
Debian GNU/Linux 11 syzkaller ttyS0

Warning: Permanently added '[localhost]:10305' (ECDSA) to the list of known hosts.
2022/09/29 03:01:53 fuzzer started
2022/09/29 03:01:54 dialing manager at localhost:45751
syzkaller login: [   36.928022] cgroup: Unknown subsys name 'net'
[   36.995304] cgroup: Unknown subsys name 'rlimit'
2022/09/29 03:02:10 syscalls: 2215
2022/09/29 03:02:10 code coverage: enabled
2022/09/29 03:02:10 comparison tracing: enabled
2022/09/29 03:02:10 extra coverage: enabled
2022/09/29 03:02:10 setuid sandbox: enabled
2022/09/29 03:02:10 namespace sandbox: enabled
2022/09/29 03:02:10 Android sandbox: enabled
2022/09/29 03:02:10 fault injection: enabled
2022/09/29 03:02:10 leak checking: enabled
2022/09/29 03:02:10 net packet injection: enabled
2022/09/29 03:02:10 net device setup: enabled
2022/09/29 03:02:10 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/09/29 03:02:10 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/09/29 03:02:10 USB emulation: enabled
2022/09/29 03:02:10 hci packet injection: enabled
2022/09/29 03:02:10 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220928                                          )
2022/09/29 03:02:10 802.15.4 emulation: enabled
2022/09/29 03:02:10 fetching corpus: 0, signal 0/2000 (executing program)
2022/09/29 03:02:10 fetching corpus: 50, signal 22021/25464 (executing program)
2022/09/29 03:02:10 fetching corpus: 100, signal 32535/37251 (executing program)
2022/09/29 03:02:10 fetching corpus: 150, signal 42162/47959 (executing program)
2022/09/29 03:02:10 fetching corpus: 200, signal 48259/55109 (executing program)
2022/09/29 03:02:10 fetching corpus: 250, signal 51554/59511 (executing program)
2022/09/29 03:02:10 fetching corpus: 300, signal 55563/64480 (executing program)
2022/09/29 03:02:10 fetching corpus: 350, signal 59265/69048 (executing program)
2022/09/29 03:02:10 fetching corpus: 400, signal 61421/72187 (executing program)
2022/09/29 03:02:10 fetching corpus: 450, signal 64052/75679 (executing program)
2022/09/29 03:02:10 fetching corpus: 500, signal 67880/80075 (executing program)
2022/09/29 03:02:11 fetching corpus: 550, signal 70624/83513 (executing program)
2022/09/29 03:02:11 fetching corpus: 600, signal 76033/89130 (executing program)
2022/09/29 03:02:11 fetching corpus: 650, signal 78725/92323 (executing program)
2022/09/29 03:02:11 fetching corpus: 700, signal 83093/96802 (executing program)
2022/09/29 03:02:11 fetching corpus: 750, signal 85660/99719 (executing program)
2022/09/29 03:02:11 fetching corpus: 800, signal 88003/102431 (executing program)
2022/09/29 03:02:11 fetching corpus: 850, signal 91308/105747 (executing program)
2022/09/29 03:02:11 fetching corpus: 900, signal 93310/108090 (executing program)
2022/09/29 03:02:11 fetching corpus: 950, signal 94978/110129 (executing program)
2022/09/29 03:02:12 fetching corpus: 1000, signal 96827/112236 (executing program)
2022/09/29 03:02:12 fetching corpus: 1050, signal 98976/114477 (executing program)
2022/09/29 03:02:12 fetching corpus: 1100, signal 100423/116288 (executing program)
2022/09/29 03:02:12 fetching corpus: 1150, signal 103412/118988 (executing program)
2022/09/29 03:02:12 fetching corpus: 1200, signal 104436/120354 (executing program)
2022/09/29 03:02:12 fetching corpus: 1250, signal 106058/122044 (executing program)
2022/09/29 03:02:12 fetching corpus: 1300, signal 107838/123792 (executing program)
2022/09/29 03:02:13 fetching corpus: 1350, signal 109954/125690 (executing program)
