Warning: Permanently added '[localhost]:2966' (ECDSA) to the list of known hosts. 2022/09/28 04:07:09 fuzzer started 2022/09/28 04:07:09 dialing manager at localhost:35827 syzkaller login: [ 41.002017] cgroup: Unknown subsys name 'net' [ 41.098612] cgroup: Unknown subsys name 'rlimit' 2022/09/28 04:07:23 syscalls: 2215 2022/09/28 04:07:23 code coverage: enabled 2022/09/28 04:07:23 comparison tracing: enabled 2022/09/28 04:07:23 extra coverage: enabled 2022/09/28 04:07:23 setuid sandbox: enabled 2022/09/28 04:07:23 namespace sandbox: enabled 2022/09/28 04:07:23 Android sandbox: enabled 2022/09/28 04:07:23 fault injection: enabled 2022/09/28 04:07:23 leak checking: enabled 2022/09/28 04:07:23 net packet injection: enabled 2022/09/28 04:07:23 net device setup: enabled 2022/09/28 04:07:23 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/28 04:07:23 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/28 04:07:23 USB emulation: enabled 2022/09/28 04:07:23 hci packet injection: enabled 2022/09/28 04:07:23 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220927) 2022/09/28 04:07:23 802.15.4 emulation: enabled 2022/09/28 04:07:23 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/28 04:07:23 fetching corpus: 26, signal 22865/26435 (executing program) 2022/09/28 04:07:23 fetching corpus: 68, signal 31003/36117 (executing program) 2022/09/28 04:07:23 fetching corpus: 118, signal 46080/52284 (executing program) 2022/09/28 04:07:23 fetching corpus: 167, signal 53811/61201 (executing program) 2022/09/28 04:07:23 fetching corpus: 217, signal 58565/67192 (executing program) 2022/09/28 04:07:23 fetching corpus: 267, signal 63450/73188 (executing program) 2022/09/28 04:07:24 fetching corpus: 317, signal 68985/79714 (executing program) 2022/09/28 04:07:24 fetching corpus: 366, signal 74331/85965 (executing program) 2022/09/28 04:07:24 fetching corpus: 416, signal 77232/89913 (executing program) 2022/09/28 04:07:24 fetching corpus: 466, signal 80674/94310 (executing program) 2022/09/28 04:07:24 fetching corpus: 515, signal 86457/100698 (executing program) 2022/09/28 04:07:24 fetching corpus: 565, signal 88589/103769 (executing program) 2022/09/28 04:07:24 fetching corpus: 615, signal 92145/108007 (executing program) 2022/09/28 04:07:24 fetching corpus: 665, signal 95376/111874 (executing program) 2022/09/28 04:07:25 fetching corpus: 715, signal 99476/116431 (executing program) 2022/09/28 04:07:25 fetching corpus: 764, signal 101288/119020 (executing program) 2022/09/28 04:07:25 fetching corpus: 814, signal 103192/121647 (executing program) 2022/09/28 04:07:25 fetching corpus: 864, signal 104562/123789 (executing program) 2022/09/28 04:07:25 fetching corpus: 914, signal 106224/126112 (executing program) 2022/09/28 04:07:25 fetching corpus: 964, signal 108528/128979 (executing program) 2022/09/28 04:07:25 fetching corpus: 1014, signal 112252/133013 (executing program) 2022/09/28 04:07:25 fetching corpus: 1064, signal 114045/135371 (executing program) 2022/09/28 04:07:25 fetching corpus: 1114, signal 116054/137899 (executing program) 2022/09/28 04:07:26 fetching corpus: 1164, signal 117891/140216 (executing program) 2022/09/28 04:07:26 fetching corpus: 1214, signal 120927/143357 (executing program) 2022/09/28 04:07:26 fetching corpus: 1264, signal 123270/145914 (executing program) 2022/09/28 04:07:26 fetching corpus: 1313, signal 124771/147892 (executing program) 2022/09/28 04:07:26 fetching corpus: 1363, signal 126449/150062 (executing program) 2022/09/28 04:07:26 fetching corpus: 1412, signal 127939/151952 (executing program) 2022/09/28 04:07:26 fetching corpus: 1462, signal 130138/154258 (executing program) 2022/09/28 04:07:26 fetching corpus: 1511, signal 131599/156046 (executing program) 2022/09/28 04:07:27 fetching corpus: 1559, signal 132515/157400 (executing program) 2022/09/28 04:07:27 fetching corpus: 1609, signal 134946/159825 (executing program) 2022/09/28 04:07:27 fetching corpus: 1659, signal 137728/162480 (executing program) 2022/09/28 04:07:27 fetching corpus: 1709, signal 139658/164451 (executing program) 2022/09/28 04:07:27 fetching corpus: 1759, signal 140859/165937 (executing program) 2022/09/28 04:07:27 fetching corpus: 1809, signal 141797/167248 (executing program) 2022/09/28 04:07:27 fetching corpus: 1858, signal 143569/169056 (executing program) 2022/09/28 04:07:28 fetching corpus: 1908, signal 145649/170971 (executing program) 2022/09/28 04:07:28 fetching corpus: 1958, signal 147452/172702 (executing program) 2022/09/28 04:07:28 fetching corpus: 2008, signal 148317/173827 (executing program) 2022/09/28 04:07:28 fetching corpus: 2058, signal 149633/175186 (executing program) 2022/09/28 04:07:28 fetching corpus: 2108, signal 150761/176458 (executing program) 2022/09/28 04:07:28 fetching corpus: 2158, signal 151764/177606 (executing program) 2022/09/28 04:07:28 fetching corpus: 2208, signal 153047/178899 (executing program) 2022/09/28 04:07:28 fetching corpus: 2258, signal 154484/180234 (executing program) 2022/09/28 04:07:29 fetching corpus: 2308, signal 155769/181545 (executing program) 2022/09/28 04:07:29 fetching corpus: 2358, signal 156630/182555 (executing program) 2022/09/28 04:07:29 fetching corpus: 2408, signal 157495/183554 (executing program) 2022/09/28 04:07:29 fetching corpus: 2458, signal 158038/184348 (executing program) 2022/09/28 04:07:29 fetching corpus: 2508, signal 159388/185589 (executing program) 2022/09/28 04:07:29 fetching corpus: 2558, signal 160595/186665 (executing program) 2022/09/28 04:07:29 fetching corpus: 2608, signal 161362/187543 (executing program) 2022/09/28 04:07:29 fetching corpus: 2658, signal 162645/188607 (executing program) 2022/09/28 04:07:29 fetching corpus: 2708, signal 163700/189560 (executing program) 2022/09/28 04:07:30 fetching corpus: 2758, signal 164543/190378 (executing program) 2022/09/28 04:07:30 fetching corpus: 2808, signal 165536/191304 (executing program) 2022/09/28 04:07:30 fetching corpus: 2857, signal 166766/192284 (executing program) 2022/09/28 04:07:30 fetching corpus: 2907, signal 167763/193160 (executing program) 2022/09/28 04:07:30 fetching corpus: 2957, signal 168351/193844 (executing program) 2022/09/28 04:07:30 fetching corpus: 3007, signal 169233/194633 (executing program) 2022/09/28 04:07:30 fetching corpus: 3057, signal 170604/195572 (executing program) 2022/09/28 04:07:30 fetching corpus: 3107, signal 172064/196507 (executing program) 2022/09/28 04:07:31 fetching corpus: 3157, signal 172798/197141 (executing program) 2022/09/28 04:07:31 fetching corpus: 3207, signal 173457/197762 (executing program) 2022/09/28 04:07:31 fetching corpus: 3257, signal 174055/198374 (executing program) 2022/09/28 04:07:31 fetching corpus: 3306, signal 174975/199085 (executing program) 2022/09/28 04:07:31 fetching corpus: 3356, signal 175975/199783 (executing program) 2022/09/28 04:07:31 fetching corpus: 3406, signal 177129/200609 (executing program) 2022/09/28 04:07:31 fetching corpus: 3456, signal 177648/201114 (executing program) 2022/09/28 04:07:31 fetching corpus: 3506, signal 178210/201642 (executing program) 2022/09/28 04:07:32 fetching corpus: 3556, signal 178874/202169 (executing program) 2022/09/28 04:07:32 fetching corpus: 3606, signal 179445/202644 (executing program) 2022/09/28 04:07:32 fetching corpus: 3656, signal 180340/203229 (executing program) 2022/09/28 04:07:32 fetching corpus: 3706, signal 181595/203875 (executing program) 2022/09/28 04:07:32 fetching corpus: 3756, signal 182196/204317 (executing program) 2022/09/28 04:07:32 fetching corpus: 3806, signal 182720/204737 (executing program) 2022/09/28 04:07:32 fetching corpus: 3856, signal 183230/205139 (executing program) 2022/09/28 04:07:32 fetching corpus: 3906, signal 183881/205587 (executing program) 2022/09/28 04:07:32 fetching corpus: 3956, signal 185099/206138 (executing program) 2022/09/28 04:07:33 fetching corpus: 4006, signal 185783/206550 (executing program) 2022/09/28 04:07:33 fetching corpus: 4056, signal 186420/206974 (executing program) 2022/09/28 04:07:33 fetching corpus: 4106, signal 188292/207564 (executing program) 2022/09/28 04:07:33 fetching corpus: 4155, signal 188706/207880 (executing program) 2022/09/28 04:07:33 fetching corpus: 4205, signal 189262/208187 (executing program) 2022/09/28 04:07:33 fetching corpus: 4255, signal 190013/208533 (executing program) 2022/09/28 04:07:33 fetching corpus: 4305, signal 190710/208870 (executing program) 2022/09/28 04:07:34 fetching corpus: 4355, signal 191341/209210 (executing program) 2022/09/28 04:07:34 fetching corpus: 4404, signal 191936/209508 (executing program) 2022/09/28 04:07:34 fetching corpus: 4454, signal 192655/209788 (executing program) 2022/09/28 04:07:34 fetching corpus: 4504, signal 193569/210109 (executing program) 2022/09/28 04:07:34 fetching corpus: 4554, signal 194124/210363 (executing program) 2022/09/28 04:07:34 fetching corpus: 4604, signal 194523/210604 (executing program) 2022/09/28 04:07:34 fetching corpus: 4654, signal 195063/210801 (executing program) 2022/09/28 04:07:34 fetching corpus: 4704, signal 195764/211023 (executing program) 2022/09/28 04:07:34 fetching corpus: 4754, signal 196502/211246 (executing program) 2022/09/28 04:07:35 fetching corpus: 4804, signal 196877/211406 (executing program) 2022/09/28 04:07:35 fetching corpus: 4854, signal 197421/211581 (executing program) 2022/09/28 04:07:35 fetching corpus: 4904, signal 198284/211754 (executing program) 2022/09/28 04:07:35 fetching corpus: 4954, signal 198786/211893 (executing program) 2022/09/28 04:07:35 fetching corpus: 5004, signal 199181/212023 (executing program) 2022/09/28 04:07:35 fetching corpus: 5054, signal 199911/212154 (executing program) 2022/09/28 04:07:35 fetching corpus: 5104, signal 201111/212265 (executing program) 2022/09/28 04:07:35 fetching corpus: 5154, signal 202197/212274 (executing program) 2022/09/28 04:07:36 fetching corpus: 5204, signal 202659/212312 (executing program) 2022/09/28 04:07:36 fetching corpus: 5253, signal 203161/212332 (executing program) 2022/09/28 04:07:36 fetching corpus: 5303, signal 203761/212335 (executing program) 2022/09/28 04:07:36 fetching corpus: 5353, signal 204687/212335 (executing program) 2022/09/28 04:07:36 fetching corpus: 5403, signal 205243/212339 (executing program) 2022/09/28 04:07:36 fetching corpus: 5453, signal 205639/212349 (executing program) 2022/09/28 04:07:36 fetching corpus: 5493, signal 206364/212349 (executing program) 2022/09/28 04:07:36 fetching corpus: 5493, signal 206364/212349 (executing program) 2022/09/28 04:07:38 starting 8 fuzzer processes 04:07:38 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x34}}) 04:07:38 executing program 7: keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x1) 04:07:38 executing program 6: syz_mount_image$vfat(&(0x7f0000004580), &(0x7f00000045c0)='./file0\x00', 0x0, 0x2, &(0x7f0000005740)=[{&(0x7f0000004600)="dd", 0x1}, {&(0x7f0000004740)="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", 0x22a}], 0x801c01, &(0x7f00000057c0)={[{@utf8no}]}) 04:07:38 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='setgroups\x00') 04:07:38 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') openat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) [ 70.270311] audit: type=1400 audit(1664338058.864:6): avc: denied { execmem } for pid=283 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:07:38 executing program 2: syz_emit_ethernet(0x66, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "f2e2a6", 0x0, 0x3c, 0x0, @private2, @remote}}}}}}}, 0x0) 04:07:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, "f7274b58a80fb85a779e431f85ce6b955f7560"}) 04:07:38 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000008b40), 0x1, 0x0, &(0x7f0000008b80)={0x77359400}, 0x0, 0x0) [ 71.414955] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.416984] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.422033] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.425577] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.427925] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.429713] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.434463] Bluetooth: hci0: HCI_REQ-0x0c1a [ 