ 248.719320] ? lock_is_held_type+0xd7/0x130 [ 248.719339] __schedule+0xedd/0x2470 [ 248.719363] ? io_schedule_timeout+0x150/0x150 [ 248.719385] ? rcu_read_lock_sched_held+0x3e/0x80 [ 248.719410] schedule+0xda/0x1b0 [ 248.719431] exit_to_user_mode_prepare+0x114/0x1a0 [ 248.719446] syscall_exit_to_user_mode+0x19/0x40 [ 248.719465] do_syscall_64+0x48/0x90 [ 248.719479] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 248.719498] RIP: 0033:0x7f80bef69b19 [ 248.719508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 248.719521] RSP: 002b:00007f80bc4df218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 248.719535] RAX: 0000000000000001 RBX: 00007f80bf07cf68 RCX: 00007f80bef69b19 [ 248.719544] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f80bf07cf6c [ 248.719553] RBP: 00007f80bf07cf60 R08: 000000000000000e R09: 0000000000000000 [ 248.719562] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f80bf07cf6c [ 248.719571] R13: 00007ffc981e9fdf R14: 00007f80bc4df300 R15: 0000000000022000 [ 248.719587] [ 248.789350] WARNING: CPU: 0 PID: 10439 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 248.790185] Modules linked in: [ 248.790480] CPU: 0 PID: 10439 Comm: syz-executor.7 Not tainted 6.0.0-rc7-next-20220927 #1 [ 248.791194] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 248.792190] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 248.792676] Code: 5e 41 5f e9 ab a9 ef ff e8 a6 a9 ef ff 65 8b 1d 1b 0f ac 7e 31 ff 89 de e8 46 a6 ef ff 85 db 0f 84 8a 00 00 00 e8 89 a9 ef ff <0f> 0b e9 a5 fe ff ff e8 7d a9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 248.794261] RSP: 0018:ffff88803fe3fc48 EFLAGS: 00010006 [ 248.794730] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 248.795345] RDX: ffff88803fbc0000 RSI: ffffffff815666b7 RDI: 0000000000000005 [ 248.795966] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 248.796603] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88800ef26000 [ 248.797224] R13: ffff88806ce3d140 R14: ffffffff8547cf80 R15: 0000000000000002 [ 248.797847] FS: 00007f80bc4df700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 248.798544] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 248.799056] CR2: 00007f6e07685000 CR3: 000000000dac6000 CR4: 0000000000350ef0 [ 248.799680] Call Trace: [ 248.799911] [ 248.800127] ctx_sched_out+0x8f1/0xc10 [ 248.800477] __perf_event_task_sched_out+0x6d0/0x18d0 [ 248.800936] ? lock_is_held_type+0xd7/0x130 [ 248.801330] ? __perf_cgroup_move+0x160/0x160 [ 248.801733] ? set_next_entity+0x304/0x550 [ 248.802128] ? update_curr+0x267/0x740 [ 248.802491] ? lock_is_held_type+0xd7/0x130 [ 248.802883] __schedule+0xedd/0x2470 [ 248.803234] ? io_schedule_timeout+0x150/0x150 [ 248.803665] ? rcu_read_lock_sched_held+0x3e/0x80 [ 248.804130] schedule+0xda/0x1b0 [ 248.804452] exit_to_user_mode_prepare+0x114/0x1a0 [ 248.804901] syscall_exit_to_user_mode+0x19/0x40 [ 248.805337] do_syscall_64+0x48/0x90 [ 248.805679] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 248.806147] RIP: 0033:0x7f80bef69b19 [ 248.806485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 248.808107] RSP: 002b:00007f80bc4df218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 248.808790] RAX: 0000000000000001 RBX: 00007f80bf07cf68 RCX: 00007f80bef69b19 [ 248.809426] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f80bf07cf6c [ 248.810066] RBP: 00007f80bf07cf60 R08: 000000000000000e R09: 0000000000000000 [ 248.810696] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f80bf07cf6c [ 248.811322] R13: 00007ffc981e9fdf R14: 00007f80bc4df300 R15: 0000000000022000 [ 248.811953] [ 248.812171] irq event stamp: 680 [ 248.812466] hardirqs last enabled at (679): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 248.813281] hardirqs last disabled at (680): [] __schedule+0x1225/0x2470 [ 248.814000] softirqs last enabled at (450): [] __irq_exit_rcu+0x11b/0x180 [ 248.814748] softirqs last disabled at (441): [] __irq_exit_rcu+0x11b/0x180 [ 248.815492] ---[ end trace 0000000000000000 ]--- 02:29:33 executing program 1: shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffd000/0x3000)=nil) 02:29:33 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) 02:29:33 executing program 0: syz_mount_image$nfs4(&(0x7f00000009c0), &(0x7f0000000a00)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)={[{'nl80211\x00'}]}) 02:29:33 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@hopopts={{0x18}}, @hopopts_2292={{0x18}}], 0x30}}], 0x2, 0x0) 02:29:33 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) 02:29:33 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_setattr(0x0, &(0x7f0000000140)={0x38}, 0x0) [ 248.888554] nfs4: Unknown parameter 'nl80211' 02:29:33 executing program 3: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0) finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 02:29:33 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000580)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="26909bff000000000700000000a85700000000000000b9ca65a481d37a3f000000bafecaddf88c11e2fa8af08e9bc8bf1f7a78dd01b67ba20000000000000000000040e6aaf842b51f0572c7a30000000000000000010000000017339d754195234c002c9b6b5855f01810d6342740fec30fb235cc5b8ce24b9a731d623fb060d5abf288102142acae21a3268e36e97f058ad4eec8a4170f2d92c3d61b4c17ec21f8d5b0282087e70b30736232a088fd538212994fe73631f8caf43ff71688d470ddddb8bcb89d1ba2cf16307777416160921b5b730456d0c0fd9f5cc6e0a72e6c4e6e74f3f5491dfda80000000000000000"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/vlan/vlan0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000340)={0x2c, @private=0xa010102, 0x5e23, 0x4, 'wlc\x00', 0x17, 0x1, 0x5a}, 0x2c) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000280)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x490000, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x79, 