2022/09/29 03:02:13 fetching corpus: 1400, signal 111155/126971 (executing program)
2022/09/29 03:02:13 fetching corpus: 1450, signal 113264/128873 (executing program)
2022/09/29 03:02:13 fetching corpus: 1500, signal 114382/130121 (executing program)
2022/09/29 03:02:13 fetching corpus: 1550, signal 115322/131196 (executing program)
2022/09/29 03:02:13 fetching corpus: 1600, signal 117254/132862 (executing program)
2022/09/29 03:02:13 fetching corpus: 1650, signal 118988/134340 (executing program)
2022/09/29 03:02:13 fetching corpus: 1700, signal 120143/135427 (executing program)
2022/09/29 03:02:14 fetching corpus: 1750, signal 122157/136950 (executing program)
2022/09/29 03:02:14 fetching corpus: 1800, signal 123476/138033 (executing program)
2022/09/29 03:02:14 fetching corpus: 1850, signal 124730/139094 (executing program)
2022/09/29 03:02:14 fetching corpus: 1900, signal 126544/140388 (executing program)
2022/09/29 03:02:14 fetching corpus: 1950, signal 128336/141668 (executing program)
2022/09/29 03:02:14 fetching corpus: 2000, signal 129814/142751 (executing program)
2022/09/29 03:02:14 fetching corpus: 2050, signal 130963/143560 (executing program)
2022/09/29 03:02:14 fetching corpus: 2100, signal 131887/144236 (executing program)
2022/09/29 03:02:15 fetching corpus: 2150, signal 132939/144996 (executing program)
2022/09/29 03:02:15 fetching corpus: 2200, signal 134871/146063 (executing program)
2022/09/29 03:02:15 fetching corpus: 2250, signal 135565/146624 (executing program)
2022/09/29 03:02:15 fetching corpus: 2300, signal 136999/147371 (executing program)
2022/09/29 03:02:15 fetching corpus: 2349, signal 138154/148042 (executing program)
2022/09/29 03:02:15 fetching corpus: 2399, signal 138887/148526 (executing program)
2022/09/29 03:02:15 fetching corpus: 2449, signal 139481/148937 (executing program)
2022/09/29 03:02:15 fetching corpus: 2499, signal 140613/149518 (executing program)
2022/09/29 03:02:15 fetching corpus: 2549, signal 141748/150078 (executing program)
2022/09/29 03:02:16 fetching corpus: 2599, signal 142914/150590 (executing program)
2022/09/29 03:02:16 fetching corpus: 2649, signal 143536/150926 (executing program)
2022/09/29 03:02:16 fetching corpus: 2699, signal 143994/151185 (executing program)
2022/09/29 03:02:16 fetching corpus: 2749, signal 144789/151563 (executing program)
2022/09/29 03:02:16 fetching corpus: 2799, signal 146832/152120 (executing program)
2022/09/29 03:02:16 fetching corpus: 2849, signal 147405/152340 (executing program)
2022/09/29 03:02:16 fetching corpus: 2899, signal 148360/152635 (executing program)
2022/09/29 03:02:16 fetching corpus: 2932, signal 148650/152778 (executing program)
2022/09/29 03:02:16 fetching corpus: 2932, signal 148650/152853 (executing program)
2022/09/29 03:02:16 fetching corpus: 2932, signal 148650/152922 (executing program)
2022/09/29 03:02:16 fetching corpus: 2932, signal 148650/153004 (executing program)
2022/09/29 03:02:16 fetching corpus: 2932, signal 148650/153077 (executing program)
2022/09/29 03:02:16 fetching corpus: 2933, signal 148713/153206 (executing program)
2022/09/29 03:02:16 fetching corpus: 2933, signal 148713/153273 (executing program)
2022/09/29 03:02:16 fetching corpus: 2933, signal 148713/153345 (executing program)
2022/09/29 03:02:16 fetching corpus: 2933, signal 148713/153407 (executing program)
2022/09/29 03:02:16 fetching corpus: 2933, signal 148713/153486 (executing program)
