Warning: Permanently added '[localhost]:58949' (ECDSA) to the list of known hosts. 2022/09/28 02:44:02 fuzzer started 2022/09/28 02:44:03 dialing manager at localhost:35827 syzkaller login: [ 44.207856] cgroup: Unknown subsys name 'net' [ 44.285162] cgroup: Unknown subsys name 'rlimit' 2022/09/28 02:44:18 syscalls: 2215 2022/09/28 02:44:18 code coverage: enabled 2022/09/28 02:44:18 comparison tracing: enabled 2022/09/28 02:44:18 extra coverage: enabled 2022/09/28 02:44:18 setuid sandbox: enabled 2022/09/28 02:44:18 namespace sandbox: enabled 2022/09/28 02:44:18 Android sandbox: enabled 2022/09/28 02:44:18 fault injection: enabled 2022/09/28 02:44:18 leak checking: enabled 2022/09/28 02:44:18 net packet injection: enabled 2022/09/28 02:44:18 net device setup: enabled 2022/09/28 02:44:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/28 02:44:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/28 02:44:18 USB emulation: enabled 2022/09/28 02:44:18 hci packet injection: enabled 2022/09/28 02:44:18 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220927) 2022/09/28 02:44:18 802.15.4 emulation: enabled 2022/09/28 02:44:18 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/28 02:44:18 fetching corpus: 50, signal 31169/34237 (executing program) 2022/09/28 02:44:18 fetching corpus: 100, signal 39983/44176 (executing program) 2022/09/28 02:44:19 fetching corpus: 150, signal 47956/53064 (executing program) 2022/09/28 02:44:19 fetching corpus: 200, signal 56338/62096 (executing program) 2022/09/28 02:44:19 fetching corpus: 250, signal 61018/67500 (executing program) 2022/09/28 02:44:19 fetching corpus: 300, signal 65154/72217 (executing program) 2022/09/28 02:44:19 fetching corpus: 350, signal 67599/75385 (executing program) 2022/09/28 02:44:19 fetching corpus: 400, signal 69901/78330 (executing program) 2022/09/28 02:44:19 fetching corpus: 450, signal 72487/81414 (executing program) 2022/09/28 02:44:19 fetching corpus: 499, signal 75911/85196 (executing program) 2022/09/28 02:44:20 fetching corpus: 548, signal 79282/88836 (executing program) 2022/09/28 02:44:20 fetching corpus: 598, signal 82294/92029 (executing program) 2022/09/28 02:44:20 fetching corpus: 648, signal 84571/94651 (executing program) 2022/09/28 02:44:20 fetching corpus: 698, signal 86132/96600 (executing program) 2022/09/28 02:44:20 fetching corpus: 747, signal 88423/99039 (executing program) 2022/09/28 02:44:20 fetching corpus: 796, signal 91239/101762 (executing program) 2022/09/28 02:44:20 fetching corpus: 845, signal 92638/103388 (executing program) 2022/09/28 02:44:20 fetching corpus: 895, signal 96196/106479 (executing program) 2022/09/28 02:44:21 fetching corpus: 945, signal 98539/108605 (executing program) 2022/09/28 02:44:21 fetching corpus: 994, signal 99854/110025 (executing program) 2022/09/28 02:44:21 fetching corpus: 1043, signal 101276/111471 (executing program) 2022/09/28 02:44:21 fetching corpus: 1092, signal 102386/112674 (executing program) 2022/09/28 02:44:21 fetching corpus: 1141, signal 104053/114190 (executing program) 2022/09/28 02:44:21 fetching corpus: 1189, signal 105167/115317 (executing program) 2022/09/28 02:44:21 fetching corpus: 1238, signal 106832/116749 (executing program) 2022/09/28 02:44:21 fetching corpus: 1288, signal 108764/118264 (executing program) 2022/09/28 02:44:22 fetching corpus: 1338, signal 110181/119446 (executing program) 2022/09/28 02:44:22 fetching corpus: 1388, signal 111455/120529 (executing program) 2022/09/28 02:44:22 fetching corpus: 1438, signal 113810/122047 (executing program) 2022/09/28 02:44:22 fetching corpus: 1488, signal 115121/123043 (executing program) 2022/09/28 02:44:22 fetching corpus: 1538, signal 117970/124711 (executing program) 2022/09/28 02:44:22 fetching corpus: 1588, signal 118802/125349 (executing program) 2022/09/28 02:44:22 fetching corpus: 1638, signal 120830/126628 (executing program) 2022/09/28 02:44:22 fetching corpus: 1688, signal 122445/127608 (executing program) 2022/09/28 02:44:22 fetching corpus: 1738, signal 123855/128410 (executing program) 2022/09/28 02:44:23 fetching corpus: 1788, signal 125852/129678 (executing program) 2022/09/28 02:44:23 fetching corpus: 1838, signal 127751/130651 (executing program) 2022/09/28 02:44:23 fetching corpus: 1847, signal 127794/130751 (executing program) 2022/09/28 02:44:23 fetching corpus: 1847, signal 127794/130840 (executing program) 2022/09/28 02:44:23 fetching corpus: 1847, signal 127794/130937 (executing program) 2022/09/28 02:44:23 fetching corpus: 1847, signal 127794/131008 (executing program) 2022/09/28 02:44:23 fetching corpus: 1847, signal 127794/131083 (executing program) 2022/09/28 02:44:23 fetching corpus: 1847, signal 127794/131146 (executing program) 2022/09/28 02:44:23 fetching corpus: 1847, signal 127794/131214 (executing program) 2022/09/28 02:44:23 fetching corpus: 1847, signal 127794/131307 (executing program) 2022/09/28 02:44:23 fetching corpus: 1847, signal 127794/131391 (executing program) 2022/09/28 02:44:23 fetching corpus: 1847, signal 127794/131475 (executing program) 2022/09/28 02:44:23 fetching corpus: 1847, signal 127794/131555 (executing program) 2022/09/28 02:44:23 fetching corpus: 1847, signal 127794/131624 (executing program) 2022/09/28 02:44:23 fetching corpus: 1847, signal 127794/131693 (executing program) 2022/09/28 02:44:23 fetching corpus: 1847, signal 127794/131780 (executing program) 2022/09/28 02:44:23 fetching corpus: 1847, signal 127794/131871 (executing program) 2022/09/28 02:44:23 fetching corpus: 1847, signal 127794/131951 (executing program) 2022/09/28 02:44:23 fetching corpus: 1847, signal 127794/132045 (executing program) 2022/09/28 02:44:23 fetching corpus: 1847, signal 127794/132122 (executing program) 2022/09/28 02:44:23 fetching corpus: 1847, signal 127794/132189 (executing program) 2022/09/28 02:44:23 fetching corpus: 1847, signal 127794/132267 (executing program) 2022/09/28 02:44:23 fetching corpus: 1847, signal 127794/132339 (executing program) 2022/09/28 02:44:23 fetching corpus: 1847, signal 127794/132415 (executing program) 2022/09/28 02:44:23 fetching corpus: 1847, signal 127794/132496 (executing program) 2022/09/28 02:44:23 fetching corpus: 1847, signal 127794/132566 (executing program) 2022/09/28 02:44:23 fetching corpus: 1847, signal 127794/132661 (executing program) 2022/09/28 02:44:23 fetching corpus: 1847, signal 127794/132733 (executing program) 2022/09/28 02:44:23 fetching corpus: 1847, signal 127794/132772 (executing program) 2022/09/28 02:44:23 fetching corpus: 1847, signal 127794/132772 (executing program) 2022/09/28 02:44:26 starting 8 fuzzer processes 02:44:26 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getscheduler(0x0) 02:44:26 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 02:44:26 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x0) 02:44:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff21, &(0x7f00000004c0)={&(0x7f0000000700)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) 02:44:26 executing program 4: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000800)) [ 67.206792] audit: type=1400 audit(1664333066.501:6): avc: denied { execmem } for pid=289 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 02:44:26 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "36a867308a07d89ba21343cf0f84149dd8318ec2749df11b4bb470b5345528e2ba7b122345b7a6971120a38ce09a43c104c50170bd8aad6b6519623d2c0ce836"}, 0x48, 0xfffffffffffffffe) keyctl$reject(0x13, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000340)='#].,+,*{![\\:}}&\x00', 0x0) keyctl$describe(0x6, r0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f00000006c0)='%+}\x99[%\x11&\x00', 0x0) request_key(0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) 02:44:26 executing program 6: execveat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x0, 0x0, 0x0) 02:44:26 executing program 7: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10000, 0x0, &(0x7f0000000240), 0x8000, &(0x7f0000000280)={[{@fat=@nfs}], [{@smackfsdef}, {@hash}, {@fowner_gt={'fowner>', 0xee00}}, {@euid_eq={'euid', 0x3d, 0xee01}}]}) [ 68.617647] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 68.619370] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.621474] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.623417] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 68.624618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 68.625661] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.627387] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 68.629215] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.631142] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.632439] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 68.633548] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 68.635184] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.636726] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 68.638154] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 68.639054] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.640620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.646740] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.647004] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.648272] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 68.649843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 68.652529] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.654110] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.655874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.657345] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 68.658568] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 68.659955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.660988] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 68.663622] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 68.664296] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.665143] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 68.665930] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 68.670900] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.670924] Bluetooth: hci4: HCI_REQ-0x0c1a [ 68.672062] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.673861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.674984] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.676082] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.679631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.680759] Bluetooth: hci6: HCI_REQ-0x0c1a [ 68.682036] Bluetooth: hci7: HCI_REQ-0x0c1a [ 68.693610] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.694324] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.698340] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.700473] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.704220] Bluetooth: hci0: HCI_REQ-0x0c1a [ 68.706132] Bluetooth: hci2: HCI_REQ-0x0c1a [ 68.711308] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.712902] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.717910] Bluetooth: hci1: HCI_REQ-0x0c1a [ 68.726685] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 68.729150] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 68.730692] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 68.735576] Bluetooth: hci5: HCI_REQ-0x0c1a [ 