0x1, 0x81, 0x2, 0x0, 0x4, 0x20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_config_ext={0x46, 0x7}, 0x4800, 0xf, 0x0, 0x8, 0xde, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, r2, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 02:29:33 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001ff000400000000000003"], 0x28}}, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000001300)=[{0x0}], 0x0, &(0x7f0000000040)=ANY=[]) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 02:29:33 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x13, 0x0, 0x0) 02:29:33 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_setattr(0x0, &(0x7f0000000140)={0x38}, 0x0) 02:29:33 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek(r0, 0x0, 0x1) [ 249.056970] audit: type=1400 audit(1664332173.383:9): avc: denied { write } for pid=10466 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 02:29:33 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000580)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="26909bff000000000700000000a85700000000000000b9ca65a481d37a3f000000bafecaddf88c11e2fa8af08e9bc8bf1f7a78dd01b67ba20000000000000000000040e6aaf842b51f0572c7a30000000000000000010000000017339d754195234c002c9b6b5855f01810d6342740fec30fb235cc5b8ce24b9a731d623fb060d5abf288102142acae21a3268e36e97f058ad4eec8a4170f2d92c3d61b4c17ec21f8d5b0282087e70b30736232a088fd538212994fe73631f8caf43ff71688d470ddddb8bcb89d1ba2cf16307777416160921b5b730456d0c0fd9f5cc6e0a72e6c4e6e74f3f5491dfda80000000000000000"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/vlan/vlan0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000340)={0x2c, @private=0xa010102, 0x5e23, 0x4, 'wlc\x00', 0x17, 0x1, 0x5a}, 0x2c) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000280)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x490000, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x79, 0x1, 0x81, 0x2, 0x0, 0x4, 0x20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_config_ext={0x46, 0x7}, 0x4800, 0xf, 0x0, 0x8, 0xde, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, r2, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 02:29:33 executing program 5: clock_nanosleep(0x1, 0x1, &(0x7f0000000a00), 0x0) 02:29:33 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x13, 0x0, 0x0) 02:29:33 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek(r0, 0x0, 0x1) 02:29:33 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_setattr(0x0, &(0x7f0000000140)={0x38}, 0x0) 02:29:33 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001ff000400000000000003"], 0x28}}, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000001300)=[{0x0}], 0x0, &(0x7f0000000040)=ANY=[]) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 02:29:33 executing program 5: clock_nanosleep(0x1, 0x1, &(0x7f0000000a00), 0x0) 02:29:33 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000580)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="26909bff000000000700000000a85700000000000000b9ca65a481d37a3f000000bafecaddf88c11e2fa8af08e9bc8bf1f7a78dd01b67ba20000000000000000000040e6aaf842b51f0572c7a30000000000000000010000000017339d754195234c002c9b6b5855f01810d6342740fec30fb235cc5b8ce24b9a731d623fb060d5abf288102142acae21a3268e36e97f058ad4eec8a4170f2d92c3d61b4c17ec21f8d5b0282087e70b30736232a088fd538212994fe73631f8caf43ff71688d470ddddb8bcb89d1ba2cf16307777416160921b5b730456d0c0fd9f5cc6e0a72e6c4e6e74f3f5491dfda80000000000000000"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/vlan/vlan0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000340)={0x2c, @private=0xa010102, 0x5e23, 0x4, 'wlc\x00', 0x17, 0x1, 0x5a}, 0x2c) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000280)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x490000, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x79, 0x1, 0x81, 0x2, 0x0, 0x4, 0x20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_config_ext={0x46, 0x7}, 0x4800, 0xf, 0x0, 0x8, 0xde, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, r2, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 02:29:33 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek(r0, 0x0, 0x1) 02:29:33 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_setattr(0x0, &(0x7f0000000140)={0x38}, 0x0) 02:29:33 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001ff000400000000000003"], 0x28}}, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000001300)=[{0x0}], 0x0, &(0x7f0000000040)=ANY=[]) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 02:29:33 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x13, 0x0, 0x0) 02:29:33 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000580)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="26909bff000000000700000000a85700000000000000b9ca65a481d37a3f000000bafecaddf88c11e2fa8af08e9bc8bf1f7a78dd01b67ba20000000000000000000040e6aaf842b51f0572c7a30000000000000000010000000017339d754195234c002c9b6b5855f01810d6342740fec30fb235cc5b8ce24b9a731d623fb060d5abf288102142acae21a3268e36e97f058ad4eec8a4170f2d92c3d61b4c17ec21f8d5b0282087e70b30736232a088fd538212994fe73631f8caf43ff71688d470ddddb8bcb89d1ba2cf16307777416160921b5b730456d0c0fd9f5cc6e0a72e6c4e6e74f3f5491dfda80000000000000000"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/vlan/vlan0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000340)={0x2c, @private=0xa010102, 0x5e23, 0x4, 'wlc\x00', 0x17, 0x1, 0x5a}, 0x2c) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000280)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x490000, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x79, 0x1, 0x81, 0x2, 0x0, 0x4, 0x20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_config_ext={0x46, 0x7}, 0x4800, 0xf, 0x0, 0x8, 0xde, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, r2, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 