2022/09/29 03:02:16 fetching corpus: 2933, signal 148713/153551 (executing program)
2022/09/29 03:02:16 fetching corpus: 2933, signal 148713/153612 (executing program)
2022/09/29 03:02:16 fetching corpus: 2933, signal 148713/153670 (executing program)
2022/09/29 03:02:16 fetching corpus: 2933, signal 148713/153757 (executing program)
2022/09/29 03:02:16 fetching corpus: 2934, signal 148722/153848 (executing program)
2022/09/29 03:02:16 fetching corpus: 2934, signal 148722/153906 (executing program)
2022/09/29 03:02:17 fetching corpus: 2934, signal 148722/153962 (executing program)
2022/09/29 03:02:17 fetching corpus: 2934, signal 148722/153962 (executing program)
2022/09/29 03:02:20 starting 8 fuzzer processes
03:02:20 executing program 0:
r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='\x00')
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000180)='journal_checksum')
close(r0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = accept(r1, &(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000000)=0x80)
fsetxattr$security_selinux(r2, &(0x7f0000000140), &(0x7f0000000240)='system_u:object_r:tpm_device_t:s0\x00', 0x22, 0x1)
r3 = dup(r1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x50, r3, 0x8)

03:02:20 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000000001010400000000000000000a000000440001802c000180140003002001000000000000000000000000000014000400ff0200000000000000000000000000010c000280040001"], 0x58}}, 0x0)

03:02:20 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x6)
sendmsg$netlink(r0, &(0x7f000000c340)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000001340)={0x50, 0x21, 0x1, 0x0, 0x0, "", [@nested={0x3d, 0x0, 0x0, 0x1, [@generic="58f4db24ff596a629b0dc8a7e568fe2b0f23f18e2f6d4200b3bdabe512e9c9a79d7b673561a300cc1f5694f4e0e817c3d70a9cedd8fa1829be"]}]}, 0x50}], 0x1}, 0x0)

03:02:20 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x13, &(0x7f0000000300)=@gcm_256={{}, "756bb56d458c539c", "8c45bf5a46ccf7c3aa31f4f6a6ad0c9993e088383443b3d4c1f95da6151ade4c", "cd707431", "ea3b9d624b23fb67"}, 0x38)

03:02:20 executing program 3:
syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

03:02:20 executing program 6:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x44032, 0xffffffffffffffff, 0x0)
signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8)

03:02:20 executing program 5:
sysfs$1(0x1, &(0x7f0000000280)='!]-\x00')

[   61.989258] audit: type=1400 audit(1664420540.118:6): avc:  denied  { execmem } for  pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
03:02:20 executing program 7:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000007c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)={0x14, 0x14, 0x9}, 0x14}}, 0x0)

[   63.377059] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   63.407349] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   63.409301] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   63.411115] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   63.414263] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   63.416207] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   63.416999] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   63.418958] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   63.420990] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   63.424448] Bluetooth: hci7: HCI_REQ-0x0c1a