68.744336] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.746107] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.750944] Bluetooth: hci3: HCI_REQ-0x0c1a [ 70.713230] Bluetooth: hci4: command 0x0409 tx timeout [ 70.713242] Bluetooth: hci0: command 0x0409 tx timeout [ 70.714220] Bluetooth: hci6: command 0x0409 tx timeout [ 70.714671] Bluetooth: hci7: command 0x0409 tx timeout [ 70.776881] Bluetooth: hci5: command 0x0409 tx timeout [ 70.778086] Bluetooth: hci3: command 0x0409 tx timeout [ 70.778587] Bluetooth: hci1: command 0x0409 tx timeout [ 70.779117] Bluetooth: hci2: command 0x0409 tx timeout [ 72.760925] Bluetooth: hci7: command 0x041b tx timeout [ 72.761391] Bluetooth: hci6: command 0x041b tx timeout [ 72.761789] Bluetooth: hci0: command 0x041b tx timeout [ 72.762226] Bluetooth: hci4: command 0x041b tx timeout [ 72.824949] Bluetooth: hci2: command 0x041b tx timeout [ 72.825365] Bluetooth: hci1: command 0x041b tx timeout [ 72.825763] Bluetooth: hci3: command 0x041b tx timeout [ 72.826193] Bluetooth: hci5: command 0x041b tx timeout [ 74.809902] Bluetooth: hci4: command 0x040f tx timeout [ 74.810363] Bluetooth: hci0: command 0x040f tx timeout [ 74.810762] Bluetooth: hci6: command 0x040f tx timeout [ 74.811210] Bluetooth: hci7: command 0x040f tx timeout [ 74.873030] Bluetooth: hci5: command 0x040f tx timeout [ 74.873442] Bluetooth: hci3: command 0x040f tx timeout [ 74.873860] Bluetooth: hci1: command 0x040f tx timeout [ 74.874258] Bluetooth: hci2: command 0x040f tx timeout [ 76.856886] Bluetooth: hci7: command 0x0419 tx timeout [ 76.857355] Bluetooth: hci6: command 0x0419 tx timeout [ 76.857755] Bluetooth: hci0: command 0x0419 tx timeout [ 76.858189] Bluetooth: hci4: command 0x0419 tx timeout [ 76.920925] Bluetooth: hci2: command 0x0419 tx timeout [ 76.921365] Bluetooth: hci1: command 0x0419 tx timeout [ 76.921769] Bluetooth: hci3: command 0x0419 tx timeout [ 76.922229] Bluetooth: hci5: command 0x0419 tx timeout 02:45:24 executing program 4: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000800)) 02:45:24 executing program 4: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000800)) 02:45:25 executing program 4: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000800)) 02:45:25 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 02:45:25 executing program 4: r0 = memfd_create(&(0x7f0000000400)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x6) fcntl$addseals(r0, 0x40a, 0x0) 02:45:25 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 02:45:25 executing program 4: r0 = memfd_create(&(0x7f0000000400)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x6) fcntl$addseals(r0, 0x40a, 0x0) 02:45:25 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 126.086743] process 'syz-executor.6' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 126.543223] loop7: detected capacity change from 0 to 128 [ 126.552870] loop7: detected capacity change from 0 to 128 [ 126.698875] audit: type=1400 audit(1664333125.993:7): avc: denied { open } for pid=3962 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 126.701503] audit: type=1400 audit(1664333125.993:8): avc: denied { kernel } for pid=3962 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 126.715475] ------------[ cut here ]------------ [ 126.715499] [ 126.715502] ====================================================== [ 126.715506] WARNING: possible circular locking dependency detected [ 126.715510] 6.0.0-rc7-next-20220927 #1 Not tainted [ 126.715517] ------------------------------------------------------ [ 126.715520] syz-executor.0/3963 is trying to acquire lock: [ 126.715527] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 126.715570] [ 126.715570] but task is already holding lock: [ 126.715573] ffff88803de9cc20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 126.715602] [ 126.715602] which lock already depends on the new lock. [ 126.715602] [ 126.715605] [ 126.715605] the existing dependency chain (in reverse order) is: [ 126.715609] [ 126.715609] -> #3 (&ctx->lock){....}-{2:2}: [ 126.715623] _raw_spin_lock+0x2a/0x40 [ 126.715636] __perf_event_task_sched_out+0x53b/0x18d0 [ 126.715649] __schedule+0xedd/0x2470 [ 126.715665] schedule+0xda/0x1b0 [ 126.715686] exit_to_user_mode_prepare+0x114/0x1a0 [ 126.715699] syscall_exit_to_user_mode+0x19/0x40 [ 126.715713] do_syscall_64+0x48/0x90 [ 126.715724] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.715739] [ 126.715739] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 126.715752] _raw_spin_lock_nested+0x30/0x40 [ 126.715765] raw_spin_rq_lock_nested+0x1e/0x30 [ 126.715779] task_fork_fair+0x63/0x4d0 [ 126.715798] sched_cgroup_fork+0x3d0/0x540 [ 126.715812] copy_process+0x4183/0x6e20 [ 126.715823] kernel_clone+0xe7/0x890 [ 126.715832] user_mode_thread+0xad/0xf0 [ 126.715843] rest_init+0x24/0x250 [ 126.715856] arch_call_rest_init+0xf/0x14 [ 126.715871] start_kernel+0x4c6/0x4eb [ 126.715883] secondary_startup_64_no_verify+0xe0/0xeb [ 126.715897] [ 126.715897] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 126.715910] _raw_spin_lock_irqsave+0x39/0x60 [ 126.715923] try_to_wake_up+0xab/0x1930 [ 126.715936] up+0x75/0xb0 [ 126.715952] __up_console_sem+0x6e/0x80 [ 126.715968] console_unlock+0x46a/0x590 [ 126.715984] do_con_write+0xc05/0x1d50 [ 126.715996] con_write+0x21/0x40 [ 126.716007] n_tty_write+0x4d4/0xfe0 [ 126.716021] file_tty_write.constprop.0+0x455/0x8a0 [ 126.716034] vfs_write+0x9c3/0xd90 [ 126.716054] ksys_write+0x127/0x250 [ 126.716062] do_syscall_64+0x3b/0x90 [ 126.716072] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.716087] [ 126.716087] -> #0 ((console_sem).lock){....}-{2:2}: [ 126.716100] __lock_acquire+0x2a02/0x5e70 [ 126.716117] lock_acquire+0x1a2/0x530 [ 126.716133] _raw_spin_lock_irqsave+0x39/0x60 [ 126.716145] down_trylock+0xe/0x70 [ 126.716161] __down_trylock_console_sem+0x3b/0xd0 [ 126.716177] vprintk_emit+0x16b/0x560 [ 126.716194] vprintk+0x84/0xa0 [ 126.716209] _printk+0xba/0xf1 [ 126.716222] report_bug.cold+0x72/0xab [ 126.716233] handle_bug+0x3c/0x70 [ 126.716243] exc_invalid_op+0x14/0x50 [ 126.716253] asm_exc_invalid_op+0x16/0x20 [ 126.716266] group_sched_out.part.0+0x2c7/0x460 [ 126.716278] ctx_sched_out+0x8f1/0xc10 [ 126.716288] __perf_event_task_sched_out+0x6d0/0x18d0 [ 126.716301] __schedule+0xedd/0x2470 [ 126.716316] schedule+0xda/0x1b0 [ 126.716330] exit_to_user_mode_prepare+0x114/0x1a0 [ 126.716341] syscall_exit_to_user_mode+0x19/0x40 [ 126.716355] do_syscall_64+0x48/0x90 [ 126.716365] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.716379] [ 126.716379] other info that might help us debug this: [ 126.716379] [ 126.716382] Chain exists of: [ 126.716382] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 126.716382] [ 126.716397] Possible unsafe locking scenario: [ 126.716397] [ 126.716399] CPU0 CPU1 [ 126.716402] ---- ---- [ 126.716404] lock(&ctx->lock); [ 126.716410] lock(&rq->__lock); [ 126.716417] lock(&ctx->lock); [ 126.716423] lock((console_sem).lock); [ 126.716428] [ 126.716428] *** DEADLOCK *** [ 126.716428] [ 126.716430] 2 locks held by syz-executor.0/3963: [ 126.716437] #0: ffff88806ce37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 126.716468] #1: ffff88803de9cc20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 126.716496] [ 126.716496] stack backtrace: [ 126.716499] CPU: 0 PID: 3963 Comm: syz-executor.0 Not tainted 6.0.0-rc7-next-20220927 #1 [ 126.716512] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 126.716520] Call Trace: [ 126.716524] [ 126.716528] dump_stack_lvl+0x8b/0xb3 [ 126.716540] check_noncircular+0x263/0x2e0 [ 126.716557] ? format_decode+0x26c/0xb50 [ 126.716576] ? print_circular_bug+0x450/0x450 [ 126.716593] ? enable_ptr_key_workfn+0x20/0x20 [ 126.716611] ? perf_trace_lock+0x308/0x560 [ 126.716625] ? format_decode+0x26c/0xb50 [ 126.716644] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 126.716663] __lock_acquire+0x2a02/0x5e70 [ 126.716686] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 126.716710] lock_acquire+0x1a2/0x530 [ 126.716727] ? down_trylock+0xe/0x70 [ 126.716746] ? lock_release+0x750/0x750 [ 126.716768] ? vprintk+0x84/0xa0 [ 126.716786] _raw_spin_lock_irqsave+0x39/0x60 [ 126.716799] ? down_trylock+0xe/0x70 [ 126.716817] down_trylock+0xe/0x70 [ 126.716834] ? vprintk+0x84/0xa0 [ 126.716851] __down_trylock_console_sem+0x3b/0xd0 [ 126.716868] vprintk_emit+0x16b/0x560 [ 126.716888] vprintk+0x84/0xa0 [ 126.716905] _printk+0xba/0xf1 [ 126.716918] ? record_print_text.cold+0x16/0x16 [ 126.716937] ? report_bug.cold+0x66/0xab [ 126.716949] ? group_sched_out.part.0+0x2c7/0x460 [ 126.716961] report_bug.cold+0x72/0xab [ 126.716974] handle_bug+0x3c/0x70 [ 126.716985] exc_invalid_op+0x14/0x50 [ 126.716997] asm_exc_invalid_op+0x16/0x20 [ 126.717011] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 126.717025] Code: 5e 41 5f e9 ab a9 ef ff e8 a6 a9 ef ff 65 8b 1d 1b 0f ac 7e 31 ff 89 de e8 46 a6 ef ff 85 db 0f 84 8a 00 00 00 e8 89 a9 ef ff <0f> 0b e9 a5 fe ff ff e8 7d a9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 126.717036] RSP: 0018:ffff88803f9c7c48 EFLAGS: 00010006 [ 126.717045] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 126.717053] RDX: ffff88803f679ac0 RSI: ffffffff815666b7 RDI: 0000000000000005 [ 126.717061] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 126.717068] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88803de9cc00 [ 126.717076] R13: ffff88806ce3d140 R14: ffffffff8547cf80 R15: 0000000000000002 [ 126.717088] ? group_sched_out.part.0+0x2c7/0x460 [ 126.717102] ? group_sched_out.part.0+0x2c7/0x460 [ 126.717116] ctx_sched_out+0x8f1/0xc10 [ 126.717130] __perf_event_task_sched_out+0x6d0/0x18d0 [ 126.717147] ? lock_is_held_type+0xd7/0x130 [ 126.717163] ? __perf_cgroup_move+0x160/0x160 [ 126.717175] ? set_next_entity+0x304/0x550 [ 126.717193] ? update_curr+0x267/0x740 [ 126.717212] ? lock_is_held_type+0xd7/0x130 [ 126.717228] __schedule+0xedd/0x2470 [ 126.717248] ? io_schedule_timeout+0x150/0x150 [ 126.717266] ? __x64_sys_futex_time32+0x480/0x480 [ 126.717282] schedule+0xda/0x1b0 [ 126.717299] exit_to_user_mode_prepare+0x114/0x1a0 [ 126.717311] syscall_exit_to_user_mode+0x19/0x40 [ 126.717326] do_syscall_64+0x48/0x90 [ 126.717338] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.717353] RIP: 0033:0x7f9302263b19 [ 126.717361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 126.717372] RSP: 002b:00007f92ff7d9218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 126.717383] RAX: 0000000000000001 RBX: 00007f9302376f68 RCX: 00007f9302263b19 [ 126.717390] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9302376f6c [ 126.717398] RBP: 00007f9302376f60 R08: 000000000000000e R09: 0000000000000000 [ 126.717405] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f9302376f6c [ 126.717412] R13: 00007fff32f15e0f R14: 00007f92ff7d9300 R15: 0000000000022000 [ 126.717427] [ 126.774485] WARNING: CPU: 0 PID: 3963 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 126.775164] Modules linked in: [ 126.775406] CPU: 0 PID: 3963 Comm: syz-executor.0 Not tainted 6.0.0-rc7-next-20220927 #1 [ 126.776014] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 126.776837] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 126.777241] Code: 5e 41 5f e9 ab a9 ef ff e8 a6 a9 ef ff 65 8b 1d 1b 0f ac 7e 31 ff 89 de e8 46 a6 ef ff 85 db 0f 84 8a 00 00 00 e8 89 a9 ef ff <0f> 0b e9 a5 fe ff ff e8 7d