02:29:33 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek(r0, 0x0, 0x1) 02:29:33 executing program 5: clock_nanosleep(0x1, 0x1, &(0x7f0000000a00), 0x0) 02:29:33 executing program 3: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0) finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 02:29:33 executing program 2: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0) finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 02:29:33 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000580)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="26909bff000000000700000000a85700000000000000b9ca65a481d37a3f000000bafecaddf88c11e2fa8af08e9bc8bf1f7a78dd01b67ba20000000000000000000040e6aaf842b51f0572c7a30000000000000000010000000017339d754195234c002c9b6b5855f01810d6342740fec30fb235cc5b8ce24b9a731d623fb060d5abf288102142acae21a3268e36e97f058ad4eec8a4170f2d92c3d61b4c17ec21f8d5b0282087e70b30736232a088fd538212994fe73631f8caf43ff71688d470ddddb8bcb89d1ba2cf16307777416160921b5b730456d0c0fd9f5cc6e0a72e6c4e6e74f3f5491dfda80000000000000000"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/vlan/vlan0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000340)={0x2c, @private=0xa010102, 0x5e23, 0x4, 'wlc\x00', 0x17, 0x1, 0x5a}, 0x2c) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000280)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x490000, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x79, 0x1, 0x81, 0x2, 0x0, 0x4, 0x20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_config_ext={0x46, 0x7}, 0x4800, 0xf, 0x0, 0x8, 0xde, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, r2, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 02:29:33 executing program 0: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0) finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 02:29:33 executing program 5: clock_nanosleep(0x1, 0x1, &(0x7f0000000a00), 0x0) 02:29:33 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x13, 0x0, 0x0) 02:29:33 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001ff000400000000000003"], 0x28}}, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000001300)=[{0x0}], 0x0, &(0x7f0000000040)=ANY=[]) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 02:29:33 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000580)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="26909bff000000000700000000a85700000000000000b9ca65a481d37a3f000000bafecaddf88c11e2fa8af08e9bc8bf1f7a78dd01b67ba20000000000000000000040e6aaf842b51f0572c7a30000000000000000010000000017339d754195234c002c9b6b5855f01810d6342740fec30fb235cc5b8ce24b9a731d623fb060d5abf288102142acae21a3268e36e97f058ad4eec8a4170f2d92c3d61b4c17ec21f8d5b0282087e70b30736232a088fd538212994fe73631f8caf43ff71688d470ddddb8bcb89d1ba2cf16307777416160921b5b730456d0c0fd9f5cc6e0a72e6c4e6e74f3f5491dfda80000000000000000"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/vlan/vlan0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000340)={0x2c, @private=0xa010102, 0x5e23, 0x4, 'wlc\x00', 0x17, 0x1, 0x5a}, 0x2c) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000280)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x490000, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x79, 0x1, 0x81, 0x2, 0x0, 0x4, 0x20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_config_ext={0x46, 0x7}, 0x4800, 0xf, 0x0, 0x8, 0xde, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, r2, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 249.458485] hrtimer: interrupt took 16100 ns 02:29:33 executing program 5: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0) finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 02:29:33 executing program 7: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0) finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 02:29:33 executing program 0: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0) finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 02:29:33 executing program 3: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0) finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 02:29:33 executing program 4: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0) finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 02:29:33 executing program 6: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001ff000400000000000003"], 0x28}}, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000001300)=[{0x0}], 0x0, &(0x7f0000000040)=ANY=[]) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 02:29:34 executing program 3: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0) finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 02:29:34 executing program 4: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0) finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 02:29:34 executing program 5: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0) finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 02:29:34 executing program 6: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001ff000400000000000003"], 0x28}}, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000001300)=[{0x0}], 0x0, &(0x7f0000000040)=ANY=[]) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 02:29:34 executing program 0: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0) finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 02:29:34 executing program 2: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0) finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 02:29:34 