[   63.425943] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   63.434184] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   63.438276] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   63.440826] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   63.442580] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   63.444377] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.445807] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   63.447668] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.447791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.450565] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   63.452210] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.456296] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.458312] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   63.459712] Bluetooth: hci6: HCI_REQ-0x0c1a
[   63.468801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.470187] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.476153] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   63.477503] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.480058] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.481410] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   63.482813] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   63.484499] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   63.485949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.487225] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   63.489070] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.490141] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.492973] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   63.497035] Bluetooth: hci3: HCI_REQ-0x0c1a
[   63.497141] Bluetooth: hci1: HCI_REQ-0x0c1a
[   63.514017] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.515162] Bluetooth: hci2: HCI_REQ-0x0c1a
[   63.515901] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   63.518588] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   63.522759] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   63.525203] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   63.527341] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   63.529428] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   63.530998] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   63.550162] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.559754] Bluetooth: hci5: HCI_REQ-0x0c1a
[   63.559916] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   63.567104] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   63.568715] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   63.576511] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.581293] Bluetooth: hci4: HCI_REQ-0x0c1a
[   63.613726] Bluetooth: hci0: HCI_REQ-0x0c1a
[   65.446020] Bluetooth: hci7: command 0x0409 tx timeout
[   65.509815] Bluetooth: hci1: command 0x0409 tx timeout
[   65.510924] Bluetooth: hci3: command 0x0409 tx timeout
[   65.512169] Bluetooth: hci6: command 0x0409 tx timeout
[   65.574688] Bluetooth: hci2: command 0x0409 tx timeout
[   65.637707] Bluetooth: hci5: command 0x0409 tx timeout
[   65.638931] Bluetooth: hci0: command 0x0409 tx timeout
[   65.639078] Bluetooth: hci4: command 0x0409 tx timeout
[   67.494683] Bluetooth: hci7: command 0x041b tx timeout
[   67.557921] Bluetooth: hci3: command 0x041b tx timeout
[   67.558720] Bluetooth: hci1: command 0x041b tx timeout
[   67.559446] Bluetooth: hci6: command 0x041b tx timeout
[   67.622793] Bluetooth: hci2: command 0x041b tx timeout