71.536666] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.538081] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.543107] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.545063] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.547203] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.549082] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.550558] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.552079] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.553421] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.558384] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.560013] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.561378] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.564413] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.565724] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.567614] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.569090] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.570494] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.573330] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.588868] Bluetooth: hci1: HCI_REQ-0x0c1a [ 71.592683] Bluetooth: hci2: HCI_REQ-0x0c1a [ 71.618958] Bluetooth: hci3: HCI_REQ-0x0c1a [ 71.663620] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 71.665439] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.666797] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 71.699250] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.701172] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 71.703082] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 71.707173] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 71.708899] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 71.710167] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 71.714686] Bluetooth: hci5: HCI_REQ-0x0c1a [ 71.803056] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 71.810341] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.837407] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 71.875933] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.876518] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 71.890336] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 71.893826] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 71.895420] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 71.904303] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.915364] Bluetooth: hci7: HCI_REQ-0x0c1a [ 71.919868] Bluetooth: hci4: HCI_REQ-0x0c1a [ 73.498253] Bluetooth: hci0: command 0x0409 tx timeout [ 73.625837] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 73.627280] Bluetooth: hci1: command 0x0409 tx timeout [ 73.689881] Bluetooth: hci2: command 0x0409 tx timeout [ 73.690522] Bluetooth: hci3: command 0x0409 tx timeout [ 73.754329] Bluetooth: hci5: command 0x0409 tx timeout [ 73.946126] Bluetooth: hci4: command 0x0409 tx timeout [ 73.946840] Bluetooth: hci7: command 0x0409 tx timeout [ 75.545869] Bluetooth: hci0: command 0x041b tx timeout [ 75.673855] Bluetooth: hci1: command 0x041b tx timeout [ 75.738021] Bluetooth: hci3: command 0x041b tx timeout [ 75.738447] Bluetooth: hci2: command 0x041b tx timeout [ 75.802307] Bluetooth: hci5: command 0x041b tx timeout [ 75.993873] Bluetooth: hci7: command 0x041b tx timeout [ 75.994314] Bluetooth: hci4: command 0x041b tx timeout [ 77.593821] Bluetooth: hci0: command 0x040f tx timeout [ 77.721824] Bluetooth: hci1: command 0x040f tx timeout [ 77.785829] Bluetooth: hci2: command 0x040f tx timeout [ 77.786254] Bluetooth: hci3: command 0x040f tx timeout [ 77.849830] Bluetooth: hci5: command 0x040f tx timeout [ 78.041837] Bluetooth: hci4: command 0x040f tx timeout [ 78.042313] Bluetooth: hci7: command 0x040f tx timeout [ 78.746738] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 79.641843] Bluetooth: hci0: command 0x0419 tx timeout [ 79.769903] Bluetooth: hci1: command 0x0419 tx timeout [ 79.833913] Bluetooth: hci3: command 0x0419 tx timeout [ 79.834837] Bluetooth: hci2: command 0x0419 tx timeout [ 79.898841] Bluetooth: hci5: command 0x0419 tx timeout [ 80.089879] Bluetooth: hci7: command 0x0419 tx timeout [ 80.090742] Bluetooth: hci4: command 0x0419 tx timeout [ 83.417881] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 86.052228] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 86.054896] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 86.055999] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 86.073203] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 86.086838] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 86.099983] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 86.117881] Bluetooth: hci6: HCI_REQ-0x0c1a [ 88.153855] Bluetooth: hci6: command 0x0409 tx timeout [ 90.201837] Bluetooth: hci6: command 0x041b tx timeout [ 92.249868] Bluetooth: hci6: command 0x040f tx timeout [ 94.297814] Bluetooth: hci6: command 0x0419 tx timeout 04:08:33 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x2000, 0x1) 04:08:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 04:08:33 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x34}}) 04:08:33 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0xf, 0x0, 0x0) 04:08:33 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x34}}) 04:08:33 executing program 4: syz_emit_ethernet(0x5e, &(0x7f0000000140)={@local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b0e0ee", 0x28, 0x0, 0x0, @private0, @mcast2, {[@hopopts={0x0, 0x3, '\x00', [@ra={0x31}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @ra={0x5, 0x2, 0x2c00}]}]}}}}}, 0x0) 04:08:33 executing program 4: syz_emit_ethernet(0x5e, &(0x7f0000000140)={@local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b0e0ee", 0x28, 0x0, 0x0, @private0, @mcast2, {[@hopopts={0x0, 0x3, '\x00', [@ra={0x31}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @ra={0x5, 0x2, 0x2c00}]}]}}}}}, 0x0) 04:08:33 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x34}}) [ 126.504847] loop6: detected capacity change from 0 to 1 [ 126.514971] loop6: detected capacity change from 0 to 1 04:08:42 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) close(r0) 04:08:42 executing program 2: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000600)={{0x2, 0x0, 0x0, 0xee01}}) 04:08:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, &(0x7f00000005c0)) 04:08:42 executing program 7: getrusage(0xfffffffffffffffe, 0x0) 04:08:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000294fc266f153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa5252614100"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="0000000072724161450000001a000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="eb58906d6b66732e66617400020120000200008000f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000294fc266f153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0, 0xc00}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0fffffff0f0500000006000000ffffff0fffffff0f090000000a0000000b0000000c0000000d0000000e0000000f00000010000000110000001200000013000000140000001500000016000000170000001800000019000000ffffff0fffffff0f00"/128, 0x80, 0x4000}, {&(0x7f0000010600)="f8ffff0fffffff0ff8ffff0fffffff0f0500000006000000ffffff0fffffff0f090000000a0000000b0000000c0000000d0000000e0000000f00000010000000110000001200000013000000140000001500000016000000170000001800000019000000ffffff0fffffff0f00"/128, 0x80, 0x4200}, {&(0x7f0000010700)="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", 0x120, 0x4400}, {&(0x7f0000010900)="2e20202020202020202020100076e970325132510000e97032510300000000002e2e202020202020202020100076e970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200076e970325132510000e970325104001a040000", 0x80, 0x4600}, {&(0x7f0000010a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x4800}, {&(0x7f0000010f00)='syzkallers\x00'/32, 0x20, 0x4e00}, {&(0x7f0000011000)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x7400}], 0x0, &(0x7f0000011100)) 04:08:42 executing program 4: syz_emit_ethernet(0x5e, &(0x7f0000000140)={@local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b0e0ee", 0x28, 0x0, 0x0, @private0, @mcast2, {[@hopopts={0x0, 0x3, '\x00', [@ra={0x31}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @ra={0x5, 0x2, 0x2c00}]}]}}}}}, 0x0) 04:08:42 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') openat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) 04:08:42 executing program 5: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), r0) [ 134.245828] loop3: detected capacity change from 0 to 128 04:08:42 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) close(r0) 04:08:42 executing program 2: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000600)={{0x2, 0x0, 0x0, 0xee01}}) 04:08:42 executing program 5: prlimit64(0x0, 0xd, &(0x7f0000000d40), 0x0) 04:08:42 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') openat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) 04:08:42 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 04:08:42 executing program 7: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x4}}}}}}}]}}, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000d80), 0x200200, 0x0) ioctl$CDROMMULTISESSION(0xffffffffffffffff, 0x5310, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000e80), 0xffffffffffffffff) 04:08:42 executing program 4: syz_emit_ethernet(0x5e, &(0x7f0000000140)={@local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b0e0ee", 0x28, 0x0, 0x0, @private0, @mcast2, {[@hopopts={0x0, 0x3, '\x00', [@ra={0x31}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @ra={0x5, 0x2, 0x2c00}]}]}}}}}, 0x0) 04:08:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') pread64(r2, &(0x7f0000000180)=""/234, 0xea, 0x5) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x28, r1, 0x87d27e71721737b5, 0x0, 0x0, {{0x6b}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 04:08:43 executing program 5: prlimit64(0x0, 0xd, &(0x7f0000000d40), 0x0) 04:08:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') openat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) 04:08:43 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) [ 134.500386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.502272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 04:08:43 executing program 2: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000600)={{0x2, 0x0, 0x0, 0xee01}}) 04:08:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') pread64(r2, &(0x7f0000000180)=""/234, 0xea, 0x5) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x28, r1, 0x87d27e71721737b5, 0x0, 0x0, {{0x6b}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 04:08:43 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) close(r0) 04:08:43 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 04:08:43 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001000000000000000200000001000600000000000000000000000000800029293ac6f153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa5252614100"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001000000000000000200000001000600000000000000000000000000800029293ac6f153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0, 0xc00}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4000}, {&(0x7f0000010600)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4200}, {&(0x7f0000010700)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4400}, {&(0x7f0000010800)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4600}, {&(0x7f0000010900)="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", 0x120, 0x4800}, {&(0x7f0000010b00)="2e2020202020202020202010004eec70325132510000ec7032510300000000002e2e20202020202020202010004eec70325132510000ec70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202020004fec70325132510000ec70325104001a040000", 0x80, 0x14800}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x24800}, {&(0x7f0000011100)='syzkallers\x00'/32, 0x20, 0x34800}, {&(0x7f0000011200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x54800}], 0x0, &(0x7f0000011300)) 04:08:43 executing program 2: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000600)={{0x2, 0x0, 0x0, 0xee01}}) 04:08:43 executing program 1: getegid() [ 134.700721] loop4: detected capacity change from 0 to 1352 [ 135.293580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.295372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 04:08:43 executing program 5: prlimit64(0x0, 