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000580)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="26909bff000000000700000000a85700000000000000b9ca65a481d37a3f000000bafecaddf88c11e2fa8af08e9bc8bf1f7a78dd01b67ba20000000000000000000040e6aaf842b51f0572c7a30000000000000000010000000017339d754195234c002c9b6b5855f01810d6342740fec30fb235cc5b8ce24b9a731d623fb060d5abf288102142acae21a3268e36e97f058ad4eec8a4170f2d92c3d61b4c17ec21f8d5b0282087e70b30736232a088fd538212994fe73631f8caf43ff71688d470ddddb8bcb89d1ba2cf16307777416160921b5b730456d0c0fd9f5cc6e0a72e6c4e6e74f3f5491dfda80000000000000000"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/vlan/vlan0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000340)={0x2c, @private=0xa010102, 0x5e23, 0x4, 'wlc\x00', 0x17, 0x1, 0x5a}, 0x2c) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000280)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x490000, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x79, 0x1, 0x81, 0x2, 0x0, 0x4, 0x20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_config_ext={0x46, 0x7}, 0x4800, 0xf, 0x0, 0x8, 0xde, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, r2, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 02:29:34 executing program 7: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0) finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 02:29:34 executing program 6: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001ff000400000000000003"], 0x28}}, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000001300)=[{0x0}], 0x0, &(0x7f0000000040)=ANY=[]) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 02:29:35 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000580)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="26909bff000000000700000000a85700000000000000b9ca65a481d37a3f000000bafecaddf88c11e2fa8af08e9bc8bf1f7a78dd01b67ba20000000000000000000040e6aaf842b51f0572c7a30000000000000000010000000017339d754195234c002c9b6b5855f01810d6342740fec30fb235cc5b8ce24b9a731d623fb060d5abf288102142acae21a3268e36e97f058ad4eec8a4170f2d92c3d61b4c17ec21f8d5b0282087e70b30736232a088fd538212994fe73631f8caf43ff71688d470ddddb8bcb89d1ba2cf16307777416160921b5b730456d0c0fd9f5cc6e0a72e6c4e6e74f3f5491dfda80000000000000000"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/vlan/vlan0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000340)={0x2c, @private=0xa010102, 0x5e23, 0x4, 'wlc\x00', 0x17, 0x1, 0x5a}, 0x2c) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000280)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x490000, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x79, 0x1, 0x81, 0x2, 0x0, 0x4, 0x20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_config_ext={0x46, 0x7}, 0x4800, 0xf, 0x0, 0x8, 0xde, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, r2, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 02:29:35 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000580)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="26909bff000000000700000000a85700000000000000b9ca65a481d37a3f000000bafecaddf88c11e2fa8af08e9bc8bf1f7a78dd01b67ba20000000000000000000040e6aaf842b51f0572c7a30000000000000000010000000017339d754195234c002c9b6b5855f01810d6342740fec30fb235cc5b8ce24b9a731d623fb060d5abf288102142acae21a3268e36e97f058ad4eec8a4170f2d92c3d61b4c17ec21f8d5b0282087e70b30736232a088fd538212994fe73631f8caf43ff71688d470ddddb8bcb89d1ba2cf16307777416160921b5b730456d0c0fd9f5cc6e0a72e6c4e6e74f3f5491dfda80000000000000000"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/vlan/vlan0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000340)={0x2c, @private=0xa010102, 0x5e23, 0x4, 'wlc\x00', 0x17, 0x1, 0x5a}, 0x2c) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000280)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x490000, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x79, 0x1, 0x81, 0x2, 0x0, 0x4, 0x20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_config_ext={0x46, 0x7}, 0x4800, 0xf, 0x0, 0x8, 0xde, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, r2, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 02:29:35 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000580)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="26909bff000000000700000000a85700000000000000b9ca65a481d37a3f000000bafecaddf88c11e2fa8af08e9bc8bf1f7a78dd01b67ba20000000000000000000040e6aaf842b51f0572c7a30000000000000000010000000017339d754195234c002c9b6b5855f01810d6342740fec30fb235cc5b8ce24b9a731d623fb060d5abf288102142acae21a3268e36e97f058ad4eec8a4170f2d92c3d61b4c17ec21f8d5b0282087e70b30736232a088fd538212994fe73631f8caf43ff71688d470ddddb8bcb89d1ba2cf16307777416160921b5b730456d0c0fd9f5cc6e0a72e6c4e6e74f3f5491dfda80000000000000000"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/vlan/vlan0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000340)={0x2c, @private=0xa010102, 0x5e23, 0x4, 'wlc\x00', 0x17, 0x1, 0x5a}, 0x2c) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000280)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x490000, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x79, 0x1, 0x81, 0x2, 0x0, 0x4, 0x20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_config_ext={0x46, 0x7}, 0x4800, 0xf, 0x0, 0x8, 0xde, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, r2, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 02:29:35 executing program 5: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0) finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 02:29:35 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000580)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="26909bff000000000700000000a85700000000000000b9ca65a481d37a3f000000bafecaddf88c11e2fa8af08e9bc8bf1f7a78dd01b67ba20000000000000000000040e6aaf842b51f0572c7a30000000000000000010000000017339d754195234c002c9b6b5855f01810d6342740fec30fb235cc5b8ce24b9a731d623fb060d5abf288102142acae21a3268e36e97f058ad4eec8a4170f2d92c3d61b4c17ec21f8d5b0282087e70b30736232a088fd538212994fe73631f8caf43ff71688d470ddddb8bcb89d1ba2cf16307777416160921b5b730456d0c0fd9f5cc6e0a72e6c4e6e74f3f5491dfda80000000000000000"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/vlan/vlan0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000340)={0x2c, @private=0xa010102, 