[   67.685755] Bluetooth: hci4: command 0x041b tx timeout
[   67.686737] Bluetooth: hci0: command 0x041b tx timeout
[   67.687481] Bluetooth: hci5: command 0x041b tx timeout
[   69.541720] Bluetooth: hci7: command 0x040f tx timeout
[   69.606423] Bluetooth: hci6: command 0x040f tx timeout
[   69.607299] Bluetooth: hci1: command 0x040f tx timeout
[   69.607722] Bluetooth: hci3: command 0x040f tx timeout
[   69.669744] Bluetooth: hci2: command 0x040f tx timeout
[   69.733734] Bluetooth: hci5: command 0x040f tx timeout
[   69.733799] Bluetooth: hci0: command 0x040f tx timeout
[   69.734506] Bluetooth: hci4: command 0x040f tx timeout
[   71.589662] Bluetooth: hci7: command 0x0419 tx timeout
[   71.653807] Bluetooth: hci3: command 0x0419 tx timeout
[   71.654324] Bluetooth: hci1: command 0x0419 tx timeout
[   71.654862] Bluetooth: hci6: command 0x0419 tx timeout
[   71.717793] Bluetooth: hci2: command 0x0419 tx timeout
[   71.781713] Bluetooth: hci4: command 0x0419 tx timeout
[   71.782534] Bluetooth: hci0: command 0x0419 tx timeout
[   71.783397] Bluetooth: hci5: command 0x0419 tx timeout
03:03:14 executing program 6:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x44032, 0xffffffffffffffff, 0x0)
signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8)

03:03:14 executing program 6:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x44032, 0xffffffffffffffff, 0x0)
signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8)

[  116.375000] audit: type=1400 audit(1664420594.503:7): avc:  denied  { open } for  pid=3848 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  116.376379] audit: type=1400 audit(1664420594.503:8): avc:  denied  { kernel } for  pid=3848 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  116.388085] ------------[ cut here ]------------
[  116.388634] WARNING: CPU: 0 PID: 3846 at kernel/events/core.c:2233 event_filter_match+0x422/0x660
[  116.389304] Modules linked in:
[  116.389559] CPU: 0 PID: 3846 Comm: modprobe Not tainted 6.0.0-rc7-next-20220928 #1
[  116.390119] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  116.390967] RIP: 0010:event_filter_match+0x422/0x660
[  116.391498] Code: 00 00 00 e9 7c fc ff ff e8 bb 2e f1 ff 65 8b 2d d0 97 ad 7e 31 ff 89 ee e8 5b 2b f1 ff 85 ed 0f 84 ef 00 00 00 e8 9e 2e f1 ff <0f> 0b eb 9f e8 c5 a5 23 00 e9 17 fc ff ff e8 8b 2e f1 ff 48 8d 7b
[  116.393367] RSP: 0018:ffff88806ce09c70 EFLAGS: 00010046
[  116.393770] RAX: 0000000080010001 RBX: ffff888020760000 RCX: 0000000000000000
[  116.394296] RDX: ffff888017f08000 RSI: ffffffff8154de02 RDI: 0000000000000005
[  116.394828] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000001
[  116.395358] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff888020760220
[  116.395892] R13: 0000000000000000 R14: ffff8880207600a8 R15: ffff888020760220
[  116.396412] FS:  0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[  116.397004] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  116.397431] CR2: 00007f870a362e98 CR3: 000000003fcd0000 CR4: 0000000000350ef0
[  116.397957] Call Trace:
[  116.398152]  <IRQ>
[  116.398324]  merge_sched_in+0x107/0x1110
[  116.398643]  visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0
[  116.399093]  ? merge_sched_in+0x1110/0x1110
[  116.399422]  ? lock_is_held_type+0xd7/0x130
[  116.399763]  ctx_sched_in+0x2e6/0x770
[  116.400050]  ? lock_acquire+0x1b2/0x530
[  116.400362]  ? visit_groups_merge.constprop.0.isra.0+0xef0/0xef0
[  116.400816]  ? lock_is_held_type+0xd7/0x130