0xd, &(0x7f0000000d40), 0x0) 04:08:43 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x1) close(r0) 04:08:43 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 04:08:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 04:08:43 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) 04:08:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') pread64(r2, &(0x7f0000000180)=""/234, 0xea, 0x5) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x28, r1, 0x87d27e71721737b5, 0x0, 0x0, {{0x6b}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 04:08:43 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0x0, 0x0, &(0x7f0000000a00)) 04:08:43 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000012c0)=[{{&(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @empty}, 0xf, 0x0, 0x0, &(0x7f0000001340)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x0, 0x2}]}}}], 0x18}}], 0x2, 0x0) 04:08:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 04:08:44 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) 04:08:44 executing program 5: prlimit64(0x0, 0xd, &(0x7f0000000d40), 0x0) 04:08:44 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x5000000) 04:08:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') pread64(r2, &(0x7f0000000180)=""/234, 0xea, 0x5) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x28, r1, 0x87d27e71721737b5, 0x0, 0x0, {{0x6b}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 04:08:44 executing program 6: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000000940)) 04:08:44 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) 04:08:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 04:08:44 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) 04:08:44 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) io_setup(0x1f, &(0x7f0000000100)=0x0) io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000380)={0x0, 0x0, 0x8, 0x0, 0x0, r0, 0x0}]) 04:08:44 executing program 0: mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000), 0x81, 0x0) 04:08:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 04:08:44 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) 04:08:44 executing program 5: syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$SEG6(&(0x7f0000000540), 0xffffffffffffffff) 04:08:44 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x541b, &(0x7f00000000c0)) 04:08:44 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) 04:08:44 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2$9p(&(0x7f00000024c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fstat(r0, &(0x7f0000002580)) 04:08:44 executing program 0: sched_setattr(0x0, 0xffffffffffffffff, 0x0) 04:08:44 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001300)=""/127, 0x7f}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x5422, 0x0) 04:08:44 executing program 6: futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f00000001c0), 0x2000000) 04:08:44 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000080)=0xfffff0a8, 0x4) 04:08:44 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) 04:08:44 executing program 7: semctl$SEM_STAT_ANY(0xffffffffffffffff, 0x0, 0x14, 0x0) 04:08:44 executing program 5: shmctl$SHM_LOCK(0x0, 0xb) 04:08:44 executing program 0: syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000007480), 0xffffffffffffffff) 04:08:44 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x541b, &(0x7f00000000c0)) 04:08:44 executing program 7: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000004500)=[{{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f00000017c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000001a00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}], 0x1, 0x0) 04:08:44 executing program 6: futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f00000001c0), 0x2000000) 04:08:44 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) 04:08:44 executing program 2: socketpair(0x0, 0x1003, 0x0, 0x0) 04:08:44 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001300)=""/127, 0x7f}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x5422, 0x0) 04:08:44 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x541b, &(0x7f00000000c0)) 04:08:45 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001300)=""/127, 0x7f}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x5422, 0x0) 04:08:45 executing program 6: futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f00000001c0), 0x2000000) 04:08:45 executing program 7: r0 = syz_io_uring_setup(0x4efe, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, 0x0}, 0x101) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0xf57, 0x0, 0x0, 0x0, 0x0) 04:08:45 executing program 2: socketpair(0x0, 0x1003, 0x0, 0x0) 04:08:45 executing program 0: futex(&(0x7f0000000000), 0x8, 0x0, &(0x7f0000000040)={0x77359400}, 0x0, 0x0) 04:08:45 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000018c0), 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000000)) 04:08:45 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001300)=""/127, 0x7f}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x5422, 0x0) 04:08:45 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x541b, &(0x7f00000000c0)) 04:08:45 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001300)=""/127, 0x7f}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x5422, 0x0) 04:08:45 executing program 6: futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f00000001c0), 0x2000000) 04:08:45 executing program 2: socketpair(0x0, 0x1003, 0x0, 0x0) 04:08:45 executing program 4: syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x20004800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x84022000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x60, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000804) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000c00), r0) 04:08:45 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'syz_tun\x00', &(0x7f0000000240)=@ethtool_drvinfo={0x3, "d46732d04624cdc89f5dec230b380e07d8123c592c96ef602bd01176c084fcd9", "40d4f495b6f7811f204bec32a4a8af41c9cf040b9909eb55dd77c12b3981a3a8", "f4ad32020921db5d94eeb03cd3b4294cbdb489c9579320a9a42d79a44c994924", "1c32a8dc119cd95503f010fe10eb8390ab694284d8ce29b51b1e6b09469daab3", "8781e0c558af64628f357b4ac4dd8b7b33470d08904c897c66e36bf1e5f0a03c", "5e5b15f39ffaf8a3379f6856"}}) 04:08:45 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, 0x0, 0x13) 04:08:45 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) flock(r0, 0x2) flock(r0, 0x2) 04:08:45 executing program 2: socketpair(0x0, 0x1003, 0x0, 0x0) [ 136.966700] audit: type=1400 audit(1664338125.560:7): avc: denied { open } for pid=4157 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 136.968597] audit: type=1400 audit(1664338125.560:8): avc: denied { kernel } for pid=4157 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 136.993694] ------------[ cut here ]------------ [ 136.993719] [ 136.993723] ====================================================== [ 136.993727] WARNING: possible circular locking dependency detected [ 136.993732] 6.0.0-rc7-next-20220927 #1 Not tainted [ 136.993740] ------------------------------------------------------ [ 136.993744] syz-executor.6/4158 is trying to acquire lock: [ 136.993752] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 136.993806] [ 136.993806] but task is already holding lock: [ 136.993810] ffff88800fb8ac20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 136.993845] [ 136.993845] which lock already depends on the new lock. [ 136.993845] [ 136.993849] [ 136.993849] the existing dependency chain (in reverse order) is: [ 136.993854] [ 136.993854] -> #3 (&ctx->lock){....}-{2:2}: [ 136.993871] _raw_spin_lock+0x2a/0x40 [ 136.993887] __perf_event_task_sched_out+0x53b/0x18d0 [ 136.993903] __schedule+0xedd/0x2470 04:08:45 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000080)) 04:08:45 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001300)=""/127, 0x7f}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x5422, 0x0) [ 136.993923] schedule+0xda/0x1b0 [ 136.993942] exit_to_user_mode_prepare+0x114/0x1a0 [ 136.993957] syscall_exit_to_user_mode+0x19/0x40 [ 136.993975] do_syscall_64+0x48/0x90 [ 136.993988] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 136.994007] [ 136.994007] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 136.994023] _raw_spin_lock_nested+0x30/0x40 [ 136.994039] raw_spin_rq_lock_nested+0x1e/0x30 [ 136.994055] task_fork_fair+0x63/0x4d0 [ 136.994076] sched_cgroup_fork+0x3d0/0x540 [ 136.994094] copy_process+0x4183/0x6e20 [ 136.994107] kernel_clone+0xe7/0x890 [ 136.994119] user_mode_thread+0xad/0xf0 [ 136.994132] rest_init+0x24/0x250 [ 136.994148] arch_call_rest_init+0xf/0x14 [ 136.994166] start_kernel+0x4c6/0x4eb [ 136.994180] secondary_startup_64_no_verify+0xe0/0xeb [ 136.994198] [ 136.994198] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 136.994214] _raw_spin_lock_irqsave+0x39/0x60 [ 136.994230] try_to_wake_up+0xab/0x1930 [ 136.994246] up+0x75/0xb0 [ 136.994265] __up_console_sem+0x6e/0x80 [ 136.994285] console_unlock+0x46a/0x590 [ 136.994304] con_install+0x14e/0x5d0 [ 136.994319] tty_init_dev.part.0+0xa0/0x5e0 [ 136.994337] tty_open+0xba3/0x1350 [ 136.994351] chrdev_open+0x268/0x6e0 [ 136.994369] do_dentry_open+0x6ca/0x12b0 [ 136.994386] path_openat+0x187f/0x2770 [ 136.994401] do_filp_open+0x1b6/0x410 [ 136.994415] do_sys_openat2+0x171/0x4c0 [ 136.994434] __x64_sys_openat+0x13f/0x1f0 [ 136.994453] do_syscall_64+0x3b/0x90 [ 136.994465] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 136.994483] [ 136.994483] -> #0 ((console_sem).lock){....}-{2:2}: [ 136.994500] __lock_acquire+0x2a02/0x5e70 [ 136.994521] lock_acquire+0x1a2/0x530 [ 136.994540] _raw_spin_lock_irqsave+0x39/0x60 [ 136.994555] down_trylock+0xe/0x70 [ 136.994576] __down_trylock_console_sem+0x3b/0xd0 [ 136.994596] vprintk_emit+0x16b/0x560 [ 136.994616] vprintk+0x84/0xa0 [ 136.994635] _printk+0xba/0xf1 [ 136.994651] report_bug.cold+0x72/0xab [ 136.994664] handle_bug+0x3c/0x70 [ 136.994676] exc_invalid_op+0x14/0x50 [ 136.994689] asm_exc_invalid_op+0x16/0x20 [ 136.994705] group_sched_out.part.0+0x2c7/0x460 [ 136.994719] ctx_sched_out+0x8f1/0xc10 [ 136.994732] __perf_event_task_sched_out+0x6d0/0x18d0 [ 136.994748] __schedule+0xedd/0x2470 [ 136.994766] schedule+0xda/0x1b0 [ 136.994787] exit_to_user_mode_prepare+0x114/0x1a0 [ 136.994802] syscall_exit_to_user_mode+0x19/0x40 [ 136.994820] do_syscall_64+0x48/0x90 [ 136.994832] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 136.994850] [ 136.994850] other info that might help us debug this: [ 136.994850] [ 136.994853] Chain exists of: [ 136.994853] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 136.994853] [ 136.994872] Possible unsafe locking scenario: [ 136.994872] [ 136.994875] CPU0 CPU1 [ 136.994878] ---- ---- [ 136.994881] lock(&ctx->lock); [ 136.994888] lock(&rq->__lock); [ 136.994896] lock(&ctx->lock); [ 136.994904] lock((console_sem).lock); [ 136.994911] [ 136.994911] *** DEADLOCK *** [ 136.994911] [ 136.994913] 2 locks held by syz-executor.6/4158: [ 136.994922] #0: ffff88806cf37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 136.994960] #1: ffff88800fb8ac20 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 136.994995] [ 136.994995] stack backtrace: [ 136.994998] CPU: 1 PID: 4158 Comm: syz-executor.6 Not tainted 6.0.0-rc7-next-20220927 #1 [ 136.995014] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 136.995024] Call Trace: [ 136.995028] [ 136.995033] dump_stack_lvl+0x8b/0xb3 [ 136.995048] check_noncircular+0x263/0x2e0 [ 136.995068] ? format_decode+0x26c/0xb50 [ 136.995091] ? print_circular_bug+0x450/0x450 [ 136.995112] ? enable_ptr_key_workfn+0x20/0x20 [ 136.995135] ? format_decode+0x26c/0xb50 [ 136.995158] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 136.995180] __lock_acquire+0x2a02/0x5e70 [ 136.995207] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 136.995235] lock_acquire+0x1a2/0x530 04:08:45 executing program 4: syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x20004800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x84022000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x60, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000804) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000c00), r0) [ 