0x5e23, 0x4, 'wlc\x00', 0x17, 0x1, 0x5a}, 0x2c) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000280)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x490000, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x79, 0x1, 0x81, 0x2, 0x0, 0x4, 0x20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_config_ext={0x46, 0x7}, 0x4800, 0xf, 0x0, 0x8, 0xde, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, r2, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 02:29:35 executing program 7: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0) finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 02:29:35 executing program 2: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0) finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 02:29:35 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000580)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="26909bff000000000700000000a85700000000000000b9ca65a481d37a3f000000bafecaddf88c11e2fa8af08e9bc8bf1f7a78dd01b67ba20000000000000000000040e6aaf842b51f0572c7a30000000000000000010000000017339d754195234c002c9b6b5855f01810d6342740fec30fb235cc5b8ce24b9a731d623fb060d5abf288102142acae21a3268e36e97f058ad4eec8a4170f2d92c3d61b4c17ec21f8d5b0282087e70b30736232a088fd538212994fe73631f8caf43ff71688d470ddddb8bcb89d1ba2cf16307777416160921b5b730456d0c0fd9f5cc6e0a72e6c4e6e74f3f5491dfda80000000000000000"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/vlan/vlan0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000340)={0x2c, @private=0xa010102, 0x5e23, 0x4, 'wlc\x00', 0x17, 0x1, 0x5a}, 0x2c) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000280)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x490000, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x79, 0x1, 0x81, 0x2, 0x0, 0x4, 0x20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_config_ext={0x46, 0x7}, 0x4800, 0xf, 0x0, 0x8, 0xde, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, r2, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 02:29:35 executing program 4: mlock2(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x90c83, 0x0) finit_module(r1, &(0x7f0000000100)='/,*\x00', 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2000000000000000}, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f0000000140)='/dev/loop-control\x00', 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 02:29:35 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000580)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="26909bff000000000700000000a85700000000000000b9ca65a481d37a3f000000bafecaddf88c11e2fa8af08e9bc8bf1f7a78dd01b67ba20000000000000000000040e6aaf842b51f0572c7a30000000000000000010000000017339d754195234c002c9b6b5855f01810d6342740fec30fb235cc5b8ce24b9a731d623fb060d5abf288102142acae21a3268e36e97f058ad4eec8a4170f2d92c3d61b4c17ec21f8d5b0282087e70b30736232a088fd538212994fe73631f8caf43ff71688d470ddddb8bcb89d1ba2cf16307777416160921b5b730456d0c0fd9f5cc6e0a72e6c4e6e74f3f5491dfda80000000000000000"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/vlan/vlan0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000340)={0x2c, @private=0xa010102, 0x5e23, 0x4, 'wlc\x00', 0x17, 0x1, 0x5a}, 0x2c) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000280)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x490000, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x79, 0x1, 0x81, 0x2, 0x0, 0x4, 0x20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_config_ext={0x46, 0x7}, 0x4800, 0xf, 0x0, 0x8, 0xde, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, r2, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 02:29:36 executing program 4: setitimer(0x1, 0x0, &(0x7f0000000080)) [ 251.973897] syz-executor.4 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 02:29:36 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() r1 = gettid() r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="20002773a500fedbff2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x40001) r3 = getpgid(0x0) ptrace(0x8, r3) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') 02:29:36 executing program 4: setitimer(0x1, 0x0, &(0x7f0000000080)) 02:29:36 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000580)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="26909bff000000000700000000a85700000000000000b9ca65a481d37a3f000000bafecaddf88c11e2fa8af08e9bc8bf1f7a78dd01b67ba20000000000000000000040e6aaf842b51f0572c7a30000000000000000010000000017339d754195234c002c9b6b5855f01810d6342740fec30fb235cc5b8ce24b9a731d623fb060d5abf288102142acae21a3268e36e97f058ad4eec8a4170f2d92c3d61b4c17ec21f8d5b0282087e70b30736232a088fd538212994fe73631f8caf43ff71688d470ddddb8bcb89d1ba2cf16307777416160921b5b730456d0c0fd9f5cc6e0a72e6c4e6e74f3f5491dfda80000000000000000"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/vlan/vlan0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000340)={0x2c, @private=0xa010102, 0x5e23, 0x4, 'wlc\x00', 0x17, 0x1, 0x5a}, 0x2c) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000280)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x490000, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x79, 0x1, 0x81, 0x2, 0x0, 0x4, 0x20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_config_ext={0x46, 0x7}, 0x4800, 0xf, 0x0, 0x8, 0xde, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, r2, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 02:29:36 