[  116.401150]  perf_event_sched_in+0x75/0x80
[  116.401469]  ctx_resched+0x1ce/0x390
[  116.401756]  __perf_install_in_context+0x285/0x9c0
[  116.402133]  ? ctx_resched+0x390/0x390
[  116.402432]  remote_function+0x125/0x1b0
[  116.402751]  __flush_smp_call_function_queue+0x1df/0x5a0
[  116.403157]  ? perf_duration_warn+0x40/0x40
[  116.403491]  __sysvec_call_function_single+0x92/0x3a0
[  116.403905]  sysvec_call_function_single+0x89/0xc0
[  116.404280]  </IRQ>
[  116.404457]  <TASK>
[  116.404630]  asm_sysvec_call_function_single+0x16/0x20
[  116.405020] RIP: 0010:lock_acquire+0x1db/0x530
[  116.405371] Code: 02 b8 ff ff ff ff 65 0f c1 05 81 52 d8 7e 83 f8 01 0f 85 c8 02 00 00 48 83 7c 24 08 00 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24
[  116.406712] RSP: 0018:ffff88803fe27668 EFLAGS: 00000206
[  116.407102] RAX: dffffc0000000000 RBX: 1ffff11007fc4ecf RCX: 0000000000001b08
[  116.407639] RDX: 1ffff11002fe112e RSI: 0000000000000000 RDI: 0000000000000000
[  116.408172] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff86cd37d7
[  116.408694] R10: fffffbfff0d9a6fa R11: 0000000000000001 R12: 0000000000000000
[  116.409228] R13: 0000000000000000 R14: ffffffff854c4bc0 R15: 0000000000000000
[  116.409772]  ? lock_acquire+0x1b2/0x530
[  116.410078]  ? lock_release+0x750/0x750
[  116.410388]  ? arch_stack_walk+0x5f/0xf0
[  116.410704]  ? vm_area_dup+0x7f/0x230
[  116.411001]  fs_reclaim_acquire+0xd2/0x160
[  116.411322]  ? fs_reclaim_acquire+0xb2/0x160
[  116.411677]  kmem_cache_alloc+0x3b/0x3e0
[  116.411989]  vm_area_dup+0x7f/0x230
[  116.412278]  ? lock_acquire+0x1b2/0x530
[  116.412586]  ? lock_is_held_type+0xd7/0x130
[  116.412914]  ? find_held_lock+0x2c/0x110
[  116.413224]  ? lock_release+0x3b2/0x750
[  116.413537]  ? kmem_cache_alloc_bulk+0x414/0x7d0
[  116.413906]  ? mark_held_locks+0x9e/0xe0
[  116.414219]  ? vm_area_alloc+0x100/0x100
[  116.414532]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  116.414920]  ? kmem_cache_alloc_bulk+0x43a/0x7d0
[  116.415280]  ? trace_kmem_cache_alloc+0x2d/0xe0
[  116.415633]  ? kmem_cache_alloc+0x1f9/0x3e0
[  116.415966]  ? mas_alloc_nodes+0x484/0x800
[  116.416288]  __split_vma+0xa2/0x5d0
[  116.416566]  ? mas_preallocate+0x15f/0x360
[  116.416894]  do_mas_align_munmap.constprop.0+0x273/0x1000
[  116.417315]  ? __split_vma+0x5d0/0x5d0
[  116.417616]  ? mas_walk+0x48a/0x670
[  116.417894]  ? mas_find+0x209/0xdd0
[  116.418183]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  116.418579]  do_mas_munmap+0x1e8/0x2b0
[  116.418882]  mmap_region+0x21c/0x1a00
[  116.419184]  ? lock_release+0x750/0x750
[  116.419491]  ? do_munmap+0x100/0x100
[  116.419795]  ? security_mmap_addr+0x79/0xa0
[  116.420125]  ? get_unmapped_area+0x1e5/0x3e0
[  116.420471]  do_mmap+0x828/0xf40
[  116.420745]  vm_mmap_pgoff+0x1af/0x270
[  116.421047]  ? randomize_page+0xb0/0xb0
[  116.421357]  ksys_mmap_pgoff+0x3d0/0x4f0
[  116.421674]  do_syscall_64+0x3b/0x90
[  116.421953]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  116.422342] RIP: 0033:0x7f6c043b8d82
[  116.422625] Code: eb aa 66 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 33 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 56 5b 5d c3 0f 1f 00 c7 05 ae 03 01 00 16 00
[  116.423970] RSP: 002b:00007fff91cc8d48 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[  116.424542] RAX: ffffffffffffffda RBX: 0000000000000812 RCX: 00007f6c043b8d82
[  116.425062] RDX: 0000000000000005 RSI: 0000000000002000 RDI: 00007f6c03e8f000