a9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 126.778565] RSP: 0018:ffff88803f9c7c48 EFLAGS: 00010006 [ 126.778971] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 126.779492] RDX: ffff88803f679ac0 RSI: ffffffff815666b7 RDI: 0000000000000005 [ 126.780028] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 126.780547] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88803de9cc00 [ 126.781082] R13: ffff88806ce3d140 R14: ffffffff8547cf80 R15: 0000000000000002 [ 126.781602] FS: 00007f92ff7d9700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 126.782212] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.782636] CR2: 00007f739fdf8820 CR3: 0000000019c0c000 CR4: 0000000000350ef0 [ 126.783171] Call Trace: [ 126.783365] [ 126.783541] ctx_sched_out+0x8f1/0xc10 [ 126.783840] __perf_event_task_sched_out+0x6d0/0x18d0 [ 126.784233] ? lock_is_held_type+0xd7/0x130 [ 126.784556] ? __perf_cgroup_move+0x160/0x160 [ 126.784889] ? set_next_entity+0x304/0x550 [ 126.785208] ? update_curr+0x267/0x740 [ 126.785507] ? lock_is_held_type+0xd7/0x130 [ 126.785834] __schedule+0xedd/0x2470 [ 126.786122] ? io_schedule_timeout+0x150/0x150 [ 126.786469] ? __x64_sys_futex_time32+0x480/0x480 [ 126.786825] schedule+0xda/0x1b0 [ 126.787085] exit_to_user_mode_prepare+0x114/0x1a0 [ 126.787451] syscall_exit_to_user_mode+0x19/0x40 [ 126.787820] do_syscall_64+0x48/0x90 [ 126.788100] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.788481] RIP: 0033:0x7f9302263b19 [ 126.788759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 126.790078] RSP: 002b:00007f92ff7d9218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 126.790633] RAX: 0000000000000001 RBX: 00007f9302376f68 RCX: 00007f9302263b19 [ 126.791144] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9302376f6c [ 126.791667] RBP: 00007f9302376f60 R08: 000000000000000e R09: 0000000000000000 [ 126.792192] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f9302376f6c [ 126.792724] R13: 00007fff32f15e0f R14: 00007f92ff7d9300 R15: 0000000000022000 [ 126.793252] [ 126.793428] irq event stamp: 568 [ 126.793673] hardirqs last enabled at (567): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 126.794351] hardirqs last disabled at (568): [] __schedule+0x1225/0x2470 [ 126.794964] softirqs last enabled at (352): [] __irq_exit_rcu+0x11b/0x180 [ 126.795597] softirqs last disabled at (347): [] __irq_exit_rcu+0x11b/0x180 [ 126.796243] ---[ end trace 0000000000000000 ]--- 02:45:26 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getscheduler(0x0) 02:45:26 executing program 4: r0 = memfd_create(&(0x7f0000000400)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x6) fcntl$addseals(r0, 0x40a, 0x0) 02:45:26 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x0) 02:45:26 executing program 6: getcwd(&(0x7f0000000040)=""/182, 0xb6) 02:45:26 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x50, 0x0, &(0x7f0000000140)=[@decrefs={0x40046307, 0x3}, @exit_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0xb, 0x1}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/123, 0x7b, 0x1, 0x37}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0xf7, 0x0, &(0x7f00000001c0)="1242ae64edd1fc56532dbdd3d9efbe9904aadce6623e6041819ebabf9bdb03e1420ffbc2e0fc2b16c0024e0ef7dea93bc4b1c4aafd79f32bfe43852b60538c8272d8c31c3dbab24c1f9199495a5f3469b2f5403a9e25b124d735b2bbcfb6133630a6b492a60a5b92ef1220a8af5a1fb20b87357c6ae547dc164e74e219d311a8d88d20e1106b2f73dbb596252fc18f43c405d11df8e074accbd6af7e3b5ecd35e4de37722068bd3a93bd84f56bdd20aca87f03f8bef49a2c84d6928fe63893030723f945bea21b35e9721c7cf69717c2966126313146f896f8e8fc0ede620c323f6015a29d2333c2ee195ddce8cb4d54dea36e1b40b060"}) r0 = fork() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x3}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = fork() r2 = syz_open_procfs$namespace(r1, &(0x7f0000000340)='ns/uts\x00') ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000380)={0x7f, {0x24, 0x3, 0xf6c, 0x4, 0x200}}) r3 = io_uring_setup(0x5b5e, &(0x7f00000003c0)={0x0, 0x71da, 0x4, 0x2, 0x357}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x8010, r3, 0x8000000) r4 = openat$null(0xffffffffffffff9c, 0xfffffffffffffffd, 0x68000, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000440)={0x1, 0x3, 0x19}) openat$hpet(0xffffffffffffff9c, &(0x7f0000000480), 0x840, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/uts\x00') 02:45:26 executing program 7: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10000, 0x0, &(0x7f0000000240), 0x8000, &(0x7f0000000280)={[{@fat=@nfs}], [{@smackfsdef}, {@hash}, {@fowner_gt={'fowner>', 0xee00}}, {@euid_eq={'euid', 0x3d, 0xee01}}]}) 02:45:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff21, &(0x7f00000004c0)={&(0x7f0000000700)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) 02:45:26 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "36a867308a07d89ba21343cf0f84149dd8318ec2749df11b4bb470b5345528e2ba7b122345b7a6971120a38ce09a43c104c50170bd8aad6b6519623d2c0ce836"}, 0x48, 0xfffffffffffffffe) keyctl$reject(0x13, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000340)='#].,+,*{![\\:}}&\x00', 0x0) keyctl$describe(0x6, r0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f00000006c0)='%+}\x99[%\x11&\x00', 0x0) request_key(0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) [ 127.208752] loop7: detected capacity change from 0 to 128 02:45:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff21, &(0x7f00000004c0)={&(0x7f0000000700)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) 02:45:26 executing program 6: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "36a867308a07d89ba21343cf0f84149dd8318ec2749df11b4bb470b5345528e2ba7b122345b7a6971120a38ce09a43c104c50170bd8aad6b6519623d2c0ce836"}, 0x48, 0xfffffffffffffffe) keyctl$reject(0x13, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000340)='#].,+,*{![\\:}}&\x00', 0x0) keyctl$describe(0x6, r0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f00000006c0)='%+}\x99[%\x11&\x00', 0x0) request_key(0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) 02:45:26 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getscheduler(0x0) 02:45:26 executing program 4: r0 = memfd_create(&(0x7f0000000400)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9\xbb\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\xa4\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x6) fcntl$addseals(r0, 0x40a, 0x0) 02:45:26 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x0) 02:45:26 executing program 7: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10000, 0x0, &(0x7f0000000240), 0x8000, &(0x7f0000000280)={[{@fat=@nfs}], [{@smackfsdef}, {@hash}, {@fowner_gt={'fowner>', 0xee00}}, {@euid_eq={'euid', 0x3d, 0xee01}}]}) 02:45:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff21, &(0x7f00000004c0)={&(0x7f0000000700)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) 02:45:26 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "36a867308a07d89ba21343cf0f84149dd8318ec2749df11b4bb470b5345528e2ba7b122345b7a6971120a38ce09a43c104c50170bd8aad6b6519623d2c0ce836"}, 0x48, 0xfffffffffffffffe) keyctl$reject(0x13, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000340)='#].,+,*{![\\:}}&\x00', 0x0) keyctl$describe(0x6, r0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f00000006c0)='%+}\x99[%\x11&\x00', 0x0) request_key(0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) 02:45:26 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x50, 0x0, &(0x7f0000000140)=[@decrefs={0x40046307, 0x3}, @exit_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0xb, 0x1}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/123, 0x7b, 0x1, 0x37}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0xf7, 0x0, &(0x7f00000001c0)="1242ae64edd1fc56532dbdd3d9efbe9904aadce6623e6041819ebabf9bdb03e1420ffbc2e0fc2b16c0024e0ef7dea93bc4b1c4aafd79f32bfe43852b60538c8272d8c31c3dbab24c1f9199495a5f3469b2f5403a9e25b124d735b2bbcfb6133630a6b492a60a5b92ef1220a8af5a1fb20b87357c6ae547dc164e74e219d311a8d88d20e1106b2f73dbb596252fc18f43c405d11df8e074accbd6af7e3b5ecd35e4de37722068bd3a93bd84f56bdd20aca87f03f8bef49a2c84d6928fe63893030723f945bea21b35e9721c7cf69717c2966126313146f896f8e8fc0ede620c323f6015a29d2333c2ee195ddce8cb4d54dea36e1b40b060"}) r0 = fork() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x3}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = fork() r2 = syz_open_procfs$namespace(r1, &(0x7f0000000340)='ns/uts\x00') ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000380)={0x7f, {0x24, 0x3, 0xf6c, 0x4, 0x200}}) r3 = io_uring_setup(0x5b5e, &(0x7f00000003c0)={0x0, 0x71da, 0x4, 0x2, 0x357}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x8010, r3, 0x8000000) r4 = openat$null(0xffffffffffffff9c, 0xfffffffffffffffd, 0x68000, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000440)={0x1, 0x3, 0x19}) openat$hpet(0xffffffffffffff9c, &(0x7f0000000480), 0x840, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/uts\x00') 02:45:26 executing program 6: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "36a867308a07d89ba21343cf0f84149dd8318ec2749df11b4bb470b5345528e2ba7b122345b7a6971120a38ce09a43c104c50170bd8aad6b6519623d2c0ce836"}, 0x48, 0xfffffffffffffffe) keyctl$reject(0x13, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000340)='#].,+,*{![\\:}}&\x00', 0x0) keyctl$describe(0x6, r0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f00000006c0)='%+}\x99[%\x11&\x00', 0x0) request_key(0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) [ 127.435251] loop7: detected capacity change from 0 to 128 02:45:26 executing program 6: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "36a867308a07d89ba21343cf0f84149dd8318ec2749df11b4bb470b5345528e2ba7b122345b7a6971120a38ce09a43c104c50170bd8aad6b6519623d2c0ce836"}, 0x48, 0xfffffffffffffffe) keyctl$reject(0x13, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000340)='#].,+,*{![\\:}}&\x00', 0x0) keyctl$describe(0x6, r0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f00000006c0)='%+}\x99[%\x11&\x00', 0x0) request_key(0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) 02:45:26 executing program 7: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10000, 0x0, &(0x7f0000000240), 0x8000, &(0x7f0000000280)={[{@fat=@nfs}], [{@smackfsdef}, {@hash}, {@fowner_gt={'fowner>', 0xee00}}, {@euid_eq={'euid', 0x3d, 0xee01}}]}) 02:45:26 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x0) 02:45:26 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x50, 0x0, &(0x7f0000000140)=[@decrefs={0x40046307, 0x3}, @exit_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0xb, 0x1}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/123, 0x7b, 0x1, 0x37}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0xf7, 0x0, &(0x7f00000001c0)="1242ae64edd1fc56532dbdd3d9efbe9904aadce6623e6041819ebabf9bdb03e1420ffbc2e0fc2b16c0024e0ef7dea93bc4b1c4aafd79f32bfe43852b60538c8272d8c31c3dbab24c1f9199495a5f3469b2f5403a9e25b124d735b2bbcfb6133630a6b492a60a5b92ef1220a8af5a1fb20b87357c6ae547dc164e74e219d311a8d88d20e1106b2f73dbb596252fc18f43c405d11df8e074accbd6af7e3b5ecd35e4de37722068bd3a93bd84f56bdd20aca87f03f8bef49a2c84d6928fe63893030723f945bea21b35e9721c7cf69717c2966126313146f896f8e8fc0ede620c323f6015a29d2333c2ee195ddce8cb4d54dea36e1b40b060"}) r0 = fork() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x3}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = fork() r2 = syz_open_procfs$namespace(r1, &(0x7f0000000340)='ns/uts\x00') ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000380)={0x7f, {0x24, 0x3, 0xf6c, 0x4, 0x200}}) r3 = io_uring_setup(0x5b5e, &(0x7f00000003c0)={0x0, 0x71da, 0x4, 0x2, 0x357}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x8010, r3, 0x8000000) r4 = openat$null(0xffffffffffffff9c, 0xfffffffffffffffd, 0x68000, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000440)={0x1, 0x3, 0x19}) openat$hpet(0xffffffffffffff9c, &(0x7f0000000480), 0x840, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/uts\x00') [ 127.512601] loop7: detected capacity change from 0 to 128 02:45:26 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getscheduler(0x0) 02:45:26 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "36a867308a07d89ba21343cf0f84149dd8318ec2749df11b4bb470b5345528e2ba7b122345b7a6971120a38ce09a43c104c50170bd8aad6b6519623d2c0ce836"}, 0x48, 0xfffffffffffffffe) keyctl$reject(0x13, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000340)='#].,+,*{![\\:}}&\x00', 0x0) keyctl$describe(0x6, r0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f00000006c0)='%+}\x99[%\x11&\x00', 0x0) request_key(0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) 02:45:26 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x50, 0x0, &(0x7f0000000140)=[@decrefs={0x40046307, 0x3}, @exit_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0xb, 0x1}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/123, 0x7b, 0x1, 0x37}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0xf7, 0x0, &(0x7f00000001c0)="1242ae64edd1fc56532dbdd3d9efbe9904aadce6623e6041819ebabf9bdb03e1420ffbc2e0fc2b16c0024e0ef7dea93bc4b1c4aafd79f32bfe43852b60538c8272d8c31c3dbab24c1f9199495a5f3469b2f5403a9e25b124d735b2bbcfb6133630a6b492a60a5b92ef1220a8af5a1fb20b87357c6ae547dc164e74e219d311a8d88d20e1106b2f73dbb596252fc18f43c405d11df8e074accbd6af7e3b5ecd35e4de37722068bd3a93bd84f56bdd20aca87f03f8bef49a2c84d6928fe63893030723f945bea21b35e9721c7cf69717c2966126313146f896f8e8fc0ede620c323f6015a29d2333c2ee195ddce8cb4d54dea36e1b40b060"}) r0 = fork() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x3}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = fork() r2 = syz_open_procfs$namespace(r1, &(0x7f0000000340)='ns/uts\x00') ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000380)={0x7f, {0x24, 0x3, 0xf6c, 0x4, 0x200}}) r3 = io_uring_setup(0x5b5e, &(0x7f00000003c0)={0x0, 0x71da, 0x4, 0x2, 0x357}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x8010, r3, 0x8000000) r4 = openat$null(0xffffffffffffff9c, 0xfffffffffffffffd, 0x68000, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000440)={0x1, 0x3, 0x19}) openat$hpet(0xffffffffffffff9c, &(0x7f0000000480), 0x840, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/uts\x00') 02:45:27 executing program 6: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x50, 0x0, &(0x7f0000000140)=[@decrefs={0x40046307, 0x3}, @exit_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0xb, 0x1}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/123, 0x7b, 0x1, 0x37}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0xf7, 0x0, &(0x7f00000001c0)="1242ae64edd1fc56532dbdd3d9efbe9904aadce6623e6041819ebabf9bdb03e1420ffbc2e0fc2b16c0024e0ef7dea93bc4b1c4aafd79f32bfe43852b60538c8272d8c31c3dbab24c1f9199495a5f3469b2f5403a9e25b124d735b2bbcfb6133630a6b492a60a5b92ef1220a8af5a1fb20b87357c6ae547dc164e74e219d311a8d88d20e1106b2f73dbb596252fc18f43c405d11df8e074accbd6af7e3b5ecd35e4de37722068bd3a93bd84f56bdd20aca87f03f8bef49a2c84d6928fe63893030723f945bea21b35e9721c7cf69717c2966126313146f896f8e8fc0ede620c323f6015a29d2333c2ee195ddce8cb4d54dea36e1b40b060"}) r0 = fork() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x3}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = fork() r2 = syz_open_procfs$namespace(r1, &(0x7f0000000340)='ns/uts\x00') ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000380)={0x7f, {0x24, 0x3, 0xf6c, 0x4, 0x200}}) r3 = io_uring_setup(0x5b5e, &(0x7f00000003c0)={0x0, 0x71da, 0x4, 0x2, 0x357}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x8010, r3, 0x8000000) r4 = openat$null(0xffffffffffffff9c, 0xfffffffffffffffd, 0x68000, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000440)={0x1, 0x3, 0x19}) openat$hpet(0xffffffffffffff9c, &(0x7f0000000480), 0x840, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/uts\x00') 02:45:27 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x50, 0x0, &(0x7f0000000140)=[@decrefs={0x40046307, 0x3}, @exit_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0xb, 0x1}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/123, 0x7b, 0x1, 0x37}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0xf7, 0x0, &(0x7f00000001c0)="1242ae64edd1fc56532dbdd3d9efbe9904aadce6623e6041819ebabf9bdb03e1420ffbc2e0fc2b16c0024e0ef7dea93bc4b1c4aafd79f32bfe43852b60538c8272d8c31c3dbab24c1f9199495a5f3469b2f5403a9e25b124d735b2bbcfb6133630a6b492a60a5b92ef1220a8af5a1fb20b87357c6ae547dc164e74e219d311a8d88d20e1106b2f73dbb596252fc18f43c405d11df8e074accbd6af7e3b5ecd35e4de37722068bd3a93bd84f56bdd20aca87f03f8bef49a2c84d6928fe63893030723f945bea21b35e9721c7cf69717c2966126313146f896f8e8fc0ede620c323f6015a29d2333c2ee195ddce8cb4d54dea36e1b40b060"}) r0 = fork() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x3}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = fork() r2 = syz_open_procfs$namespace(r1, &(0x7f0000000340)='ns/uts\x00') ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000380)={0x7f, {0x24, 0x3, 0xf6c, 0x4, 0x200}}) r3 = io_uring_setup(0x5b5e, &(0x7f00000003c0)={0x0, 0x71da, 0x4, 0x2, 0x357}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x8010, r3, 0x8000000) r4 = openat$null(0xffffffffffffff9c, 0xfffffffffffffffd, 0x68000, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000440)={0x1, 0x3, 0x19}) openat$hpet(0xffffffffffffff9c, &(0x7f0000000480), 0x840, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/uts\x00') 02:45:27 executing program 7: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x50, 0x0, &(0x7f0000000140)=[@decrefs={0x40046307, 0x3}, @exit_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0xb, 0x1}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/123, 0x7b, 0x1, 0x37}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0xf7, 0x0, &(0x7f00000001c0)="1242ae64edd1fc56532dbdd3d9efbe9904aadce6623e6041819ebabf9bdb03e1420ffbc2e0fc2b16c0024e0ef7dea93bc4b1c4aafd79f32bfe43852b60538c8272d8c31c3dbab24c1f9199495a5f3469b2f5403a9e25b124d735b2bbcfb6133630a6b492a60a5b92ef1220a8af5a1fb20b87357c6ae547dc164e74e219d311a8d88d20e1106b2f73dbb596252fc18f43c405d11df8e074accbd6af7e3b5ecd35e4de37722068bd3a93bd84f56bdd20aca87f03f8bef49a2c84d6928fe63893030723f945bea21b35e9721c7cf69717c2966126313146f896f8e8fc0ede620c323f6015a29d2333c2ee195ddce8cb4d54dea36e1b40b060"}) r0 = fork() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x3}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = fork() r2 = syz_open_procfs$namespace(r1, &(0x7f0000000340)='ns/uts\x00') ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000380)={0x7f, {0x24, 0x3, 0xf6c, 0x4, 0x200}}) r3 = io_uring_setup(0x5b5e, &(0x7f00000003c0)={0x0, 0x71da, 0x4, 0x2, 0x357}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x8010, r3, 0x8000000) r4 = openat$null(0xffffffffffffff9c, 0xfffffffffffffffd, 0x68000, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000440)={0x1, 0x3, 0x19}) openat$hpet(0xffffffffffffff9c, &(0x7f0000000480), 0x840, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/uts\x00') 02:45:27 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "36a867308a07d89ba21343cf0f84149dd8318ec2749df11b4bb470b5345528e2ba7b122345b7a6971120a38ce09a43c104c50170bd8aad6b6519623d2c0ce836"}, 0x48, 0xfffffffffffffffe) keyctl$reject(0x13, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000340)='#].,+,*{![\\:}}&\x00', 0x0) keyctl$describe(0x6, r0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f00000006c0)='%+}\x99[%\x11&\x00', 0x0) request_key(0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) 02:45:27 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "36a867308a07d89ba21343cf0f84149dd8318ec2749df11b4bb470b5345528e2ba7b122345b7a6971120a38ce09a43c104c50170bd8aad6b6519623d2c0ce836"}, 0x48, 0xfffffffffffffffe) keyctl$reject(0x13, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000340)='#].,+,*{![\\:}}&\x00', 0x0) keyctl$describe(0x6, r0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f00000006c0)='%+}\x99[%\x11&\x00', 0x0) request_key(0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) 02:45:27 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000780), 0xffffffffffffffff) 02:45:27 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "36a867308a07d89ba21343cf0f84149dd8318ec2749df11b4bb470b5345528e2ba7b122345b7a6971120a38ce09a43c104c50170bd8aad6b6519623d2c0ce836"}, 0x48, 0xfffffffffffffffe) keyctl$reject(0x13, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000340)='#].,+,*{![\\:}}&\x00', 0x0) keyctl$describe(0x6, r0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f00000006c0)='%+}\x99[%\x11&\x00', 0x0) request_key(0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) 02:45:27 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x50, 0x0, &(0x7f0000000140)=[@decrefs={0x40046307, 0x3}, @exit_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0xb, 0x1}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/123, 0x7b, 0x1, 0x37}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0xf7, 0x0, &(0x7f00000001c0)="1242ae64edd1fc56532dbdd3d9efbe9904aadce6623e6041819ebabf9bdb03e1420ffbc2e0fc2b16c0024e0ef7dea93bc4b1c4aafd79f32bfe43852b60538c8272d8c31c3dbab24c1f9199495a5f3469b2f5403a9e25b124d735b2bbcfb6133630a6b492a60a5b92ef1220a8af5a1fb20b87357c6ae547dc164e74e219d311a8d88d20e1106b2f73dbb596252fc18f43c405d11df8e074accbd6af7e3b5ecd35e4de37722068bd3a93bd84f56bdd20aca87f03f8bef49a2c84d6928fe63893030723f945bea21b35e9721c7cf69717c2966126313146f896f8e8fc0ede620c323f6015a29d2333c2ee195ddce8cb4d54dea36e1b40b060"}) r0 = fork() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x3}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = fork() r2 = syz_open_procfs$namespace(r1, &(0x7f0000000340)='ns/uts\x00') ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000380)={0x7f, {0x24, 0x3, 0xf6c, 0x4, 0x200}}) r3 = io_uring_setup(0x5b5e, &(0x7f00000003c0)={0x0, 0x71da, 0x4, 0x2, 0x357}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x8010, r3, 0x8000000) r4 = openat$null(0xffffffffffffff9c, 0xfffffffffffffffd, 0x68000, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000440)={0x1, 0x3, 0x19}) openat$hpet(0xffffffffffffff9c, &(0x7f0000000480), 0x840, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/uts\x00') 02:45:27 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "36a867308a07d89ba21343cf0f84149dd8318ec2749df11b4bb470b5345528e2ba7b122345b7a6971120a38ce09a43c104c50170bd8aad6b6519623d2c0ce836"}, 0x48, 0xfffffffffffffffe) keyctl$reject(0x13, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000340)='#].,+,*{![\\:}}&\x00', 0x0) keyctl$describe(0x6, r0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f00000006c0)='%+}\x99[%\x11&\x00', 0x0) request_key(0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) 02:45:27 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x50, 0x0, &(0x7f0000000140)=[@decrefs={0x40046307, 