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000580)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="26909bff000000000700000000a85700000000000000b9ca65a481d37a3f000000bafecaddf88c11e2fa8af08e9bc8bf1f7a78dd01b67ba20000000000000000000040e6aaf842b51f0572c7a30000000000000000010000000017339d754195234c002c9b6b5855f01810d6342740fec30fb235cc5b8ce24b9a731d623fb060d5abf288102142acae21a3268e36e97f058ad4eec8a4170f2d92c3d61b4c17ec21f8d5b0282087e70b30736232a088fd538212994fe73631f8caf43ff71688d470ddddb8bcb89d1ba2cf16307777416160921b5b730456d0c0fd9f5cc6e0a72e6c4e6e74f3f5491dfda80000000000000000"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/vlan/vlan0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000340)={0x2c, @private=0xa010102, 0x5e23, 0x4, 'wlc\x00', 0x17, 0x1, 0x5a}, 0x2c) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000280)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x490000, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x79, 0x1, 0x81, 0x2, 0x0, 0x4, 0x20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_config_ext={0x46, 0x7}, 0x4800, 0xf, 0x0, 0x8, 0xde, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, r2, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 02:29:36 executing program 4: setitimer(0x1, 0x0, &(0x7f0000000080)) 02:29:36 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000580)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="26909bff000000000700000000a85700000000000000b9ca65a481d37a3f000000bafecaddf88c11e2fa8af08e9bc8bf1f7a78dd01b67ba20000000000000000000040e6aaf842b51f0572c7a30000000000000000010000000017339d754195234c002c9b6b5855f01810d6342740fec30fb235cc5b8ce24b9a731d623fb060d5abf288102142acae21a3268e36e97f058ad4eec8a4170f2d92c3d61b4c17ec21f8d5b0282087e70b30736232a088fd538212994fe73631f8caf43ff71688d470ddddb8bcb89d1ba2cf16307777416160921b5b730456d0c0fd9f5cc6e0a72e6c4e6e74f3f5491dfda80000000000000000"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/vlan/vlan0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000340)={0x2c, @private=0xa010102, 0x5e23, 0x4, 'wlc\x00', 0x17, 0x1, 0x5a}, 0x2c) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000280)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x490000, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x79, 0x1, 0x81, 0x2, 0x0, 0x4, 0x20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_config_ext={0x46, 0x7}, 0x4800, 0xf, 0x0, 0x8, 0xde, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, r2, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 02:29:36 executing program 3: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r0, &(0x7f0000000b40), 0x48) 02:29:36 executing program 5: open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x0, 0x4, &(0x7f0000000900)=[{&(0x7f0000000440)="73aa47bf552cf3f1d750c71d41fa2bd54c76bf3a15a934534549811ecef6a5f18790ef2e765a7c3e67bd3de3da8488b68690cbe7227afe5a8a020eb4a44c0405887b259e9c8b8a11702f410b66c5869d62a126c1b85f40624f1f29f011cc222b2d21d28415", 0x65, 0x6}, {&(0x7f00000004c0)="28f128ad5ee4fbda15497d729cea33126671af2f5175c3b431506c4d950051c5aba036df15eea245655c11ca2ff098630eece5e1c86fcc74661067bd806ab8055b4941de5a752cc0310ff6bc3ee59462c42fb7a8a6a347532bb4cb610fa3168d", 0x60, 0x2}, {&(0x7f0000000540)="af7f50b049b1baa92f545095a2a6abb3bb1462d6840181047535aca0c6ba58ed2897aa73c37ad325614c2e218fd0b5a1d0e780eae0130f571924e8ad5e40e8df960abe1ec06e4b18f4c2d64dc08e74b77965f742f0417ef4a55c3724eb46a8ba26b8cb36616bf62bc4ad828e36e06b02923c50cc3ded47f4cf6dded234acb64f79214fcac8a8f8ed39ffbefa78a06bb6fea17660ab301f0cfc3cf832ebb637d582", 0xa1, 0x8001}, {&(0x7f0000000600)="8dde13d4e23b62eba255a02abea15c14b91135fce3", 0x15, 0xffff}], 0x808, &(0x7f00000009c0)={[{@utf8no}, {@uni_xlate}, {@nonumtail}], [{@fowner_eq}, {@uid_lt}, {@subj_type={'subj_type', 0x3d, '/dev/autofs\x00'}}, {@smackfsroot}, {@dont_measure}]}) 02:29:36 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000580)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="26909bff000000000700000000a85700000000000000b9ca65a481d37a3f000000bafecaddf88c11e2fa8af08e9bc8bf1f7a78dd01b67ba20000000000000000000040e6aaf842b51f0572c7a30000000000000000010000000017339d754195234c002c9b6b5855f01810d6342740fec30fb235cc5b8ce24b9a731d623fb060d5abf288102142acae21a3268e36e97f058ad4eec8a4170f2d92c3d61b4c17ec21f8d5b0282087e70b30736232a088fd538212994fe73631f8caf43ff71688d470ddddb8bcb89d1ba2cf16307777416160921b5b730456d0c0fd9f5cc6e0a72e6c4e6e74f3f5491dfda80000000000000000"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/vlan/vlan0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000340)={0x2c, @private=0xa010102, 0x5e23, 0x4, 'wlc\x00', 0x17, 0x1, 0x5a}, 0x2c) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000280)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x490000, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x79, 0x1, 0x81, 0x2, 0x0, 0x4, 0x20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_config_ext={0x46, 0x7}, 0x4800, 0xf, 0x0, 0x8, 0xde, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, r2, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 02:29:36 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000580)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="26909bff000000000700000000a85700000000000000b9ca65a481d37a3f000000bafecaddf88c11e2fa8af08e9bc8bf1f7a78dd01b67ba20000000000000000000040e6aaf842b51f0572c7a30000000000000000010000000017339d754195234c002c9b6b5855f01810d6342740fec30fb235cc5b8ce24b9a731d623fb060d5abf288102142acae21a3268e36e97f058ad4eec8a4170f2d92c3d61b4c17ec21f8d5b0282087e70b30736232a088fd538212994fe73631f8caf43ff71688d470ddddb8bcb89d1ba2cf16307777416160921b5b730456d0c0fd9f5cc6e0a72e6c4e6e74f3f5491dfda80000000000000000"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/vlan/vlan0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000340)={0x2c, @private=0xa010102, 0x5e23, 0x4, 'wlc\x00', 0x17, 0x1, 0x5a}, 0x2c) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000280)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x490000, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x79, 