[  116.425580] RBP: 00007f6c03e8f000 R08: 0000000000000000 R09: 0000000000001000
[  116.426118] R10: 0000000000000812 R11: 0000000000000206 R12: 00007f6c04398470
[  116.426640] R13: 00007fff91cc8d60 R14: 00007fff91cc8d90 R15: 00007fff91cc90f0
[  116.427186]  </TASK>
[  116.427367] irq event stamp: 10346
[  116.427643] hardirqs last  enabled at (10345): [<ffffffff84270c38>] _raw_spin_unlock_irqrestore+0x28/0x60
[  116.428346] hardirqs last disabled at (10346): [<ffffffff8424f74b>] sysvec_call_function_single+0xb/0xc0
[  116.429036] softirqs last  enabled at (8532): [<ffffffff8116fa0b>] __irq_exit_rcu+0x11b/0x180
[  116.429660] softirqs last disabled at (8525): [<ffffffff8116fa0b>] __irq_exit_rcu+0x11b/0x180
[  116.430297] ---[ end trace 0000000000000000 ]---
[  116.430680] ------------[ cut here ]------------
[  116.431028] WARNING: CPU: 0 PID: 3846 at kernel/events/core.c:2557 merge_sched_in+0xadb/0x1110
[  116.431673] Modules linked in:
[  116.431915] CPU: 0 PID: 3846 Comm: modprobe Tainted: G        W          6.0.0-rc7-next-20220928 #1
[  116.432578] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  116.433401] RIP: 0010:merge_sched_in+0xadb/0x1110
[  116.433762] Code: ff ff e8 48 09 ef ff 65 8b 05 5d 72 ab 7e 31 ff 89 c6 89 04 24 e8 e5 05 ef ff 8b 04 24 85 c0 0f 84 13 02 00 00 e8 25 09 ef ff <0f> 0b e9 c4 fb ff ff e8 19 09 ef ff 4c 89 e8 48 05 18 01 00 00 e9
[  116.435094] RSP: 0018:ffff88806ce09cb0 EFLAGS: 00010046
[  116.435486] RAX: 0000000080010001 RBX: ffff88806ce3d140 RCX: 0000000000000000
[  116.436029] RDX: ffff888017f08000 RSI: ffffffff8157037b RDI: 0000000000000005
[  116.436561] RBP: ffff888020760000 R08: 0000000000000005 R09: 0000000000000001
[  116.437086] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88806ce3d140
[  116.437613] R13: ffff88806ce00000 R14: ffff8880207600a8 R15: ffff888020760220
[  116.438135] FS:  0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[  116.438720] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  116.439154] CR2: 00007f870a362e98 CR3: 000000003fcd0000 CR4: 0000000000350ef0
[  116.439687] Call Trace:
[  116.439886]  <IRQ>
[  116.440063]  visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0
[  116.440520]  ? merge_sched_in+0x1110/0x1110
[  116.440850]  ? lock_is_held_type+0xd7/0x130
[  116.441189]  ctx_sched_in+0x2e6/0x770
[  116.441480]  ? lock_acquire+0x1b2/0x530
[  116.441788]  ? visit_groups_merge.constprop.0.isra.0+0xef0/0xef0
[  116.442241]  ? lock_is_held_type+0xd7/0x130
[  116.442576]  perf_event_sched_in+0x75/0x80
[  116.442892]  ctx_resched+0x1ce/0x390
[  116.443181]  __perf_install_in_context+0x285/0x9c0
[  116.443552]  ? ctx_resched+0x390/0x390
[  116.443865]  remote_function+0x125/0x1b0
[  116.444181]  __flush_smp_call_function_queue+0x1df/0x5a0
[  116.444588]  ? perf_duration_warn+0x40/0x40
[  116.444925]  __sysvec_call_function_single+0x92/0x3a0
[  116.445315]  sysvec_call_function_single+0x89/0xc0
[  116.445684]  </IRQ>
[  116.445859]  <TASK>
[  116.446035]  asm_sysvec_call_function_single+0x16/0x20
[  116.446424] RIP: 0010:lock_acquire+0x1db/0x530
[  116.446774] Code: 02 b8 ff ff ff ff 65 0f c1 05 81 52 d8 7e 83 f8 01 0f 85 c8 02 00 00 48 83 7c 24 08 00 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24
[  116.448109] RSP: 0018:ffff88803fe27668 EFLAGS: 00000206
[  116.448504] RAX: dffffc0000000000 RBX: 1ffff11007fc4ecf RCX: 0000000000001b08
[  116.449026] RDX: 1ffff11002fe112e RSI: 0000000000000000 RDI: 0000000000000000