136.995256] ? down_trylock+0xe/0x70 [ 136.995279] ? lock_release+0x750/0x750 [ 136.995304] ? vprintk+0x84/0xa0 [ 136.995327] _raw_spin_lock_irqsave+0x39/0x60 [ 136.995342] ? down_trylock+0xe/0x70 [ 136.995364] down_trylock+0xe/0x70 [ 136.995386] ? vprintk+0x84/0xa0 [ 136.995407] __down_trylock_console_sem+0x3b/0xd0 [ 136.995428] vprintk_emit+0x16b/0x560 [ 136.995451] vprintk+0x84/0xa0 [ 136.995473] _printk+0xba/0xf1 [ 136.995489] ? record_print_text.cold+0x16/0x16 [ 136.995510] ? report_bug.cold+0x66/0xab [ 136.995525] ? group_sched_out.part.0+0x2c7/0x460 [ 136.995540] report_bug.cold+0x72/0xab [ 136.995555] handle_bug+0x3c/0x70 [ 136.995569] exc_invalid_op+0x14/0x50 [ 136.995583] asm_exc_invalid_op+0x16/0x20 [ 136.995601] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 136.995618] Code: 5e 41 5f e9 ab a9 ef ff e8 a6 a9 ef ff 65 8b 1d 1b 0f ac 7e 31 ff 89 de e8 46 a6 ef ff 85 db 0f 84 8a 00 00 00 e8 89 a9 ef ff <0f> 0b e9 a5 fe ff ff e8 7d a9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 136.995633] RSP: 0018:ffff88804165fc48 EFLAGS: 00010006 [ 136.995644] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 136.995653] RDX: ffff88804164b580 RSI: ffffffff815666b7 RDI: 0000000000000005 [ 136.995663] RBP: ffff8880414e0000 R08: 0000000000000005 R09: 0000000000000001 [ 136.995672] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800fb8ac00 [ 136.995682] R13: ffff88806cf3d140 R14: ffffffff8547d0e0 R15: 0000000000000002 [ 136.995696] ? group_sched_out.part.0+0x2c7/0x460 [ 136.995713] ? group_sched_out.part.0+0x2c7/0x460 [ 136.995730] ctx_sched_out+0x8f1/0xc10 [ 136.995763] __perf_event_task_sched_out+0x6d0/0x18d0 [ 136.995783] ? lock_is_held_type+0xd7/0x130 [ 136.995802] ? __perf_cgroup_move+0x160/0x160 [ 136.995817] ? set_next_entity+0x304/0x550 [ 136.995839] ? update_curr+0x267/0x740 [ 136.995862] ? lock_is_held_type+0xd7/0x130 [ 136.995881] __schedule+0xedd/0x2470 [ 136.995904] ? io_schedule_timeout+0x150/0x150 [ 136.995927] ? rcu_read_lock_sched_held+0x3e/0x80 [ 136.995952] schedule+0xda/0x1b0 [ 136.995973] exit_to_user_mode_prepare+0x114/0x1a0 [ 136.995989] syscall_exit_to_user_mode+0x19/0x40 [ 136.996007] do_syscall_64+0x48/0x90 [ 136.996021] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 136.996040] RIP: 0033:0x7f6c0a954b19 [ 136.996050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 136.996063] RSP: 002b:00007f6c07eca218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 136.996077] RAX: 0000000000000001 RBX: 00007f6c0aa67f68 RCX: 00007f6c0a954b19 [ 136.996086] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6c0aa67f6c [ 136.996095] RBP: 00007f6c0aa67f60 R08: 000000000000000e R09: 0000000000000000 [ 136.996104] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f6c0aa67f6c [ 136.996113] R13: 00007fff8300e61f R14: 00007f6c07eca300 R15: 0000000000022000 [ 136.996129] [ 137.067358] WARNING: CPU: 1 PID: 4158 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 137.068324] Modules linked in: [ 137.068635] CPU: 1 PID: 4158 Comm: syz-executor.6 Not tainted 6.0.0-rc7-next-20220927 #1 [ 137.069373] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 137.070385] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 137.070879] Code: 5e 41 5f e9 ab a9 ef ff e8 a6 a9 ef ff 65 8b 1d 1b 0f ac 7e 31 ff 89 de e8 46 a6 ef ff 85 db 0f 84 8a 00 00 00 e8 89 a9 ef ff <0f> 0b e9 a5 fe ff ff e8 7d a9 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 137.072523] RSP: 0018:ffff88804165fc48 EFLAGS: 00010006 [ 137.073012] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 137.073657] RDX: ffff88804164b580 RSI: ffffffff815666b7 RDI: 0000000000000005 [ 137.074308] RBP: ffff8880414e0000 R08: 0000000000000005 R09: 0000000000000001 [ 137.074952] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800fb8ac00 [ 137.075593] R13: ffff88806cf3d140 R14: ffffffff8547d0e0 R15: 0000000000000002 [ 137.076246] FS: 00007f6c07eca700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 137.076974] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.077497] CR2: 0000555557371c58 CR3: 0000000031fcc000 CR4: 0000000000350ee0 [ 137.078140] Call Trace: [ 137.078378] [ 137.078592] ctx_sched_out+0x8f1/0xc10 [ 137.078954] __perf_event_task_sched_out+0x6d0/0x18d0 [ 137.079427] ? lock_is_held_type+0xd7/0x130 [ 137.079843] ? __perf_cgroup_move+0x160/0x160 [ 137.080258] ? set_next_entity+0x304/0x550 [ 137.080655] ? update_curr+0x267/0x740 [ 137.081030] ? lock_is_held_type+0xd7/0x130 [ 137.081433] __schedule+0xedd/0x2470 [ 137.081790] ? io_schedule_timeout+0x150/0x150 [ 137.082224] ? rcu_read_lock_sched_held+0x3e/0x80 [ 137.082678] schedule+0xda/0x1b0 [ 137.083003] exit_to_user_mode_prepare+0x114/0x1a0 [ 137.083457] syscall_exit_to_user_mode+0x19/0x40 [ 137.083900] do_syscall_64+0x48/0x90 [ 137.084250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 137.084725] RIP: 0033:0x7f6c0a954b19 [ 137.085064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 137.086687] RSP: 002b:00007f6c07eca218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 137.087291] RAX: 0000000000000001 RBX: 00007f6c0aa67f68 RCX: 00007f6c0a954b19 [ 137.087830] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6c0aa67f6c [ 137.088373] RBP: 00007f6c0aa67f60 R08: 000000000000000e R09: 0000000000000000 [ 137.088912] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f6c0aa67f6c [ 137.089460] R13: 00007fff8300e61f R14: 00007f6c07eca300 R15: 0000000000022000 [ 137.090003] [ 137.090182] irq event stamp: 680 [ 137.090438] hardirqs last enabled at (679): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 137.091144] hardirqs last disabled at (680): [] __schedule+0x1225/0x2470 [ 137.091783] softirqs last enabled at (378): [] __irq_exit_rcu+0x11b/0x180 [ 137.092433] softirqs last disabled at (279): [] __irq_exit_rcu+0x11b/0x180 [ 137.093073] ---[ end trace 0000000000000000 ]--- 04:08:45 executing program 0: syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), 0xffffffffffffffff) fork() 04:08:45 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001300)=""/127, 0x7f}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x5422, 0x0) 04:08:45 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x9) 04:08:45 executing program 2: syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) 04:08:45 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000080)) 04:08:45 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getgroups(0x0, 0x0) 04:08:45 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @empty, @void, {@arp={0x8906, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @local, @loopback, @link_local, @local}}}}, 0x0) 04:08:45 executing program 3: io_setup(0x6, &(0x7f0000000580)) io_setup(0x800, &(0x7f0000000680)) 04:08:45 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_score_adj\x00') sync_file_range(r0, 0x100000001, 0x3, 0x3) 04:08:45 executing program 4: syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x20004800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x84022000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x60, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000804) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000c00), r0) 04:08:45 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000080)) 04:08:45 executing program 3: syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000700), 0xffffffffffffffff) 04:08:45 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x5}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x20, 0x5, 0xdd, 0xda, 0x0, 0x1, 0x24, 0x9, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000180), 0x1}, 0x40, 0x6, 0x0, 0x4, 0x8, 0x2, 0x120, 0x0, 0x401, 0x0, 0x7eb7c92c}, 0x0, 0xe, r1, 0x8) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x9, 0x0, 0x7, 0x11, 0x0, 0x7fff, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x6, 0xfff}, 0x40, 0x10001, 0x20, 0x8, 0x73e, 0xffffffff, 0x9, 0x0, 0x9, 0x0, 0x3}, 0x0, 0x9, r0, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f00000035c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, &(0x7f0000002300)=[{&(0x7f0000000080)="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", 0x545}], 0x1, &(0x7f0000000c00)=[@hopopts_2292={{0x78, 0x29, 0x36, {0x0, 0xc, '\x00', [@pad1, @generic={0x0, 0x59, "85b0ba1ffd758a1ec73e4f4da4df30e9a6fff8ee99c8aa4df3d8af7643c62095ba874e7565f1f7af62af3f5ee11b44637f0665d9e3af74494f8eb2b02fe49b136189a2f2fb17df467a350cc0476da87dab6536e61653886516"}, @padn]}}}], 0x78}}], 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 04:08:45 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x9) 04:08:46 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x4, &(0x7f0000001640)=[{&(0x7f0000001040)='Z', 0x1}, {&(0x7f0000001140)="a7", 0x1}, {&(0x7f0000001180)="d4", 0x1}, {&(0x7f0000001300)='p', 0x1}], 0x0, 0x0) 04:08:46 executing program 4: syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x20004800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x84022000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x60, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000804) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000c00), r0) 04:08:46 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) [ 137.467781] hrtimer: interrupt took 18094 ns 04:08:46 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x9) 04:08:46 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000080)) 04:08:46 executing program 2: syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) 04:08:46 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x9) 04:08:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, 0x0, &(0x7f0000000040)) 04:08:46 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:08:46 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x40081271) 04:08:46 executing program 6: pipe(&(0x7f00000000c0)) syz_io_uring_setup(0xcef, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) pipe(&(0x7f0000000300)) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) execveat(r0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000780)=[&(0x7f0000000580)='/},[&\x00', &(0x7f00000005c0)='[^{/\x00', &(0x7f0000000600)='/proc/thread-self\x00', &(0x7f0000000640)='!/-}}:}%!]^g\x95\\]:!@\x00', &(0x7f0000000680)='.pending_reads\x00', &(0x7f00000006c0)='.pending_reads\x00', &(0x7f0000000700)='.pending_reads\x00', &(0x7f0000000740)='\x00'], &(0x7f0000000a40)=[&(0x7f00000007c0)='#\x00', &(0x7f0000000900)='.pending_reads\x00'], 0x0) 04:08:46 executing program 2: syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) 04:08:46 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x40a81, 0x0) write$vga_arbiter(r0, &(0x7f0000000140), 0x9) 04:08:46 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x5}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x20, 0x5, 0xdd, 0xda, 0x0, 0x1, 0x24, 0x9, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000180), 0x1}, 0x40, 0x6, 0x0, 0x4, 0x8, 0x2, 0x120, 0x0, 0x401, 0x0, 0x7eb7c92c}, 0x0, 0xe, r1, 0x8) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x9, 0x0, 0x7, 0x11, 0x0, 0x7fff, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x6, 0xfff}, 0x40, 0x10001, 0x20, 0x8, 0x73e, 0xffffffff, 0x9, 0x0, 0x9, 0x0, 0x3}, 0x0, 0x9, r0, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f00000035c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, &(0x7f0000002300)=[{&(0x7f0000000080)="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", 0x545}], 0x1, &(0x7f0000000c00)=[@hopopts_2292={{0x78, 0x29, 0x36, {0x0, 0xc, '\x00', [@pad1, @generic={0x0, 0x59, "85b0ba1ffd758a1ec73e4f4da4df30e9a6fff8ee99c8aa4df3d8af7643c62095ba874e7565f1f7af62af3f5ee11b44637f0665d9e3af74494f8eb2b02fe49b136189a2f2fb17df467a350cc0476da87dab6536e61653886516"}, @padn]}}}], 0x78}}], 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 04:08:46 executing program 1: accept$unix(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 04:08:46 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) 04:08:46 executing program 7: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000bc0), 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000c00), &(0x7f0000000c40)=@v2, 0x14, 0x0) 04:08:46 executing program 4: clone3(&(0x7f0000003d40)={0x21000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000003d00)=[0xffffffffffffffff], 0x1}, 0x58) 04:08:46 executing program 7: prctl$PR_GET_KEEPCAPS(0x7) 04:08:46 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x5409, 0x0) 04:08:46 executing program 4: clone3(&(0x7f0000003d40)={0x21000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000003d00)=[0xffffffffffffffff], 0x1}, 0x58) 04:08:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8931, &(0x7f0000000040)={'syz_tun\x00', 0x0}) 04:08:46 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:08:46 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) 04:08:46 executing program 7: prctl$PR_GET_KEEPCAPS(0x7) 04:08:46 executing program 2: syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) 04:08:46 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x5409, 0x0) 04:08:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8931, &(0x7f0000000040)={'syz_tun\x00', 0x0}) 04:08:46 executing program 7: prctl$PR_GET_KEEPCAPS(0x7) 04:08:46 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) 04:08:46 executing program 4: clone3(&(0x7f0000003d40)={0x21000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000003d00)=[0xffffffffffffffff], 0x1}, 0x58) 04:08:46 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:08:46 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x5409, 0x0) 04:08:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8931, &(0x7f0000000040)={'syz_tun\x00', 0x0}) 04:08:46 executing program 7: prctl$PR_GET_KEEPCAPS(0x7) 04:08:46 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) 04:08:46 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x5}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x20, 0x5, 0xdd, 0xda, 0x0, 0x1, 0x24, 0x9, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000180), 0x1}, 0x40, 0x6, 0x0, 0x4, 0x8, 0x2, 0x120, 0x0, 0x401, 0x0, 0x7eb7c92c}, 0x0, 0xe, r1, 0x8) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x9, 0x0, 0x7, 0x11, 0x0, 0x7fff, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x6, 0xfff}, 0x40, 0x10001, 0x20, 0x8, 0x73e, 0xffffffff, 0x9, 0x0, 0x9, 0x0, 0x3}, 0x0, 0x9, r0, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f00000035c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, &(0x7f0000002300)=[{&(0x7f0000000080)="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", 0x545}], 0x1, &(0x7f0000000c00)=[@hopopts_2292={{0x78, 0x29, 0x36, {0x0, 0xc, '\x00', [@pad1, @generic={0x0, 0x59, "85b0ba1ffd758a1ec73e4f4da4df30e9a6fff8ee99c8aa4df3d8af7643c62095ba874e7565f1f7af62af3f5ee11b44637f0665d9e3af74494f8eb2b02fe49b136189a2f2fb17df467a350cc0476da87dab6536e61653886516"}, @padn]}}}], 0x78}}], 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 04:08:46 executing program 4: clone3(&(0x7f0000003d40)={0x21000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000003d00)=[0xffffffffffffffff], 0x1}, 0x58) 04:08:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8931, &(0x7f0000000040)={'syz_tun\x00', 0x0}) 04:08:46 executing program 7: r0 = shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r1 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000ff9000/0x1000)=nil, 0x2000) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x5306, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r4, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r5, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r5, &(0x7f0000ff9000/0x4000)=nil, 0x1000) shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffb000/0x4000)=nil) write(r4, &(0x7f0000000140)="90e45c77a9262d19f24754389003c4245182f02ed7b392eea7e6642dc86a48c82f48c3b5f57a71c67a24a860032faaa9c1a92efba1da04d3efa692b2f8de9e89faaea7cbab8f359508a195b5c263d0154f018fa87cced403ef966c7645cfff63", 0x60) 04:08:47 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) 04:08:47 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x5}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x20, 0x5, 0xdd, 0xda, 0x0, 0x1, 0x24, 0x9, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000180), 0x1}, 0x40, 0x6, 0x0, 0x4, 0x8, 0x2, 0x120, 0x0, 0x401, 0x0, 0x7eb7c92c}, 0x0, 0xe, r1, 0x8) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x9, 0x0, 0x7, 0x11, 0x0, 0x7fff, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x6, 0xfff}, 0x40, 0x10001, 0x20, 0x8, 0x73e, 0xffffffff, 0x9, 0x0, 0x9, 0x0, 0x3}, 0x0, 0x9, r0, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f00000035c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, &(0x7f0000002300)=[{&(0x7f0000000080)="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", 0x545}], 0x1, &(0x7f0000000c00)=[@hopopts_2292={{0x78, 0x29, 0x36, {0x0, 0xc, '\x00', [@pad1, @generic={0x0, 0x59, "85b0ba1ffd758a1ec73e4f4da4df30e9a6fff8ee99c8aa4df3d8af7643c62095ba874e7565f1f7af62af3f5ee11b44637f0665d9e3af74494f8eb2b02fe49b136189a2f2fb17df467a350cc0476da87dab6536e61653886516"}, @padn]}}}], 0x78}}], 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 04:08:47 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:08:47 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000140)="8f857635", 0x4}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 04:08:47 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSBRK(r0, 0x5409, 0x0) 04:08:47 executing program 4: syz_emit_ethernet(0x1a, &(0x7f00000003c0)={@empty, @dev, @val={@void, {0x8100, 0x7}}, {@llc_tr={0x11, {@snap={0x0, 0x0, "e9", "b225ad"}}}}}, 0x0) 04:08:47 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x1, 0x0, &(0x7f0000000300)) 04:08:47 executing program 7: r0 = shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r1 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000ff9000/0x1000)=nil, 0x2000) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x5306, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r4, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r5, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r5, &(0x7f0000ff9000/0x4000)=nil, 0x1000) shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffb000/0x4000)=nil) write(r4, &(0x7f0000000140)="90e45c77a9262d19f24754389003c4245182f02ed7b392eea7e6642dc86a48c82f48c3b5f57a71c67a24a860032faaa9c1a92efba1da04d3efa692b2f8de9e89faaea7cbab8f359508a195b5c263d0154f018fa87cced403ef966c7645cfff63", 0x60) 04:08:47 executing program 4: syz_emit_ethernet(0xbe, &(0x7f0000001180)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x88, 0x0, @private=0xa010102, @local}, {0x0, 0x0, 0x7, 0x0, @wg=@initiation={0x1, 0x0, "9cc34027cad83ed73be4f93e7326b9e1da67ee3561924fa66bfa0cb75cff5171", "117ad553083cf29887cf5f29c7a6c95c7558a7482e05b26986482338c4a4807a788dafc8181760316d293733eea7f8d3", "a75e81563131a3cfe7a7f5a39f877d4c3d74923d6412b791b7128fae", {"45ce2e1db012ba00", "e313e602785b0268a2ed03bd928c6509"}}}}}}}, 0x0) 04:08:47 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000140)="8f857635", 0x4}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 04:08:47 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r1 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000ff9000/0x1000)=nil, 0x2000) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x5306, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r4, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r5, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r5, &(0x7f0000ff9000/0x4000)=nil, 0x1000) shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffb000/0x4000)=nil) write(r4, &(0x7f0000000140)="90e45c77a9262d19f24754389003c4245182f02ed7b392eea7e6642dc86a48c82f48c3b5f57a71c67a24a860032faaa9c1a92efba1da04d3efa692b2f8de9e89faaea7cbab8f359508a195b5c263d0154f018fa87cced403ef966c7645cfff63", 0x60) 04:08:47 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:08:47 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x8923, &(0x7f0000000080)={'syztnl1\x00', 0x0}) 04:08:47 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) 04:08:47 executing program 7: r0 = shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r1 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000ff9000/0x1000)=nil, 0x2000) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x5306, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r4, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r5, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r5, &(0x7f0000ff9000/0x4000)=nil, 0x1000) shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffb000/0x4000)=nil) write(r4, &(0x7f0000000140)="90e45c77a9262d19f24754389003c4245182f02ed7b392eea7e6642dc86a48c82f48c3b5f57a71c67a24a860032faaa9c1a92efba1da04d3efa692b2f8de9e89faaea7cbab8f359508a195b5c263d0154f018fa87cced403ef966c7645cfff63", 0x60) 04:08:47 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x8923, &(0x7f0000000080)={'syztnl1\x00', 0x0}) 04:08:47 executing program 4: syz_emit_ethernet(0xbe, &(0x7f0000001180)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x88, 0x0, @private=0xa010102, @local}, {0x0, 0x0, 0x7, 0x0, @wg=@initiation={0x1, 0x0, "9cc34027cad83ed73be4f93e7326b9e1da67ee3561924fa66bfa0cb75cff5171", "117ad553083cf29887cf5f29c7a6c95c7558a7482e05b26986482338c4a4807a788dafc8181760316d293733eea7f8d3", "a75e81563131a3cfe7a7f5a39f877d4c3d74923d6412b791b7128fae", {"45ce2e1db012ba00", "e313e602785b0268a2ed03bd928c6509"}}}}}}}, 0x0) 04:08:47 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000140)="8f857635", 0x4}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 04:08:47 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000840)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x10, 0x6, 0x0, @local, @local, {[], @ndisc_ra}}}}}, 0x0) 04:08:48 executing program 4: syz_emit_ethernet(0xbe, &(0x7f0000001180)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x88, 0x0, @private=0xa010102, @local}, {0x0, 0x0, 0x7, 0x0, @wg=@initiation={0x1, 0x0, "9cc34027cad83ed73be4f93e7326b9e1da67ee3561924fa66bfa0cb75cff5171", "117ad553083cf29887cf5f29c7a6c95c7558a7482e05b26986482338c4a4807a788dafc8181760316d293733eea7f8d3", "a75e81563131a3cfe7a7f5a39f877d4c3d74923d6412b791b7128fae", {"45ce2e1db012ba00", "e313e602785b0268a2ed03bd928c6509"}}}}}}}, 0x0) 04:08:48 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x8923, &(0x7f0000000080)={'syztnl1\x00', 0x0}) 04:08:48 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000140)="8f857635", 0x4}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 04:08:48 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2000ac, &(0x7f0000000180)={[{@nojournal_checksum}]}) 04:08:48 executing program 4: syz_emit_ethernet(0xbe, &(0x7f0000001180)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x88, 0x0, @private=0xa010102, @local}, {0x0, 0x0, 0x7, 0x0, @wg=@initiation={0x1, 0x0, "9cc34027cad83ed73be4f93e7326b9e1da67ee3561924fa66bfa0cb75cff5171", "117ad553083cf29887cf5f29c7a6c95c7558a7482e05b26986482338c4a4807a788dafc8181760316d293733eea7f8d3", "a75e81563131a3cfe7a7f5a39f877d4c3d74923d6412b791b7128fae", {"45ce2e1db012ba00", "e313e602785b0268a2ed03bd928c6509"}}}}}}}, 0x0) 04:08:48 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000840)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x10, 0x6, 0x0, @local, @local, {[], @ndisc_ra}}}}}, 0x0) [ 139.631656] EXT4-fs (sda): changing journal_checksum during remount not supported; ignoring [ 139.648312] EXT4-fs (sda): re-mounted. Quota mode: none. [ 139.655495] EXT4-fs (sda): changing journal_checksum during remount not supported; ignoring [ 139.662326] EXT4-fs (sda): re-mounted. Quota mode: none. 04:08:48 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x8923, &(0x7f0000000080)={'syztnl1\x00', 0x0}) 04:08:48 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 04:08:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xeaec828ca8886d3b) readv(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000140)) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syncfs(r1) 04:08:48 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000840)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x10, 0x6, 0x0, @local, @local, {[], @ndisc_ra}}}}}, 0x0) 04:08:48 executing program 6: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000002140)='ns/mnt\x00') ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) 04:08:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, 0x0, 0x0) 04:08:48 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r1 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000ff9000/0x1000)=nil, 