0x1, 0x81, 0x2, 0x0, 0x4, 0x20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_config_ext={0x46, 0x7}, 0x4800, 0xf, 0x0, 0x8, 0xde, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, r2, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 02:29:36 executing program 4: setitimer(0x1, 0x0, &(0x7f0000000080)) 02:29:36 executing program 3: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r0, &(0x7f0000000b40), 0x48) 02:29:36 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() r1 = gettid() r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="20002773a500fedbff2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x40001) r3 = getpgid(0x0) ptrace(0x8, r3) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') 02:29:36 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() r1 = gettid() r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="20002773a500fedbff2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x40001) r3 = getpgid(0x0) ptrace(0x8, r3) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') 02:29:36 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() r1 = gettid() r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="20002773a500fedbff2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x40001) r3 = getpgid(0x0) ptrace(0x8, r3) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') 02:29:36 executing program 5: open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x0, 0x4, &(0x7f0000000900)=[{&(0x7f0000000440)="73aa47bf552cf3f1d750c71d41fa2bd54c76bf3a15a934534549811ecef6a5f18790ef2e765a7c3e67bd3de3da8488b68690cbe7227afe5a8a020eb4a44c0405887b259e9c8b8a11702f410b66c5869d62a126c1b85f40624f1f29f011cc222b2d21d28415", 0x65, 0x6}, {&(0x7f00000004c0)="28f128ad5ee4fbda15497d729cea33126671af2f5175c3b431506c4d950051c5aba036df15eea245655c11ca2ff098630eece5e1c86fcc74661067bd806ab8055b4941de5a752cc0310ff6bc3ee59462c42fb7a8a6a347532bb4cb610fa3168d", 0x60, 0x2}, {&(0x7f0000000540)="af7f50b049b1baa92f545095a2a6abb3bb1462d6840181047535aca0c6ba58ed2897aa73c37ad325614c2e218fd0b5a1d0e780eae0130f571924e8ad5e40e8df960abe1ec06e4b18f4c2d64dc08e74b77965f742f0417ef4a55c3724eb46a8ba26b8cb36616bf62bc4ad828e36e06b02923c50cc3ded47f4cf6dded234acb64f79214fcac8a8f8ed39ffbefa78a06bb6fea17660ab301f0cfc3cf832ebb637d582", 0xa1, 0x8001}, {&(0x7f0000000600)="8dde13d4e23b62eba255a02abea15c14b91135fce3", 0x15, 0xffff}], 0x808, &(0x7f00000009c0)={[{@utf8no}, {@uni_xlate}, {@nonumtail}], [{@fowner_eq}, {@uid_lt}, {@subj_type={'subj_type', 0x3d, '/dev/autofs\x00'}}, {@smackfsroot}, {@dont_measure}]}) 02:29:36 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() r1 = gettid() r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="20002773a500fedbff2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x40001) r3 = getpgid(0x0) ptrace(0x8, r3) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') 02:29:36 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() r1 = gettid() r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="20002773a500fedbff2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x40001) r3 = getpgid(0x0) ptrace(0x8, r3) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') 02:29:36 executing program 5: open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x0, 0x4, &(0x7f0000000900)=[{&(0x7f0000000440)="73aa47bf552cf3f1d750c71d41fa2bd54c76bf3a15a934534549811ecef6a5f18790ef2e765a7c3e67bd3de3da8488b68690cbe7227afe5a8a020eb4a44c0405887b259e9c8b8a11702f410b66c5869d62a126c1b85f40624f1f29f011cc222b2d21d28415", 0x65, 0x6}, {&(0x7f00000004c0)="28f128ad5ee4fbda15497d729cea33126671af2f5175c3b431506c4d950051c5aba036df15eea245655c11ca2ff098630eece5e1c86fcc74661067bd806ab8055b4941de5a752cc0310ff6bc3ee59462c42fb7a8a6a347532bb4cb610fa3168d", 0x60, 0x2}, {&(0x7f0000000540)="af7f50b049b1baa92f545095a2a6abb3bb1462d6840181047535aca0c6ba58ed2897aa73c37ad325614c2e218fd0b5a1d0e780eae0130f571924e8ad5e40e8df960abe1ec06e4b18f4c2d64dc08e74b77965f742f0417ef4a55c3724eb46a8ba26b8cb36616bf62bc4ad828e36e06b02923c50cc3ded47f4cf6dded234acb64f79214fcac8a8f8ed39ffbefa78a06bb6fea17660ab301f0cfc3cf832ebb637d582", 0xa1, 0x8001}, {&(0x7f0000000600)="8dde13d4e23b62eba255a02abea15c14b91135fce3", 0x15, 0xffff}], 0x808, &(0x7f00000009c0)={[{@utf8no}, {@uni_xlate}, {@nonumtail}], [{@fowner_eq}, {@uid_lt}, {@subj_type={'subj_type', 0x3d, '/dev/autofs\x00'}}, {@smackfsroot}, {@dont_measure}]}) 02:29:36 executing program 3: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r0, &(0x7f0000000b40), 0x48) 02:29:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() r1 = gettid() r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="20002773a500fedbff2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x40001) r3 = getpgid(0x0) ptrace(0x8, r3) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') 02:29:36 executing program 5: open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x0, 0x4, &(0x7f0000000900)=[{&(0x7f0000000440)="73aa47bf552cf3f1d750c71d41fa2bd54c76bf3a15a934534549811ecef6a5f18790ef2e765a7c3e67bd3de3da8488b68690cbe7227afe5a8a020eb4a44c0405887b259e9c8b8a11702f410b66c5869d62a126c1b85f40624f1f29f011cc222b2d21d28415", 0x65, 0x6}, {&(0x7f00000004c0)="28f128ad5ee4fbda15497d729cea33126671af2f5175c3b431506c4d950051c5aba036df15eea245655c11ca2ff098630eece5e1c86fcc74661067bd806ab8055b4941de5a752cc0310ff6bc3ee59462c42fb7a8a6a347532bb4cb610fa3168d", 0x60, 0x2}, {&(0x7f0000000540)="af7f50b049b1baa92f545095a2a6abb3bb1462d6840181047535aca0c6ba58ed2897aa73c37ad325614c2e218fd0b5a1d0e780eae0130f571924e8ad5e40e8df960abe1ec06e4b18f4c2d64dc08e74b77965f742f0417ef4a55c3724eb46a8ba26b8cb36616bf62bc4ad828e36e06b02923c50cc3ded47f4cf6dded234acb64f79214fcac8a8f8ed39ffbefa78a06bb6fea17660ab301f0cfc3cf832ebb637d582", 0xa1, 0x8001}, {&(0x7f0000000600)="8dde13d4e23b62eba255a02abea15c14b91135fce3", 0x15, 0xffff}], 