0x3}, @exit_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0xb, 0x1}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/123, 0x7b, 0x1, 0x37}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0xf7, 0x0, &(0x7f00000001c0)="1242ae64edd1fc56532dbdd3d9efbe9904aadce6623e6041819ebabf9bdb03e1420ffbc2e0fc2b16c0024e0ef7dea93bc4b1c4aafd79f32bfe43852b60538c8272d8c31c3dbab24c1f9199495a5f3469b2f5403a9e25b124d735b2bbcfb6133630a6b492a60a5b92ef1220a8af5a1fb20b87357c6ae547dc164e74e219d311a8d88d20e1106b2f73dbb596252fc18f43c405d11df8e074accbd6af7e3b5ecd35e4de37722068bd3a93bd84f56bdd20aca87f03f8bef49a2c84d6928fe63893030723f945bea21b35e9721c7cf69717c2966126313146f896f8e8fc0ede620c323f6015a29d2333c2ee195ddce8cb4d54dea36e1b40b060"}) r0 = fork() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x3}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = fork() r2 = syz_open_procfs$namespace(r1, &(0x7f0000000340)='ns/uts\x00') ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000380)={0x7f, {0x24, 0x3, 0xf6c, 0x4, 0x200}}) r3 = io_uring_setup(0x5b5e, &(0x7f00000003c0)={0x0, 0x71da, 0x4, 0x2, 0x357}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x8010, r3, 0x8000000) r4 = openat$null(0xffffffffffffff9c, 0xfffffffffffffffd, 0x68000, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000440)={0x1, 0x3, 0x19}) openat$hpet(0xffffffffffffff9c, &(0x7f0000000480), 0x840, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/uts\x00') 02:45:27 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "36a867308a07d89ba21343cf0f84149dd8318ec2749df11b4bb470b5345528e2ba7b122345b7a6971120a38ce09a43c104c50170bd8aad6b6519623d2c0ce836"}, 0x48, 0xfffffffffffffffe) keyctl$reject(0x13, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000340)='#].,+,*{![\\:}}&\x00', 0x0) keyctl$describe(0x6, r0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f00000006c0)='%+}\x99[%\x11&\x00', 0x0) request_key(0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) 02:45:27 executing program 6: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x50, 0x0, &(0x7f0000000140)=[@decrefs={0x40046307, 0x3}, @exit_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0xb, 0x1}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/123, 0x7b, 0x1, 0x37}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0xf7, 0x0, &(0x7f00000001c0)="1242ae64edd1fc56532dbdd3d9efbe9904aadce6623e6041819ebabf9bdb03e1420ffbc2e0fc2b16c0024e0ef7dea93bc4b1c4aafd79f32bfe43852b60538c8272d8c31c3dbab24c1f9199495a5f3469b2f5403a9e25b124d735b2bbcfb6133630a6b492a60a5b92ef1220a8af5a1fb20b87357c6ae547dc164e74e219d311a8d88d20e1106b2f73dbb596252fc18f43c405d11df8e074accbd6af7e3b5ecd35e4de37722068bd3a93bd84f56bdd20aca87f03f8bef49a2c84d6928fe63893030723f945bea21b35e9721c7cf69717c2966126313146f896f8e8fc0ede620c323f6015a29d2333c2ee195ddce8cb4d54dea36e1b40b060"}) r0 = fork() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x3}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = fork() r2 = syz_open_procfs$namespace(r1, &(0x7f0000000340)='ns/uts\x00') ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000380)={0x7f, {0x24, 0x3, 0xf6c, 0x4, 0x200}}) r3 = io_uring_setup(0x5b5e, &(0x7f00000003c0)={0x0, 0x71da, 0x4, 0x2, 0x357}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x8010, r3, 0x8000000) r4 = openat$null(0xffffffffffffff9c, 0xfffffffffffffffd, 0x68000, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000440)={0x1, 0x3, 0x19}) openat$hpet(0xffffffffffffff9c, &(0x7f0000000480), 0x840, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/uts\x00') 02:45:27 executing program 0: r0 = fsopen(&(0x7f0000000080)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mknodat$null(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) move_mount(r1, &(0x7f00000007c0)='./file0\x00', r1, &(0x7f0000000800)='./file0\x00', 0x0) 02:45:27 executing program 7: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x50, 0x0, &(0x7f0000000140)=[@decrefs={0x40046307, 0x3}, @exit_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0xb, 0x1}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/123, 0x7b, 0x1, 0x37}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0xf7, 0x0, &(0x7f00000001c0)="1242ae64edd1fc56532dbdd3d9efbe9904aadce6623e6041819ebabf9bdb03e1420ffbc2e0fc2b16c0024e0ef7dea93bc4b1c4aafd79f32bfe43852b60538c8272d8c31c3dbab24c1f9199495a5f3469b2f5403a9e25b124d735b2bbcfb6133630a6b492a60a5b92ef1220a8af5a1fb20b87357c6ae547dc164e74e219d311a8d88d20e1106b2f73dbb596252fc18f43c405d11df8e074accbd6af7e3b5ecd35e4de37722068bd3a93bd84f56bdd20aca87f03f8bef49a2c84d6928fe63893030723f945bea21b35e9721c7cf69717c2966126313146f896f8e8fc0ede620c323f6015a29d2333c2ee195ddce8cb4d54dea36e1b40b060"}) r0 = fork() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x3}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = fork() r2 = syz_open_procfs$namespace(r1, &(0x7f0000000340)='ns/uts\x00') ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000380)={0x7f, {0x24, 0x3, 0xf6c, 0x4, 0x200}}) r3 = io_uring_setup(0x5b5e, &(0x7f00000003c0)={0x0, 0x71da, 0x4, 0x2, 0x357}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x8010, r3, 0x8000000) r4 = openat$null(0xffffffffffffff9c, 0xfffffffffffffffd, 0x68000, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000440)={0x1, 0x3, 0x19}) openat$hpet(0xffffffffffffff9c, &(0x7f0000000480), 0x840, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/uts\x00') 02:45:27 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x50, 0x0, &(0x7f0000000140)=[@decrefs={0x40046307, 0x3}, @exit_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0xb, 0x1}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/123, 0x7b, 0x1, 0x37}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0xf7, 0x0, &(0x7f00000001c0)="1242ae64edd1fc56532dbdd3d9efbe9904aadce6623e6041819ebabf9bdb03e1420ffbc2e0fc2b16c0024e0ef7dea93bc4b1c4aafd79f32bfe43852b60538c8272d8c31c3dbab24c1f9199495a5f3469b2f5403a9e25b124d735b2bbcfb6133630a6b492a60a5b92ef1220a8af5a1fb20b87357c6ae547dc164e74e219d311a8d88d20e1106b2f73dbb596252fc18f43c405d11df8e074accbd6af7e3b5ecd35e4de37722068bd3a93bd84f56bdd20aca87f03f8bef49a2c84d6928fe63893030723f945bea21b35e9721c7cf69717c2966126313146f896f8e8fc0ede620c323f6015a29d2333c2ee195ddce8cb4d54dea36e1b40b060"}) r0 = fork() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x3}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = fork() r2 = syz_open_procfs$namespace(r1, &(0x7f0000000340)='ns/uts\x00') ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000380)={0x7f, {0x24, 0x3, 0xf6c, 0x4, 0x200}}) r3 = io_uring_setup(0x5b5e, &(0x7f00000003c0)={0x0, 0x71da, 0x4, 0x2, 0x357}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x8010, r3, 0x8000000) r4 = openat$null(0xffffffffffffff9c, 0xfffffffffffffffd, 0x68000, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000440)={0x1, 0x3, 0x19}) openat$hpet(0xffffffffffffff9c, &(0x7f0000000480), 0x840, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/uts\x00') 02:45:27 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r0, 0x0) r1 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r2, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000018c0)=ANY=[@ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000104000003000000040000000000000004000000000000000300000000000000090000000000000000000000000000000000000000000000000000000000000004000000000000800004000000000000bf0800000000000002000000000000000800"/448]) syz_io_uring_setup(0x4051, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x2b0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000640)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x2010, 0xffffffffffffffff, 0x8000000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @private, @initdev}, &(0x7f0000000180)=0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) 02:45:27 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "36a867308a07d89ba21343cf0f84149dd8318ec2749df11b4bb470b5345528e2ba7b122345b7a6971120a38ce09a43c104c50170bd8aad6b6519623d2c0ce836"}, 0x48, 0xfffffffffffffffe) keyctl$reject(0x13, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000340)='#].,+,*{![\\:}}&\x00', 0x0) keyctl$describe(0x6, r0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f00000006c0)='%+}\x99[%\x11&\x00', 0x0) request_key(0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) 02:45:27 executing program 0: r0 = fsopen(&(0x7f0000000080)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mknodat$null(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) move_mount(r1, &(0x7f00000007c0)='./file0\x00', r1, &(0x7f0000000800)='./file0\x00', 0x0) [ 128.300813] hrtimer: interrupt took 16551 ns 02:45:27 executing program 1: r0 = fsopen(&(0x7f0000000080)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mknodat$null(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) move_mount(r1, &(0x7f00000007c0)='./file0\x00', r1, &(0x7f0000000800)='./file0\x00', 0x0) [ 128.421527] audit: type=1400 audit(1664333127.716:9): avc: denied { write } for pid=4083 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 02:45:27 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x50, 0x0, &(0x7f0000000140)=[@decrefs={0x40046307, 0x3}, @exit_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0xb, 0x1}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/123, 0x7b, 0x1, 0x37}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0xf7, 0x0, &(0x7f00000001c0)="1242ae64edd1fc56532dbdd3d9efbe9904aadce6623e6041819ebabf9bdb03e1420ffbc2e0fc2b16c0024e0ef7dea93bc4b1c4aafd79f32bfe43852b60538c8272d8c31c3dbab24c1f9199495a5f3469b2f5403a9e25b124d735b2bbcfb6133630a6b492a60a5b92ef1220a8af5a1fb20b87357c6ae547dc164e74e219d311a8d88d20e1106b2f73dbb596252fc18f43c405d11df8e074accbd6af7e3b5ecd35e4de37722068bd3a93bd84f56bdd20aca87f03f8bef49a2c84d6928fe63893030723f945bea21b35e9721c7cf69717c2966126313146f896f8e8fc0ede620c323f6015a29d2333c2ee195ddce8cb4d54dea36e1b40b060"}) r0 = fork() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x3}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = fork() r2 = syz_open_procfs$namespace(r1, &(0x7f0000000340)='ns/uts\x00') ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000380)={0x7f, {0x24, 0x3, 0xf6c, 0x4, 0x200}}) r3 = io_uring_setup(0x5b5e, &(0x7f00000003c0)={0x0, 0x71da, 0x4, 0x2, 0x357}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x8010, r3, 0x8000000) r4 = openat$null(0xffffffffffffff9c, 0xfffffffffffffffd, 0x68000, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000440)={0x1, 0x3, 0x19}) openat$hpet(0xffffffffffffff9c, &(0x7f0000000480), 0x840, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/uts\x00') 02:45:27 executing program 0: r0 = fsopen(&(0x7f0000000080)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mknodat$null(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) move_mount(r1, &(0x7f00000007c0)='./file0\x00', r1, &(0x7f0000000800)='./file0\x00', 0x0) 02:45:27 executing program 7: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x50, 0x0, &(0x7f0000000140)=[@decrefs={0x40046307, 0x3}, @exit_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0xb, 0x1}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/123, 0x7b, 0x1, 0x37}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0xf7, 