0x2000) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x5306, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r4, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r5, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r5, &(0x7f0000ff9000/0x4000)=nil, 0x1000) shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffb000/0x4000)=nil) write(r4, &(0x7f0000000140)="90e45c77a9262d19f24754389003c4245182f02ed7b392eea7e6642dc86a48c82f48c3b5f57a71c67a24a860032faaa9c1a92efba1da04d3efa692b2f8de9e89faaea7cbab8f359508a195b5c263d0154f018fa87cced403ef966c7645cfff63", 0x60) 04:08:48 executing program 7: r0 = shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r1 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000ff9000/0x1000)=nil, 0x2000) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x5306, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r4, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r5, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r5, &(0x7f0000ff9000/0x4000)=nil, 0x1000) shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffb000/0x4000)=nil) write(r4, &(0x7f0000000140)="90e45c77a9262d19f24754389003c4245182f02ed7b392eea7e6642dc86a48c82f48c3b5f57a71c67a24a860032faaa9c1a92efba1da04d3efa692b2f8de9e89faaea7cbab8f359508a195b5c263d0154f018fa87cced403ef966c7645cfff63", 0x60) 04:08:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) accept(r0, 0x0, 0x0) 04:08:48 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 04:08:48 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000840)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x10, 0x6, 0x0, @local, @local, {[], @ndisc_ra}}}}}, 0x0) 04:08:48 executing program 6: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, 0x0) 04:08:48 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000880)={{}, {0x40}}) 04:08:48 executing program 3: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='/usr/sbin/cups-browsed\x00', 0x17) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1) 04:08:48 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 04:08:48 executing program 6: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setuid(0xee00) fchown(r0, 0xffffffffffffffff, 0x0) 04:08:49 executing program 1: r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000240)=[{}, {}, {}], 0x3, 0x9) geteuid() epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) 04:08:49 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000006c0)=@IORING_OP_SENDMSG={0x9, 0x2bb64ebd7e4dd765, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000500)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) [ 140.776274] syz-executor.2 (4375) used greatest stack depth: 24664 bytes left 04:08:49 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000003b80)={'filter\x00', 0x2, [{}, {}]}, 0x48) 04:08:49 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) io_setup(0x1f, &(0x7f0000000100)=0x0) io_submit(r1, 0x2, &(0x7f0000000780)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xa, 0x0, r0, 0x0}]) 04:08:49 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 04:08:49 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x62, &(0x7f0000001000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mdlm={0x15, 0x24, 0x12, 0x7ff}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x40, 0x3f, 0xe9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x30, 0x6d, 0x9}}}}}]}}]}}, &(0x7f0000001380)={0xa, &(0x7f00000010c0)={0xa, 0x6, 0x200, 0x3, 0x6, 0x5, 0x771f8a1fac0502a, 0x5}, 0x20, &(0x7f0000001100)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x7, 0xe, 0x1f}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "c1835ffa2d1cd86ba3a0d26ae7830bed"}]}, 0x4, [{0x9a, &(0x7f0000001140)=@string={0x9a, 0x3, "a0df814bef4a2d713e942f4ea45fa42dba66e5e29abd6cf4826ef72ce4599981bdbf86b5f2dfc57530ab3abbb30d3c0fe1b79914d2ff303d425fc78935498b3e2790e0a0fb9bfa88eab5fc801ed8d8542d113c71241552049b04d6e415d8802863e01107d764f8f54721c64f629b61e5c5538e2829214256555837502a11c1c9432e61f9568e51f833a32c6f9f775123d3dda70faae25d50"}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x41c}}, {0xf3, &(0x7f0000001280)=@string={0xf3, 0x3, "cc8258da81528926d2eb576a0aabab687395f6a29118d92ecf2c80596b9b8e1f44681c740ff3e4a1efb63e1619017a4944e9a7424a575bbec06c84385b5b38878fd9c8c7f80f5b146ae7eeaa3514ca8e1dffb38c2c40da901cf94cecbd0f61a6418c284411ffc15b7a0c031c570132b7b3578024ef4c9714f003d7d0e644a38563557e0d534d889f9bde56779da045108185bd9928f5c493960bd014ea054df342067af6c1f1a488d17bee5ce819a7bbd419703a54d1878266954ac51e761dde803124984b1b1615d14e1aa692582384565981e53345933ecc25a6a43db427760361d27b8f21d906b8a164879633fa3b82"}}]}) [ 140.890985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.892063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 04:08:49 executing program 1: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000080)) 04:08:49 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x100, &(0x7f0000fff000/0x1000)=nil) r1 = shmget(0x2, 0x1000, 0x873c6edcc2f4f695, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff9000/0x4000)=nil) shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x0) shmat(r2, &(0x7f0000ff9000/0x1000)=nil, 0x2000) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) ioctl$CDROMREADTOCENTRY(r3, 0x5306, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xa83}, 0x2308, 0x7fff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pread64(r4, &(0x7f00000000c0)=""/98, 0x62, 0x7fff) r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r5, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmat(r5, &(0x7f0000ff9000/0x4000)=nil, 0x1000) shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffb000/0x4000)=nil) write(r4, &(0x7f0000000140)="90e45c77a9262d19f24754389003c4245182f02ed7b392eea7e6642dc86a48c82f48c3b5f57a71c67a24a860032faaa9c1a92efba1da04d3efa692b2f8de9e89faaea7cbab8f359508a195b5c263d0154f018fa87cced403ef966c7645cfff63", 0x60) 04:08:49 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xeaec828ca8886d3b) readv(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000140)) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syncfs(r1) 04:08:49 executing program 1: r0 = pkey_alloc(0x0, 0x3) pkey_alloc(0x0, 0x3) pkey_free(r0) pkey_alloc(0x0, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) getpid() pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x75c8, &(0x7f0000000200)={0x0, 0x1000c2c0, 0x2, 0x0, 0x36}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000140)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x80) close(r3) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x5ebd, 0xc6d4, 0x2, &(0x7f0000000000)={[0x1]}, 0x8) fsmount(0xffffffffffffffff, 0x1, 0x80) 04:08:49 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000040)) 04:08:49 executing program 4: clock_gettime(0x0, 0x0) 04:08:49 executing program 7: semop(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1) 04:08:49 executing program 5: pselect6(0x0, 0x0, &(0x7f0000007140), &(0x7f0000007180), &(0x7f00000071c0)={0x0, 0x3938700}, &(0x7f0000007240)={&(0x7f0000007200)={[0x7]}, 0x8}) 04:08:49 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000040)) 04:08:49 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000500)={[{@name={'name', 0x3d, 'context'}}, {@name={'name', 0x3d, 'system_u'}}]}) 04:08:49 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xeaec828ca8886d3b) readv(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000140)) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syncfs(r1) 04:08:49 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) [ 141.189410] cgroup: name respecified [ 141.408345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.410290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 04:08:50 executing program 7: r0 = pkey_alloc(0x0, 0x3) pkey_alloc(0x0, 0x3) pkey_free(r0) pkey_alloc(0x0, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) getpid() pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x75c8, &(0x7f0000000200)={0x0, 0x1000c2c0, 0x2, 0x0, 0x36}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000140)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x80) close(r3) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x5ebd, 0xc6d4, 0x2, &(0x7f0000000000)={[0x1]}, 0x8) fsmount(0xffffffffffffffff, 0x1, 0x80) 04:08:50 executing program 5: pselect6(0x0, 0x0, &(0x7f0000007140), &(0x7f0000007180), &(0x7f00000071c0)={0x0, 0x3938700}, &(0x7f0000007240)={&(0x7f0000007200)={[0x7]}, 0x8}) 04:08:50 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000040)) 04:08:50 executing program 1: r0 = pkey_alloc(0x0, 0x3) pkey_alloc(0x0, 0x3) pkey_free(r0) pkey_alloc(0x0, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) getpid() pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x75c8, &(0x7f0000000200)={0x0, 0x1000c2c0, 0x2, 0x0, 0x36}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000140)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x80) close(r3) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x5ebd, 0xc6d4, 0x2, &(0x7f0000000000)={[0x1]}, 0x8) fsmount(0xffffffffffffffff, 0x1, 0x80) 04:08:50 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000500)={[{@name={'name', 0x3d, 'context'}}, {@name={'name', 0x3d, 'system_u'}}]}) 04:08:50 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xeaec828ca8886d3b) readv(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000140)) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syncfs(r1) 04:08:50 executing program 3: r0 = pkey_alloc(0x0, 0x3) pkey_alloc(0x0, 0x3) pkey_free(r0) pkey_alloc(0x0, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) getpid() pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x75c8, &(0x7f0000000200)={0x0, 0x1000c2c0, 0x2, 0x0, 0x36}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000140)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x80) close(r3) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x5ebd, 0xc6d4, 0x2, &(0x7f0000000000)={[0x1]}, 0x8) fsmount(0xffffffffffffffff, 0x1, 0x80) 04:08:50 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) [ 141.500560] cgroup: name respecified 04:08:50 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) 04:08:50 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000040)) 04:08:50 executing program 5: pselect6(0x0, 0x0, &(0x7f0000007140), &(0x7f0000007180), &(0x7f00000071c0)={0x0, 0x3938700}, &(0x7f0000007240)={&(0x7f0000007200)={[0x7]}, 0x8}) 04:08:50 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000500)={[{@name={'name', 0x3d, 'context'}}, {@name={'name', 0x3d, 'system_u'}}]}) 04:08:50 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) [ 141.722239] cgroup: name respecified 04:08:50 executing program 5: pselect6(0x0, 0x0, &(0x7f0000007140), &(0x7f0000007180), &(0x7f00000071c0)={0x0, 0x3938700}, &(0x7f0000007240)={&(0x7f0000007200)={[0x7]}, 0x8}) 04:08:50 executing program 6: r0 = pkey_alloc(0x0, 0x3) pkey_alloc(0x0, 0x3) pkey_free(r0) pkey_alloc(0x0, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) getpid() pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x75c8, &(0x7f0000000200)={0x0, 0x1000c2c0, 0x2, 0x0, 0x36}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000140)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x80) close(r3) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x5ebd, 0xc6d4, 0x2, &(0x7f0000000000)={[0x1]}, 0x8) fsmount(0xffffffffffffffff, 0x1, 0x80) 04:08:50 executing program 7: r0 = pkey_alloc(0x0, 0x3) pkey_alloc(0x0, 0x3) pkey_free(r0) pkey_alloc(0x0, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) getpid() pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x75c8, &(0x7f0000000200)={0x0, 0x1000c2c0, 0x2, 0x0, 0x36}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000140)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x80) close(r3) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x5ebd, 0xc6d4, 0x2, &(0x7f0000000000)={[0x1]}, 0x8) fsmount(0xffffffffffffffff, 0x1, 0x80) 04:08:50 executing program 2: r0 = pkey_alloc(0x0, 0x3) pkey_alloc(0x0, 0x3) pkey_free(r0) pkey_alloc(0x0, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) getpid() pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x75c8, &(0x7f0000000200)={0x0, 0x1000c2c0, 0x2, 0x0, 0x36}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000140)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x80) close(r3) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x5ebd, 0xc6d4, 0x2, &(0x7f0000000000)={[0x1]}, 