0x808, &(0x7f00000009c0)={[{@utf8no}, {@uni_xlate}, {@nonumtail}], [{@fowner_eq}, {@uid_lt}, {@subj_type={'subj_type', 0x3d, '/dev/autofs\x00'}}, {@smackfsroot}, {@dont_measure}]}) 02:29:36 executing program 3: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r0, &(0x7f0000000b40), 0x48) 02:29:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x6, &(0x7f0000000000), 0x4) 02:29:37 executing program 3: pivot_root(0x0, &(0x7f0000000480)='./file0\x00') msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000580)=""/187) 02:29:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x6, &(0x7f0000000000), 0x4) 02:29:37 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000001a80), 0xffffffffffffffff) 02:29:37 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() r1 = gettid() r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="20002773a500fedbff2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x40001) r3 = getpgid(0x0) ptrace(0x8, r3) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') 02:29:37 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() r1 = gettid() r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="20002773a500fedbff2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x40001) r3 = getpgid(0x0) ptrace(0x8, r3) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') 02:29:37 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() r1 = gettid() r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="20002773a500fedbff2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x40001) r3 = getpgid(0x0) ptrace(0x8, r3) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') 02:29:37 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() r1 = gettid() r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="20002773a500fedbff2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x40001) r3 = getpgid(0x0) ptrace(0x8, r3) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') 02:29:37 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() r1 = gettid() r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="20002773a500fedbff2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x40001) r3 = getpgid(0x0) ptrace(0x8, r3) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') 02:29:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x6, &(0x7f0000000000), 0x4) 02:29:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() r1 = gettid() r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="20002773a500fedbff2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x40001) r3 = getpgid(0x0) ptrace(0x8, r3) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') 02:29:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x6, &(0x7f0000000000), 0x4) 02:29:37 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x6}}) 02:29:37 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() r1 = gettid() r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="20002773a500fedbff2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x40001) r3 = getpgid(0x0) ptrace(0x8, r3) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') 02:29:37 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() r1 = gettid() r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="20002773a500fedbff2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x40001) r3 = getpgid(0x0) ptrace(0x8, r3) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') 02:29:37 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() r1 = gettid() r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="20002773a500fedbff2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x40001) r3 = getpgid(0x0) ptrace(0x8, r3) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') 02:29:37 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() r1 = gettid() r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="20002773a500fedbff2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x40001) r3 = getpgid(0x0) ptrace(0x8, r3) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') 02 VM DIAGNOSIS: 02:29:33 Registers: info registers vcpu 0 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823ba0b1 RDI=ffffffff8765a980 RBP=ffffffff8765a940 RSP=ffff88803fe3f690 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000038 R11=0000000000000001 R12=0000000000000038 R13=ffffffff8765a940 R14=0000000000000010 R15=ffffffff823ba0a0 RIP=ffffffff823ba109 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f80bc4df700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6e07685000 CR3=000000000dac6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f80bf0507c0 00007f80bf0507c8 YMM02=0000000000000000 0000000000000000 00007f80bf0507e0 00007f80bf0507c0 YMM03=0000000000000000 0000000000000000 00007f80bf0507c8 00007f80bf0507c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffffffff85b0770c RCX=ffffffff812a1ca8 RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff85b065d0 RBP=ffffed1002fe2e9b RSP=ffff888017f174c8 R8 =0000000000000000 R9 =ffffffff85b065d7 R10=0000000000000000 R11=0000000000000001 R12=ffffffff85407360 R13=0000000000000000 R14=ffffffff8544dac8 R15=0000000000000000 RIP=ffffffff812a2016 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007effaa5cc8c0 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7badc74f64 CR3=000000001771c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 000000000000002f 002f2e2e2f002e2e YMM01=0000000000000000 0000000000000000 0000000000000000 696c61766e49002f YMM02=0000000000000000 0000000000000000 ffffffffffffff0f 0e0d0c0b0a090807 YMM03=0000000000000000 0000000000000000 0000561578003075 70632f302f716d2f YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000561578bb55f0 0000000400000002 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 2f63697361622f63 72732f2e2e000d0a YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000