0x0, &(0x7f00000001c0)="1242ae64edd1fc56532dbdd3d9efbe9904aadce6623e6041819ebabf9bdb03e1420ffbc2e0fc2b16c0024e0ef7dea93bc4b1c4aafd79f32bfe43852b60538c8272d8c31c3dbab24c1f9199495a5f3469b2f5403a9e25b124d735b2bbcfb6133630a6b492a60a5b92ef1220a8af5a1fb20b87357c6ae547dc164e74e219d311a8d88d20e1106b2f73dbb596252fc18f43c405d11df8e074accbd6af7e3b5ecd35e4de37722068bd3a93bd84f56bdd20aca87f03f8bef49a2c84d6928fe63893030723f945bea21b35e9721c7cf69717c2966126313146f896f8e8fc0ede620c323f6015a29d2333c2ee195ddce8cb4d54dea36e1b40b060"}) r0 = fork() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x3}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = fork() r2 = syz_open_procfs$namespace(r1, &(0x7f0000000340)='ns/uts\x00') ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000380)={0x7f, {0x24, 0x3, 0xf6c, 0x4, 0x200}}) r3 = io_uring_setup(0x5b5e, &(0x7f00000003c0)={0x0, 0x71da, 0x4, 0x2, 0x357}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x8010, r3, 0x8000000) r4 = openat$null(0xffffffffffffff9c, 0xfffffffffffffffd, 0x68000, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000440)={0x1, 0x3, 0x19}) openat$hpet(0xffffffffffffff9c, &(0x7f0000000480), 0x840, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/uts\x00') 02:45:27 executing program 6: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x50, 0x0, &(0x7f0000000140)=[@decrefs={0x40046307, 0x3}, @exit_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0xb, 0x1}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/123, 0x7b, 0x1, 0x37}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0xf7, 0x0, &(0x7f00000001c0)="1242ae64edd1fc56532dbdd3d9efbe9904aadce6623e6041819ebabf9bdb03e1420ffbc2e0fc2b16c0024e0ef7dea93bc4b1c4aafd79f32bfe43852b60538c8272d8c31c3dbab24c1f9199495a5f3469b2f5403a9e25b124d735b2bbcfb6133630a6b492a60a5b92ef1220a8af5a1fb20b87357c6ae547dc164e74e219d311a8d88d20e1106b2f73dbb596252fc18f43c405d11df8e074accbd6af7e3b5ecd35e4de37722068bd3a93bd84f56bdd20aca87f03f8bef49a2c84d6928fe63893030723f945bea21b35e9721c7cf69717c2966126313146f896f8e8fc0ede620c323f6015a29d2333c2ee195ddce8cb4d54dea36e1b40b060"}) r0 = fork() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x3}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = fork() r2 = syz_open_procfs$namespace(r1, &(0x7f0000000340)='ns/uts\x00') ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000380)={0x7f, {0x24, 0x3, 0xf6c, 0x4, 0x200}}) r3 = io_uring_setup(0x5b5e, &(0x7f00000003c0)={0x0, 0x71da, 0x4, 0x2, 0x357}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x8010, r3, 0x8000000) r4 = openat$null(0xffffffffffffff9c, 0xfffffffffffffffd, 0x68000, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000440)={0x1, 0x3, 0x19}) openat$hpet(0xffffffffffffff9c, &(0x7f0000000480), 0x840, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/uts\x00') 02:45:27 executing program 4: r0 = fsopen(&(0x7f0000000080)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mknodat$null(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) move_mount(r1, &(0x7f00000007c0)='./file0\x00', r1, &(0x7f0000000800)='./file0\x00', 0x0) 02:45:27 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x50, 0x0, &(0x7f0000000140)=[@decrefs={0x40046307, 0x3}, @exit_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0xb, 0x1}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/123, 0x7b, 0x1, 0x37}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0xf7, 0x0, &(0x7f00000001c0)="1242ae64edd1fc56532dbdd3d9efbe9904aadce6623e6041819ebabf9bdb03e1420ffbc2e0fc2b16c0024e0ef7dea93bc4b1c4aafd79f32bfe43852b60538c8272d8c31c3dbab24c1f9199495a5f3469b2f5403a9e25b124d735b2bbcfb6133630a6b492a60a5b92ef1220a8af5a1fb20b87357c6ae547dc164e74e219d311a8d88d20e1106b2f73dbb596252fc18f43c405d11df8e074accbd6af7e3b5ecd35e4de37722068bd3a93bd84f56bdd20aca87f03f8bef49a2c84d6928fe63893030723f945bea21b35e9721c7cf69717c2966126313146f896f8e8fc0ede620c323f6015a29d2333c2ee195ddce8cb4d54dea36e1b40b060"}) r0 = fork() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x3}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = fork() r2 = syz_open_procfs$namespace(r1, &(0x7f0000000340)='ns/uts\x00') ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000380)={0x7f, {0x24, 0x3, 0xf6c, 0x4, 0x200}}) r3 = io_uring_setup(0x5b5e, &(0x7f00000003c0)={0x0, 0x71da, 0x4, 0x2, 0x357}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x8010, r3, 0x8000000) r4 = openat$null(0xffffffffffffff9c, 0xfffffffffffffffd, 0x68000, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000440)={0x1, 0x3, 0x19}) openat$hpet(0xffffffffffffff9c, &(0x7f0000000480), 0x840, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/uts\x00') 02:45:27 executing program 1: r0 = fsopen(&(0x7f0000000080)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mknodat$null(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) move_mount(r1, &(0x7f00000007c0)='./file0\x00', r1, &(0x7f0000000800)='./file0\x00', 0x0) 02:45:28 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r0, 0x0) r1 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r2, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000018c0)=ANY=[@ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000104000003000000040000000000000004000000000000000300000000000000090000000000000000000000000000000000000000000000000000000000000004000000000000800004000000000000bf0800000000000002000000000000000800"/448]) syz_io_uring_setup(0x4051, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x2b0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000640)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x2010, 0xffffffffffffffff, 0x8000000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @private, @initdev}, &(0x7f0000000180)=0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) 02:45:28 executing program 4: r0 = fsopen(&(0x7f0000000080)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mknodat$null(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) move_mount(r1, &(0x7f00000007c0)='./file0\x00', r1, &(0x7f0000000800)='./file0\x00', 0x0) 02:45:28 executing program 0: r0 = fsopen(&(0x7f0000000080)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mknodat$null(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) move_mount(r1, &(0x7f00000007c0)='./file0\x00', r1, &(0x7f0000000800)='./file0\x00', 0x0) 02:45:28 executing program 1: r0 = fsopen(&(0x7f0000000080)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mknodat$null(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) move_mount(r1, &(0x7f00000007c0)='./file0\x00', r1, &(0x7f0000000800)='./file0\x00', 0x0) 02:45:28 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r0, 0x0) r1 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r2, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000018c0)=ANY=[@ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000104000003000000040000000000000004000000000000000300000000000000090000000000000000000000000000000000000000000000000000000000000004000000000000800004000000000000bf0800000000000002000000000000000800"/448]) syz_io_uring_setup(0x4051, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x2b0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000640)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x2010, 0xffffffffffffffff, 0x8000000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @private, @initdev}, &(0x7f0000000180)=0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) 02:45:28 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x890b, &(0x7f0000000880)={'wg1\x00'}) 02:45:28 executing program 3: clock_nanosleep(0x0, 0x0, 0x0, 0x0) 02:45:28 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r0, 0x0) r1 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r2, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000018c0)=ANY=[@ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000104000003000000040000000000000004000000000000000300000000000000090000000000000000000000000000000000000000000000000000000000000004000000000000800004000000000000bf0800000000000002000000000000000800"/448]) syz_io_uring_setup(0x4051, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x2b0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000640)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x2010, 0xffffffffffffffff, 0x8000000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @private, @initdev}, &(0x7f0000000180)=0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) 02:45:28 executing program 6: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) lseek(r0, 0x0, 0x0) 02:45:28 executing program 3: clock_nanosleep(0x0, 0x0, 0x0, 0x0) 02:45:28 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x890b, &(0x7f0000000880)={'wg1\x00'}) 02:45:28 executing program 0: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\x01\x00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xee\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\xa0\xe0\xff\x1a\x8e\xe2ae^=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xdf\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfch_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae', 0x7) fcntl$addseals(r0, 0x409, 0xc) fcntl$addseals(r0, 0x409, 0x8) 02:45:28 executing program 6: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) lseek(r0, 0x0, 0x0) 02:45:28 executing program 4: r0 = fsopen(&(0x7f0000000080)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mknodat$null(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) move_mount(r1, &(0x7f00000007c0)='./file0\x00', r1, &(0x7f0000000800)='./file0\x00', 0x0) 02:45:28 executing program 3: clock_nanosleep(0x0, 0x0, 0x0, 0x0) 02:45:28 executing program 0: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\x01\x00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xee\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\xa0\xe0\xff\x1a\x8e\xe2ae^=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xdf\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfch_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae', 0x7) fcntl$addseals(r0, 0x409, 0xc) fcntl$addseals(r0, 0x409, 0x8) 02:45:28 executing program 1: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\x01\x00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xee\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\xa0\xe0\xff\x1a\x8e\xe2ae^=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xdf\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfch_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae', 0x7) fcntl$addseals(r0, 0x409, 0xc) fcntl$addseals(r0, 0x409, 0x8) 02:45:28 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r0, 0x0) r1 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r2, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000018c0)=ANY=[@ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000104000003000000040000000000000004000000000000000300000000000000090000000000000000000000000000000000000000000000000000000000000004000000000000800004000000000000bf0800000000000002000000000000000800"/448]) syz_io_uring_setup(0x4051, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x2b0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000640)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x2010, 0xffffffffffffffff, 0x8000000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @private, @initdev}, &(0x7f0000000180)=0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) 02:45:28 executing program 3: clock_nanosleep(0x0, 0x0, 0x0, 0x0) 02:45:28 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x890b, &(0x7f0000000880)={'wg1\x00'}) 