0x8) fsmount(0xffffffffffffffff, 0x1, 0x80) 04:08:50 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000500)={[{@name={'name', 0x3d, 'context'}}, {@name={'name', 0x3d, 'system_u'}}]}) 04:08:50 executing program 3: r0 = pkey_alloc(0x0, 0x3) pkey_alloc(0x0, 0x3) pkey_free(r0) pkey_alloc(0x0, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) getpid() pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x75c8, &(0x7f0000000200)={0x0, 0x1000c2c0, 0x2, 0x0, 0x36}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000140)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x80) close(r3) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x5ebd, 0xc6d4, 0x2, &(0x7f0000000000)={[0x1]}, 0x8) fsmount(0xffffffffffffffff, 0x1, 0x80) 04:08:50 executing program 1: r0 = pkey_alloc(0x0, 0x3) pkey_alloc(0x0, 0x3) pkey_free(r0) pkey_alloc(0x0, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) getpid() pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x75c8, &(0x7f0000000200)={0x0, 0x1000c2c0, 0x2, 0x0, 0x36}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000140)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x80) close(r3) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x5ebd, 0xc6d4, 0x2, &(0x7f0000000000)={[0x1]}, 0x8) fsmount(0xffffffffffffffff, 0x1, 0x80) 04:08:50 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) [ 142.057130] cgroup: name respecified 04:08:50 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) 04:08:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000002240), 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2289, 0x0) 04:08:50 executing program 5: clock_gettime(0xfffffffffffffffc, &(0x7f0000000000)) 04:08:50 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) 04:08:50 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b69, &(0x7f0000000b00)=""/11) 04:08:50 executing program 4: syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 04:08:50 executing program 2: r0 = pkey_alloc(0x0, 0x3) pkey_alloc(0x0, 0x3) pkey_free(r0) pkey_alloc(0x0, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) getpid() pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x75c8, &(0x7f0000000200)={0x0, 0x1000c2c0, 0x2, 0x0, 0x36}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000140)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x80) close(r3) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x5ebd, 0xc6d4, 0x2, &(0x7f0000000000)={[0x1]}, 0x8) fsmount(0xffffffffffffffff, 0x1, 0x80) 04:08:50 executing program 3: r0 = pkey_alloc(0x0, 0x3) pkey_alloc(0x0, 0x3) pkey_free(r0) pkey_alloc(0x0, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) getpid() pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x75c8, &(0x7f0000000200)={0x0, 0x1000c2c0, 0x2, 0x0, 0x36}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000140)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x80) close(r3) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x5ebd, 0xc6d4, 0x2, &(0x7f0000000000)={[0x1]}, 0x8) fsmount(0xffffffffffffffff, 0x1, 0x80) 04:08:51 executing program 7: r0 = pkey_alloc(0x0, 0x3) pkey_alloc(0x0, 0x3) pkey_free(r0) pkey_alloc(0x0, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) getpid() pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x75c8, &(0x7f0000000200)={0x0, 0x1000c2c0, 0x2, 0x0, 0x36}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000140)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x80) close(r3) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x5ebd, 0xc6d4, 0x2, &(0x7f0000000000)={[0x1]}, 0x8) fsmount(0xffffffffffffffff, 0x1, 0x80) 04:08:51 executing program 6: r0 = pkey_alloc(0x0, 0x3) pkey_alloc(0x0, 0x3) pkey_free(r0) pkey_alloc(0x0, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) getpid() pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x75c8, &(0x7f0000000200)={0x0, 0x1000c2c0, 0x2, 0x0, 0x36}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000140)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x80) close(r3) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x5ebd, 0xc6d4, 0x2, &(0x7f0000000000)={[0x1]}, 0x8) fsmount(0xffffffffffffffff, 0x1, 0x80) 04:08:51 executing program 1: r0 = pkey_alloc(0x0, 0x3) pkey_alloc(0x0, 0x3) pkey_free(r0) pkey_alloc(0x0, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) getpid() pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x75c8, &(0x7f0000000200)={0x0, 0x1000c2c0, 0x2, 0x0, 0x36}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000140)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x80) close(r3) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x5ebd, 0xc6d4, 0x2, &(0x7f0000000000)={[0x1]}, 0x8) fsmount(0xffffffffffffffff, 0x1, 0x80) 04:08:51 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b69, &(0x7f0000000b00)=""/11) 04:08:51 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b69, &(0x7f0000000b00)=""/11) 04:08:51 executing program 4: syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 04:08:51 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b69, &(0x7f0000000b00)=""/11) 04:08:51 executing program 0: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x341800, 0x84) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x8000) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) 04:08:51 executing program 2: r0 = pkey_alloc(0x0, 0x3) pkey_alloc(0x0, 0x3) pkey_free(r0) pkey_alloc(0x0, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) getpid() pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x75c8, &(0x7f0000000200)={0x0, 0x1000c2c0, 0x2, 0x0, 0x36}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000140)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x80) close(r3) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x5ebd, 0xc6d4, 0x2, &(0x7f0000000000)={[0x1]}, 0x8) fsmount(0xffffffffffffffff, 0x1, 0x80) 04:08:51 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x2f, &(0x7f0000000200)={0x77359400}, 0x10) 04:08:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000240)=""/210, &(0x7f0000000000)=0xd2) 04:08:51 executing program 6: r0 = pkey_alloc(0x0, 0x3) pkey_alloc(0x0, 0x3) pkey_free(r0) pkey_alloc(0x0, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) getpid() pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x75c8, &(0x7f0000000200)={0x0, 0x1000c2c0, 0x2, 0x0, 0x36}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000140)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) openat(r1, &(0x7f00000003c0)='./file0\x00', 0x40000, 0x80) close(r3) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x5ebd, 0xc6d4, 0x2, &(0x7f0000000000)={[0x1]}, 0x8) fsmount(0xffffffffffffffff, 0x1, 0x80) 04:08:51 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0xf, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88) 04:08:51 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x2f, &(0x7f0000000200)={0x77359400}, 0x10) 04:08:51 executing program 0: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x341800, 0x84) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x8000) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) 04:08:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000240)=""/210, &(0x7f0000000000)=0xd2) 04:08:51 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0xf, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88) 04:08:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) write$binfmt_aout(r0, &(0x7f00000005c0)={{0x0, 0x0, 0x3}, "", ['\x00']}, 0x120) 04:08:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) write$binfmt_aout(r0, &(0x7f00000005c0)={{0x0, 0x0, 0x3}, "", ['\x00']}, 0x120) 04:08:51 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0xf, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88) 04:08:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000240)=""/210, &(0x7f0000000000)=0xd2) 04:08:51 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x2f, &(0x7f0000000200)={0x77359400}, 0x10) 04:08:51 executing program 4: syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 04:08:51 executing program 0: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x341800, 0x84) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x8000) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) 04:08:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000240)=""/210, &(0x7f0000000000)=0xd2) 04:08:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) write$binfmt_aout(r0, &(0x7f00000005c0)={{0x0, 0x0, 0x3}, "", ['\x00']}, 0x120) 04:08:51 executing program 2: r0 = io_uring_setup(0x454c, &(0x7f0000000240)) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000480), 0x5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:08:51 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0xf, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast1}}}, 0x88) 04:08:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) write$binfmt_aout(r0, &(0x7f00000005c0)={{0x0, 0x0, 0x3}, "", ['\x00']}, 0x120) 04:08:51 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, 0x0, 0x0) 04:08:51 executing program 0: sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x341800, 0x84) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x8000) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) 04:08:51 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x2f, &(0x7f0000000200)={0x77359400}, 0x10) 04:08:51 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}], 0x20}, 0x0) recvmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000042, 0x0) 04:08:51 executing program 2: r0 = io_uring_setup(0x454c, &(0x7f0000000240)) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000480), 0x5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:08:51 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) stat(&(0x7f0000001480)='./file0\x00', &(0x7f0000000080)) [ 143.510636] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 04:08:52 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f0000000540)) 04:08:52 executing program 2: r0 = io_uring_setup(0x454c, &(0x7f0000000240)) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000480), 0x5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:08:52 executing program 5: syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000280)={[], [{@subj_user={'subj_user', 0x3d, '}(@'}}, {@obj_role}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}) 04:08:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000440)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000800)) 04:08:52 executing program 6: prctl$PR_SET_MM_MAP_SIZE(0x22, 0xf, 0x0) 04:08:52 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setresgid(0xffffffffffffffff, 0x0, 0x0) 04:08:52 executing program 4: syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 143.529010] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 04:08:52 executing program 3: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x0) unlink(&(0x7f0000000000)='./file1\x00') pwrite64(r0, &(0x7f00000006c0)='y', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0xa281, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0)=0xffffffffffffffff, 0x10) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) close(r0) fallocate(r2, 0x1, 0x0, 0x2) 04:08:52 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000900), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}]}, 0x1c}}, 0x0) 04:08:52 executing program 5: getrlimit(0x0, &(0x7f0000000000)) syz_mount_image$iso9660(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x1000, &(0x7f0000000580)={[{@block}, {@nojoliet}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x40000) syz_mount_image$iso9660(&(0x7f0000000900), &(0x7f0000000940)='./file0\x00', 0x0, 0x5, &(0x7f0000000c80)=[{&(0x7f0000000980)="f697a01728c898b5b20e9a55ed5e974d29cd4e857d9e930518d74b0fcb112225cf73555bbaa7c5ef8873e9b564380a38af87", 0x32, 0x2}, {&(0x7f0000000a00)="489d5452", 0x4, 0x5}, {&(0x7f0000000a40)="61da49d52233c9dd38fdeaecb6e6f7da6483dc1e226dbf82f0c632dcbf8bd32135919ed6b6331605345fa41d7474d4437bdb71f27916cc9f38ec0fb16e242e9d356bd33ad248c09117f30ae7bdd3934bfa4ccb60b75dc8b30d116fa2acb483bc9a4dafc3c121e577a0295aedb2f3142a433756325bd2fe5c999212c08fece1ad5c5ecf6c4d055894299bde85352539b3942f5c9b331f664b12e413cf781d68afac5fb1a7", 0xa4, 