02:45:28 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x890b, &(0x7f0000000880)={'wg1\x00'}) 02:45:28 executing program 1: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\x01\x00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xee\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\xa0\xe0\xff\x1a\x8e\xe2ae^=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xdf\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfch_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae', 0x7) fcntl$addseals(r0, 0x409, 0xc) fcntl$addseals(r0, 0x409, 0x8) 02:45:28 executing program 0: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\x01\x00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xee\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\xa0\xe0\xff\x1a\x8e\xe2ae^=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xdf\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfch_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae', 0x7) fcntl$addseals(r0, 0x409, 0xc) fcntl$addseals(r0, 0x409, 0x8) 02:45:28 executing program 6: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) lseek(r0, 0x0, 0x0) 02:45:28 executing program 3: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\x01\x00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xee\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\xa0\xe0\xff\x1a\x8e\xe2ae^=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xdf\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfch_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae', 0x7) fcntl$addseals(r0, 0x409, 0xc) fcntl$addseals(r0, 0x409, 0x8) 02:45:28 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r0, 0x0) r1 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r2, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000018c0)=ANY=[@ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000104000003000000040000000000000004000000000000000300000000000000090000000000000000000000000000000000000000000000000000000000000004000000000000800004000000000000bf0800000000000002000000000000000800"/448]) syz_io_uring_setup(0x4051, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x2b0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000640)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x2010, 0xffffffffffffffff, 0x8000000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @private, @initdev}, &(0x7f0000000180)=0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) 02:45:29 executing program 3: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\x01\x00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xee\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\xa0\xe0\xff\x1a\x8e\xe2ae^=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xdf\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfch_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae', 0x7) fcntl$addseals(r0, 0x409, 0xc) fcntl$addseals(r0, 0x409, 0x8) 02:45:29 executing program 0: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\x01\x00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xee\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\xa0\xe0\xff\x1a\x8e\xe2ae^=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xdf\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfch_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae', 0x7) fcntl$addseals(r0, 0x409, 0xc) fcntl$addseals(r0, 0x409, 0x8) 02:45:29 executing program 1: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\x01\x00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xee\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\xa0\xe0\xff\x1a\x8e\xe2ae^=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xdf\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfch_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae', 0x7) fcntl$addseals(r0, 0x409, 0xc) fcntl$addseals(r0, 0x409, 0x8) 02:45:29 executing program 6: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) lseek(r0, 0x0, 0x0) 02:45:29 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000000)) 02:45:29 executing program 4: r0 = getpid() setpriority(0x0, r0, 0x0) 02:45:29 executing program 2: syz_io_uring_setup(0x3273, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, 0x0) 02:45:29 executing program 3: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\x01\x00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xee\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\xa0\xe0\xff\x1a\x8e\xe2ae^=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xdf\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfch_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae', 0x7) fcntl$addseals(r0, 0x409, 0xc) fcntl$addseals(r0, 0x409, 0x8) 02:45:29 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000000)) 02:45:29 executing program 0: r0 = creat(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="8d", 0x1}], 0x1) 02:45:29 executing program 4: r0 = getpid() setpriority(0x0, r0, 0x0) 02:45:29 executing program 4: r0 = getpid() setpriority(0x0, r0, 0x0) 02:45:29 executing program 2: get_robust_list(0x0, 0x0, 0x0) 02:45:29 executing program 1: syz_open_dev$sg(&(0x7f0000000480), 0x0, 0x0) 02:45:29 executing program 3: ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000000)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000100)) 02:45:29 executing program 0: r0 = creat(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="8d", 0x1}], 0x1) 02:45:29 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000000)) 02:45:29 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r0, r0, 0x0) r1 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pread64(r2, &(0x7f0000000040)=""/170, 0xaa, 0x200000007fffffff) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000018c0)=ANY=[@ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000104000003000000040000000000000004000000000000000300000000000000090000000000000000000000000000000000000000000000000000000000000004000000000000800004000000000000bf0800000000000002000000000000000800"/448]) syz_io_uring_setup(0x4051, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x2b0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000640)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x2010, 0xffffffffffffffff, 0x8000000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @private, @initdev}, &(0x7f0000000180)=0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) 02:45:29 executing program 6: r0 = creat(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="8d", 0x1}], 0x1) 02:45:29 executing program 2: get_robust_list(0x0, 0x0, 0x0) 02:45:29 executing program 0: r0 = creat(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="8d", 0x1}], 0x1) 02:45:29 executing program 3: ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000000)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000100)) 02:45:29 executing program 6: r0 = creat(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="8d", 0x1}], 0x1) 02:45:29 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000000)) 02:45:29 executing program 1: socket(0xa, 0x3, 0x0) 02:45:29 executing program 4: r0 = getpid() setpriority(0x0, r0, 0x0) 02:45:29 executing program 0: r0 = creat(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="8d", 0x1}], 0x1) 02:45:29 executing program 3: ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000000)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000100)) 02:45:29 executing program 2: get_robust_list(0x0, 0x0, 0x0) 02:45:29 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000002800), 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) 02:45:29 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') linkat(r0, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file1\x00', 0x1000) 02:45:29 executing program 3: ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000000)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000100)) 02:45:29 executing program 1: socket(0xa, 0x3, 0x0) 02:45:29 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x16, 0x0, 0x0) 02:45:29 executing program 6: r0 = creat(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="8d", 0x1}], 0x1) 02:45:29 executing program 5: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x3, &(0x7f0000000040)='ramfs\x00', &(0x7f0000000100)="a3", 0x1) 02:45:30 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') linkat(r0, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file1\x00', 0x1000) 02:45:30 executing program 5: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x3, &(0x7f0000000040)='ramfs\x00', &(0x7f0000000100)="a3", 0x1) 02:45:30 executing program 1: socket(0xa, 0x3, 0x0) 02:45:30 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') linkat(r0, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file1\x00', 0x1000) 02:45:30 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000002800), 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) 02:45:30 executing program 3: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) 02:45:30 executing program 6: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 02:45:30 executing program 2: get_robust_list(0x0, 0x0, 0x0) 02:45:30 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x16, 0x0, 0x0) [ 130.886756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.891318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 02:45:30 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x16, 0x0, 0x0) 02:45:30 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') linkat(r0, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file1\x00', 0x1000) 02:45:30 executing program 5: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x3, &(0x7f0000000040)='ramfs\x00', &(0x7f0000000100)="a3", 0x1) 02:45:30 executing program 2: clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioprio_set$pid(0x2, 0x0, 0x0) 02:45:30 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000002800), 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) 02:45:30 executing program 3: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) 02:45:30 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x16, 0x0, 0x0) 02:45:30 executing program 5: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x3, &(0x7f0000000040)='ramfs\x00', &(0x7f0000000100)="a3", 0x1) 02:45:30 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000002800), 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) 02:45:30 executing program 1: socket(0xa, 0x3, 0x0) 02:45:30 executing program 0: timer_create(0x0, 0x0, 0x0) 02:45:30 executing program 3: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) [ 131.398983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.399947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 02:45:30 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000002c0), 0x4) 02:45:30 executing program 5: syz_mount_image$nfs4(&(0x7f0000000840), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)) 02:45:30 executing program 4: unlinkat(0xffffffffffffff9c, &(0x7f0000002800)='./file1\x00', 0x200) 02:45:30 executing program 0: timer_create(0x0, 0x0, 0x0) 02:45:30 executing program 2: clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioprio_set$pid(0x2, 0x0, 0x0) 02:45:30 executing program 3: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) 02:45:30 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) 