0x100000000}, {&(0x7f0000000b00)="5905152cc6e86e4efe5c8c60f3f57c26fed7c697ec0969a375b2acef5edbf6d452c597d7b2262a38870495ac4e50a6c1258f2931fdb165bc394080e27af0ee97760d88339a966a061c34967212f9645f58e4a0ad6191fb36079725b950b20c2649db81b1ad3fd3883e5615ee0f647bdea7297844127c37146570b844d009da4f74b674a740d92ac085ef3ea9cd4354c6b484de07b293df0e4806056ea9e5d8bcf42d274e581b924c24e82fb9f66821316e4b0c4569daf9bd1520f404cba66e4ae7a04afcd9760b813f32a156c7d0e7e9324fd209dafe", 0xd6, 0x2}, {&(0x7f0000000c00)="f0e81f56566b451bcd6f6c72e4e5a17254e82cf7f167032e775faa1ac42d28576749590d45b22574dd64b49c2d0b2a9eeb23029e7629b96770b9a75642fc140ccd13a2b51d0f757da757736ddae057381fa5011447401475998dbd3ba36cf9a2e5f1beeaed28dee40c4cbbaa98d8", 0x6e, 0x3}], 0x2200000, &(0x7f0000000d00)={[{@hide}, {@gid={'gid', 0x3d, 0xee00}}], [{@subj_type={'subj_type', 0x3d, '#+{/:'}}, {@pcr}, {@subj_user={'subj_user', 0x3d, '-#'}}, {@subj_type={'subj_type', 0x3d, 'ip6tnl0\x00'}}]}) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$iso9660(&(0x7f0000000e00), &(0x7f0000000e40)='./file0\x00', 0x0, 0x4, &(0x7f0000002140)=[{0x0}, {0x0}, {&(0x7f0000001000)}, {0x0}], 0x10000, &(0x7f0000002200)={[{@overriderock}, {@utf8}, {@map_normal}, {@map_acorn}]}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x800) 04:08:52 executing program 2: r0 = io_uring_setup(0x454c, &(0x7f0000000240)) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000480), 0x5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:08:52 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) 04:08:52 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x42800) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) tee(r0, r2, 0x1, 0x0) 04:08:52 executing program 6: prctl$PR_SET_MM_MAP_SIZE(0x22, 0xf, 0x0) [ 143.627406] loop5: detected capacity change from 0 to 264192 04:08:52 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) [ 143.670701] ISOFS: Unable to identify CD-ROM format. [ 143.709017] ISOFS: Unable to identify CD-ROM format. 04:08:52 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = eventfd(0x849e) r3 = perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xf9, 0x20, 0x9, 0x7f, 0x0, 0x8, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x24bf, 0x4}, 0x0, 0x7, 0x3, 0x6, 0x8, 0xfffffc00, 0x4, 0x0, 0xfffffff7}, 0xffffffffffffffff, 0x9, r0, 0x3) dup2(r2, r3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r1, 0x0) sendfile(r0, r0, 0x0, 0x5f1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x3a9900, 0x0) fcntl$setown(r1, 0x8, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') read$hiddev(r5, 0x0, 0x0) 04:08:52 executing program 5: getrlimit(0x0, &(0x7f0000000000)) syz_mount_image$iso9660(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x1000, &(0x7f0000000580)={[{@block}, {@nojoliet}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x40000) syz_mount_image$iso9660(&(0x7f0000000900), &(0x7f0000000940)='./file0\x00', 0x0, 0x5, &(0x7f0000000c80)=[{&(0x7f0000000980)="f697a01728c898b5b20e9a55ed5e974d29cd4e857d9e930518d74b0fcb112225cf73555bbaa7c5ef8873e9b564380a38af87", 0x32, 0x2}, {&(0x7f0000000a00)="489d5452", 0x4, 0x5}, {&(0x7f0000000a40)="61da49d52233c9dd38fdeaecb6e6f7da6483dc1e226dbf82f0c632dcbf8bd32135919ed6b6331605345fa41d7474d4437bdb71f27916cc9f38ec0fb16e242e9d356bd33ad248c09117f30ae7bdd3934bfa4ccb60b75dc8b30d116fa2acb483bc9a4dafc3c121e577a0295aedb2f3142a433756325bd2fe5c999212c08fece1ad5c5ecf6c4d055894299bde85352539b3942f5c9b331f664b12e413cf781d68afac5fb1a7", 0xa4, 0x100000000}, {&(0x7f0000000b00)="5905152cc6e86e4efe5c8c60f3f57c26fed7c697ec0969a375b2acef5edbf6d452c597d7b2262a38870495ac4e50a6c1258f2931fdb165bc394080e27af0ee97760d88339a966a061c34967212f9645f58e4a0ad6191fb36079725b950b20c2649db81b1ad3fd3883e5615ee0f647bdea7297844127c37146570b844d009da4f74b674a740d92ac085ef3ea9cd4354c6b484de07b293df0e4806056ea9e5d8bcf42d274e581b924c24e82fb9f66821316e4b0c4569daf9bd1520f404cba66e4ae7a04afcd9760b813f32a156c7d0e7e9324fd209dafe", 0xd6, 0x2}, {&(0x7f0000000c00)="f0e81f56566b451bcd6f6c72e4e5a17254e82cf7f167032e775faa1ac42d28576749590d45b22574dd64b49c2d0b2a9eeb23029e7629b96770b9a75642fc140ccd13a2b51d0f757da757736ddae057381fa5011447401475998dbd3ba36cf9a2e5f1beeaed28dee40c4cbbaa98d8", 0x6e, 0x3}], 0x2200000, &(0x7f0000000d00)={[{@hide}, {@gid={'gid', 0x3d, 0xee00}}], [{@subj_type={'subj_type', 0x3d, '#+{/:'}}, {@pcr}, {@subj_user={'subj_user', 0x3d, '-#'}}, {@subj_type={'subj_type', 0x3d, 'ip6tnl0\x00'}}]}) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$iso9660(&(0x7f0000000e00), &(0x7f0000000e40)='./file0\x00', 0x0, 0x4, &(0x7f0000002140)=[{0x0}, {0x0}, {&(0x7f0000001000)}, {0x0}], 0x10000, &(0x7f0000002200)={[{@overriderock}, {@utf8}, {@map_normal}, {@map_acorn}]}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x800) 04:08:52 executing program 0: r0 = gettid() r1 = gettid() kcmp(r1, r0, 0xca60f8548e3b1cf7, 0xffffffffffffffff, 0xffffffffffffffff) 04:08:52 executing program 6: prctl$PR_SET_MM_MAP_SIZE(0x22, 0xf, 0x0) 04:08:52 executing program 3: getitimer(0x3, 0x0) 04:08:52 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) [ 143.774564] loop5: detected capacity change from 0 to 264192 04:08:52 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d40), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, 0x0) 04:08:52 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) [ 143.829169] ISOFS: Unable to identify CD-ROM format. 04:08:52 executing program 6: prctl$PR_SET_MM_MAP_SIZE(0x22, 0xf, 0x0) 04:08:52 executing program 3: syz_genetlink_get_family_id$fou(&(0x7f00000005c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000940)={'wlan1\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, 0x0, 0x0) 04:08:52 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x100800, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r0) 04:08:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) 04:08:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x1c}}, 0x0) 04:08:52 executing program 1: timerfd_gettime(0xffffffffffffffff, 0x0) 04:08:52 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x1, 0x6, 0x5}, 0x14}}, 0x0) syz_open_dev$loop(&(0x7f0000000580), 0x0, 0x20100) 04:08:52 executing program 5: getrlimit(0x0, &(0x7f0000000000)) syz_mount_image$iso9660(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x1000, &(0x7f0000000580)={[{@block}, {@nojoliet}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x40000) syz_mount_image$iso9660(&(0x7f0000000900), &(0x7f0000000940)='./file0\x00', 0x0, 0x5, &(0x7f0000000c80)=[{&(0x7f0000000980)="f697a01728c898b5b20e9a55ed5e974d29cd4e857d9e930518d74b0fcb112225cf73555bbaa7c5ef8873e9b564380a38af87", 0x32, 0x2}, {&(0x7f0000000a00)="489d5452", 0x4, 0x5}, {&(0x7f0000000a40)="61da49d52233c9dd38fdeaecb6e6f7da6483dc1e226dbf82f0c632dcbf8bd32135919ed6b6331605345fa41d7474d4437bdb71f27916cc9f38ec0fb16e242e9d356bd33ad248c09117f30ae7bdd3934bfa4ccb60b75dc8b30d116fa2acb483bc9a4dafc3c121e577a0295aedb2f3142a433756325bd2fe5c999212c08fece1ad5c5ecf6c4d055894299bde85352539b3942f5c9b331f664b12e413cf781d68afac5fb1a7", 0xa4, 0x100000000}, {&(0x7f0000000b00)="5905152cc6e86e4efe5c8c60f3f57c26fed7c697ec0969a375b2acef5edbf6d452c597d7b2262a38870495ac4e50a6c1258f2931fdb165bc394080e27af0ee97760d88339a966a061c34967212f9645f58e4a0ad6191fb36079725b950b20c2649db81b1ad3fd3883e5615ee0f647bdea7297844127c37146570b844d009da4f74b674a740d92ac085ef3ea9cd4354c6b484de07b293df0e4806056ea9e5d8bcf42d274e581b924c24e82fb9f66821316e4b0c4569daf9bd1520f404cba66e4ae7a04afcd9760b813f32a156c7d0e7e9324fd209dafe", 0xd6, 0x2}, {&(0x7f0000000c00)="f0e81f56566b451bcd6f6c72e4e5a17254e82cf7f167032e775faa1ac42d28576749590d45b22574dd64b49c2d0b2a9eeb23029e7629b96770b9a75642fc140ccd13a2b51d0f757da757736ddae057381fa5011447401475998dbd3ba36cf9a2e5f1beeaed28dee40c4cbbaa98d8", 0x6e, 0x3}], 0x2200000, &(0x7f0000000d00)={[{@hide}, {@gid={'gid', 0x3d, 0xee00}}], [{@subj_type={'subj_type', 0x3d, '#+{/:'}}, {@pcr}, {@subj_user={'subj_user', 0x3d, '-#'}}, {@subj_type={'subj_type', 0x3d, 'ip6tnl0\x00'}}]}) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) syz_mount_image$iso9660(&(0x7f0000000e00), &(0x7f0000000e40)='./file0\x00', 0x0, 0x4, &(0x7f0000002140)=[{0x0}, {0x0}, {&(0x7f0000001000)}, {0x0}], 0x10000, &(0x7f0000002200)={[{@overriderock}, {@utf8}, {@map_normal}, {@map_acorn}]}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x800) [ 143.960327] loop5: detected capacity change from 0 to 264192 [ 144.005356] syz-executor.7 (4692) used greatest stack depth: 24216 bytes left [ 144.017126] ISOFS: Unable to identify CD-ROM format. 04:08:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) 04:08:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x1c}}, 0x0) 04:08:52 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = eventfd(0x849e) r3 = perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xf9, 0x20, 0x9, 0x7f, 0x0, 0x8, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x24bf, 0x4}, 0x0, 0x7, 0x3, 0x6, 0x8, 0xfffffc00, 0x4, 0x0, 0xfffffff7}, 0xffffffffffffffff, 0x9, r0, 0x3) dup2(r2, r3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r1, 0x0) sendfile(r0, r0, 0x0, 0x5f1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x3a9900, 0x0) fcntl$setown(r1, 0x8, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') read$hiddev(r5, 0x0, 0x0) 04:08:52 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x1, 0x6, 0x5}, 0x14}}, 0x0) syz_open_dev$loop(&(0x7f0000000580), 0x0, 0x20100) 04:08:52 executing program 5: getrlimit(0x0, &(0x7f0000000000)) syz_mount_image$iso9660(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x1000, &(0x7f0000000580)={[{@block}, {@nojoliet}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x40000) syz_mount_image$iso9660(&(0x7f0000000900), &(0x7f0000000940)='./file0\x00', 0x0, 0x5, &(0x7f0000000c80)=[{&(0x7f0000000980)="f697a01728c898b5b20e9a55ed5e974d29cd4e857d9e930518d74b0fcb112225cf73555bbaa7c5ef8873e9b564380a38af87", 0x32, 0x2}, {&(0x7f0000000a00)="489d5452", 0x4, 0x5}, {&(0x7f0000000a40)="61da49d52233c9dd38fdeaecb6e6f7da6483dc1e226dbf82f0c632dcbf8bd32135919ed6b6331605345fa41d7474d4437bdb71f27916cc9f38ec0fb16e242e9d356bd33ad248c09117f30ae7bdd3934bfa4ccb60b75dc8b30d116fa2acb483bc9a4dafc3c121e577a0295aedb2f3142a433756325bd2fe5c999212c08fece1ad5c5ecf6c4d055894299bde85352539b3942f5c9b331f664b12e413cf781d68afac5fb1a7", 0xa4, 0x100000000}, {&(0x7f0000000b00)="5905152cc6e86e4efe5c8c60f3f57c26fed7c697ec0969a375b2acef5edbf6d452c597d7b2262a38870495ac4e50a6c1258f2931fdb165bc394080e27af0ee97760d88339a966a061c34967212f9645f58e4a0ad6191fb36079725b950b20c2649db81b1ad3fd3883e5615ee0f647bdea7297844127c37146570b844d009da4f74b674a740d92ac085ef3ea9cd4354c6b484de07b293df0e4806056ea9e5d8bcf42d274e581b924c24e82fb9f66821316e4b0c4569daf9bd1520f404cba66e4ae7a04afcd9760b813f32a156c7d0e7e9324fd209dafe", 0xd6, 0x2}, {&(0x7f0000000c00)="f0e81f56566b451bcd6f6c72e4e5a17254e82cf7f167032e775faa1ac42d28576749590d45b22574dd64b49c2d0b2a9eeb23029e7629b96770b9a75642fc140ccd13a2b51d0f757da757736ddae057381fa5011447401475998dbd3ba36cf9a2e5f1beeaed28dee40c4cbbaa98d8", 0x6e, 0x3}], 0x2200000, &(0x7f0000000d00)={[{@hide}, {@gid={'gid', 0x3d, 0xee00}}], [{@subj_type={'subj_type', 0x3d, '#+{/:'}}, {@pcr}, {@subj_user={'subj_user', 0x3d, '-#'}}, {@subj_type={'subj_type', 0x3d, 'ip6tnl0\x00'}}]}) ioctl$TCS VM DIAGNOSIS: 04:08:45 Registers: info registers vcpu 0 RAX=0000000080000001 RBX=0000000000000001 RCX=0000000080000001 RDX=ffff88804187b580 RSI=ffffffff81677322 RDI=0000000000000001 RBP=ffffea0000cec4c0 RSP=ffff8880418675e0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffea0000cec4f8 R13=0000000000000000 R14=dffffc0000000000 R15=0000000000000003 RIP=ffffffff8146104d RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f425e0ec3a4 CR3=00000000371d6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff823ba02c RDI=ffffffff8765a980 RBP=ffffffff8765a940 RSP=ffff88804165f5f8 R8 =0000000000000004 R9 =0000000000000010 R10=0000000000000003 R11=0000000000000001 R12=0000000000002710 R13=0000000000000060 R14=fffffbfff0ecb580 R15=dffffc0000000000 RIP=ffffffff823ba081 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6c07eca700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555557371c58 CR3=0000000031fcc000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f6c0aa3b7c0 00007f6c0aa3b7c8 YMM02=0000000000000000 0000000000000000 00007f6c0aa3b7e0 00007f6c0aa3b7c0 YMM03=0000000000000000 0000000000000000 00007f6c0aa3b7c8 00007f6c0aa3b7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000