02:45:30 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x37af, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000200)) syz_open_dev$sg(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r0, r0], 0x2) 02:45:30 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000001640), &(0x7f0000001680)=0x4) 02:45:30 executing program 0: timer_create(0x0, 0x0, 0x0) 02:45:30 executing program 4: unlinkat(0xffffffffffffff9c, &(0x7f0000002800)='./file1\x00', 0x200) 02:45:30 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x37af, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000200)) syz_open_dev$sg(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r0, r0], 0x2) 02:45:30 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000002c0), 0x4) 02:45:30 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000001640), &(0x7f0000001680)=0x4) 02:45:31 executing program 4: unlinkat(0xffffffffffffff9c, &(0x7f0000002800)='./file1\x00', 0x200) 02:45:31 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x37af, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000200)) syz_open_dev$sg(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r0, r0], 0x2) 02:45:31 executing program 0: timer_create(0x0, 0x0, 0x0) 02:45:31 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000001640), &(0x7f0000001680)=0x4) 02:45:31 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000002c0), 0x4) 02:45:31 executing program 2: clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioprio_set$pid(0x2, 0x0, 0x0) 02:45:31 executing program 3: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0x0, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x2000) shmctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x208, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') shmget(0x1, 0x3000, 0x20, &(0x7f0000ff9000/0x3000)=nil) pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) 02:45:31 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) 02:45:31 executing program 4: unlinkat(0xffffffffffffff9c, &(0x7f0000002800)='./file1\x00', 0x200) 02:45:31 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000001640), &(0x7f0000001680)=0x4) 02:45:31 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) 02:45:31 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000002c0), 0x4) 02:45:31 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x37af, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000200)) syz_open_dev$sg(0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r0, r0], 0x2) 02:45:31 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) 02:45:32 executing program 2: clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioprio_set$pid(0x2, 0x0, 0x0) 02:45:32 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) 02:45:32 executing program 3: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0x0, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x2000) shmctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x208, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') shmget(0x1, 0x3000, 0x20, &(0x7f0000ff9000/0x3000)=nil) pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) 02:45:32 executing program 1: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0x0, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x2000) shmctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x208, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') shmget(0x1, 0x3000, 0x20, &(0x7f0000ff9000/0x3000)=nil) pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) 02:45:32 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) 02:45:32 executing program 5: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0x0, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x2000) shmctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x208, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') shmget(0x1, 0x3000, 0x20, &(0x7f0000ff9000/0x3000)=nil) pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) 02:45:32 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) 02:45:32 executing program 7: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0x0, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x2000) shmctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x208, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') shmget(0x1, 0x3000, 0x20, &(0x7f0000ff9000/0x3000)=nil) pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) 02:45:32 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) 02:45:32 executing program 5: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0x0, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x2000) shmctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x208, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') shmget(0x1, 0x3000, 0x20, &(0x7f0000ff9000/0x3000)=nil) pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) 02:45:32 executing program 3: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0x0, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x2000) shmctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x208, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') shmget(0x1, 0x3000, 0x20, &(0x7f0000ff9000/0x3000)=nil) pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) 02:45:32 executing program 5: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0x0, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x2000) shmctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x208, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') shmget(0x1, 0x3000, 0x20, &(0x7f0000ff9000/0x3000)=nil) pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) 02:45:32 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) 02:45:32 executing program 1: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0x0, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x2000) shmctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x208, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') shmget(0x1, 0x3000, 0x20, &(0x7f0000ff9000/0x3000)=nil) pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) 02:45:32 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) 02:45:32 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) 02:45:32 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) 02:45:32 executing program 3: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0x0, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x2000) shmctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x208, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') shmget(0x1, 0x3000, 0x20, &(0x7f0000ff9000/0x3000)=nil) pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) 02:45:32 executing program 1: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0x0, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x2000) shmctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x208, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') shmget(0x1, 0x3000, 0x20, &(0x7f0000ff9000/0x3000)=nil) pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) 02:45:32 executing program 7: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0x0, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x2000) shmctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x208, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') shmget(0x1, 0x3000, 0x20, &(0x7f0000ff9000/0x3000)=nil) pread64(r1, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) 02:45:33 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48) fcntl$dupfd(r0, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) 02:45:33 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x12, 0xfffffffffffffffd, &(0x7f0000000000)) 02:45:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r0) syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r0) 02:45:33 executing program 1: syz_emit_ethernet(0x32e, &(0x7f0000000000)={@random="bd99d58573e9", @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x2f8, 0x3a, 0xff, @private2, @local, {[], @ndisc_ns={0x87, 0x0, 0x0, @rand_addr=' \x01\x00', [{0x0, 0x3, "57b3d04771900b492d6d099be51a6565f38f408a18f7b360"}, {0x0, 0x17, "6645aeee840c8050ddbe2c178fdae1cf69ae9412478d79d0c60d7a1af59bc0b7aa0cc3533d18460617841b6a324d1eb9ccd0e0aeaaa350a5dd6b3865a39256659b63512d24da4755a2991e03cc66eaf77c680f893c83942735d2c5e5ea9d676fe8cd49e4836da45c7adf15c843f651a1a176452b67be0a514b45e707d8cf2680fc7721d1f2803c76a0c092b23d1e8a7c68073e11b8ba7cbc0f0706302faf05b8958fee428406f0403a9e7f91fceb36c0dd7f2e14f444cb8a"}, {0x0, 0x19, "190671b067ef39d88ee6c687b9627c1f9bfb214392a097c6ab8c3037c41462ce5eb2603c2a0e0446944b5528325716c8d39503cdd72d8c53325179d0ce7f81de52f0352500510e071da16b4c6f2429e67164ec37983d615699b5bc72f1f7d4f531dc51660c0daa90a29fac27c1bf1406d79ceded356ab878eb6e6d4f4c7d0b12639aa31bf90cc6a2955a1e96bf63a5c14ae3756c9e1fcd51fb4b2c606896dd984296b432e5b701f0907ce6f18dcce6cc0c1fe4a46d3aacefa99977e931eb2149f4c52c101b707b233474d7"}, {0x0, 0x13, "dbb1e5498f50147514c42255261b84abcde773320435d1373386f9142444920a195205fc4745476b25c8c36fb220e7af6298f8f0edd9d49fdb21ccbe66c9b010a197274982debcad43f1c9fa67eed093544073b09985b5f9a4e6cc0662c211b756546866dfe45d678e6ea377ebd00153a61e302c397a62fe097cc8dd7e36952591647eaf1d3fc83263ba7c58e0bc64b8ed44770432a9c04364"}, {0x1, 0x15, "51ec4405ebf6af44b69f3d19af64d4a8aef9b545a106b12908f6b89bbd5519f02cc9ff96aa3a97de9a49bb1437467a7b7ab028245a232c4ea1d90a5878f770be68ac4448452c457ac05789600b8367a684b62ca8f7aa52f3f5c11d925464394002c1960cbec514cbc911df10d9fec93f2f353f02126d6a986918ade326218d057c2735f7fd6f88caf96d064cdefec2ac02f2e69cea7fb5eaa3e605de8cb3a9718851d8dd2457"}]}}}}}}, 0x0) 02:45:33 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001000000000000000200000001000600000000000000000000000000800029293ac6f153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa5252614100"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001000000000000000200000001000600000000000000000000000000800029293ac6f153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0, 0xc00}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010500)="f8ffff0fffffff0ff VM DIAGNOSIS: 02:45:26 Registers: info registers vcpu 0 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823ba0b1 RDI=ffffffff8765a980 RBP=ffffffff8765a940 RSP=ffff88803f9c7690 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000065 R11=0000000000000001 R12=0000000000000065 R13=ffffffff8765a940 R14=0000000000000010 R15=ffffffff823ba0a0 RIP=ffffffff823ba109 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f92ff7d9700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f739fdf8820 CR3=0000000019c0c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f930234a7c0 00007f930234a7c8 YMM02=0000000000000000 0000000000000000 00007f930234a7e0 00007f930234a7c0 YMM03=0000000000000000 0000000000000000 00007f930234a7c8 00007f930234a7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffffffff854cf540 RCX=ffffffff812a91cf RDX=1ffffffff0a99ea9 RSI=0000000000000004 RDI=ffffffff854cf540 RBP=ffffffff854cf548 RSP=ffff88803f8cf8e0 R8 =0000000000000000 R9 =ffffffff854cf543 R10=fffffbfff0a99ea8 R11=0000000000000001 R12=ffffffff854cf550 R13=ffff88801dadfcf8 R14=ffff88800efc0708 R15=ffff88800843cc80 RIP=ffffffff812a9261 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555555c4c708 CR3=00000000162e6000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 00524f5252450040 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000