[  116.449554] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff86cd37d7
[  116.450074] R10: fffffbfff0d9a6fa R11: 0000000000000001 R12: 0000000000000000
[  116.450596] R13: 0000000000000000 R14: ffffffff854c4bc0 R15: 0000000000000000
[  116.451143]  ? lock_acquire+0x1b2/0x530
[  116.451443]  ? lock_release+0x750/0x750
[  116.451769]  ? arch_stack_walk+0x5f/0xf0
[  116.452090]  ? vm_area_dup+0x7f/0x230
[  116.452387]  fs_reclaim_acquire+0xd2/0x160
[  116.452707]  ? fs_reclaim_acquire+0xb2/0x160
[  116.453049]  kmem_cache_alloc+0x3b/0x3e0
[  116.453363]  vm_area_dup+0x7f/0x230
[  116.453650]  ? lock_acquire+0x1b2/0x530
[  116.453961]  ? lock_is_held_type+0xd7/0x130
[  116.454290]  ? find_held_lock+0x2c/0x110
[  116.454601]  ? lock_release+0x3b2/0x750
[  116.454907]  ? kmem_cache_alloc_bulk+0x414/0x7d0
[  116.455271]  ? mark_held_locks+0x9e/0xe0
[  116.455599]  ? vm_area_alloc+0x100/0x100
[  116.455913]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  116.456296]  ? kmem_cache_alloc_bulk+0x43a/0x7d0
[  116.456656]  ? trace_kmem_cache_alloc+0x2d/0xe0
[  116.457016]  ? kmem_cache_alloc+0x1f9/0x3e0
[  116.457350]  ? mas_alloc_nodes+0x484/0x800
[  116.457678]  __split_vma+0xa2/0x5d0
[  116.457962]  ? mas_preallocate+0x15f/0x360
[  116.458293]  do_mas_align_munmap.constprop.0+0x273/0x1000
[  116.458706]  ? __split_vma+0x5d0/0x5d0
[  116.459015]  ? mas_walk+0x48a/0x670
[  116.459297]  ? mas_find+0x209/0xdd0
[  116.459585]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  116.459987]  do_mas_munmap+0x1e8/0x2b0
[  116.460300]  mmap_region+0x21c/0x1a00
[  116.460607]  ? lock_release+0x750/0x750
[  116.460908]  ? do_munmap+0x100/0x100
[  116.461209]  ? security_mmap_addr+0x79/0xa0
[  116.461541]  ? get_unmapped_area+0x1e5/0x3e0
[  116.461879]  do_mmap+0x828/0xf40
[  116.462160]  vm_mmap_pgoff+0x1af/0x270
[  116.462473]  ? randomize_page+0xb0/0xb0
[  116.462786]  ksys_mmap_pgoff+0x3d0/0x4f0
[  116.463092]  do_syscall_64+0x3b/0x90
[  116.463385]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  116.463785] RIP: 0033:0x7f6c043b8d82
[  116.464065] Code: eb aa 66 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 33 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 56 5b 5d c3 0f 1f 00 c7 05 ae 03 01 00 16 00
[  116.465419] RSP: 002b:00007fff91cc8d48 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[  116.465978] RAX: ffffffffffffffda RBX: 0000000000000812 RCX: 00007f6c043b8d82
[  116.466503] RDX: 0000000000000005 RSI: 0000000000002000 RDI: 00007f6c03e8f000
[  116.467033] RBP: 00007f6c03e8f000 R08: 0000000000000000 R09: 0000000000001000
[  116.467557] R10: 0000000000000812 R11: 0000000000000206 R12: 00007f6c04398470
[  116.468089] R13: 00007fff91cc8d60 R14: 00007fff91cc8d90 R15: 00007fff91cc90f0
[  116.468628]  </TASK>
[  116.468808] irq event stamp: 10346
[  116.469066] hardirqs last  enabled at (10345): [<ffffffff84270c38>] _raw_spin_unlock_irqrestore+0x28/0x60
[  116.469759] hardirqs last disabled at (10346): [<ffffffff8424f74b>] sysvec_call_function_single+0xb/0xc0
[  116.470452] softirqs last  enabled at (8532): [<ffffffff8116fa0b>] __irq_exit_rcu+0x11b/0x180
[  116.471084] softirqs last disabled at (8525): [<ffffffff8116fa0b>] __irq_exit_rcu+0x11b/0x180
[  116.471713] ---[ end trace 0000000000000000 ]---
03:03:14 executing program 6:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x44032, 0xffffffffffffffff, 0x0)
signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8)

[  116.567136] audit: type=1400 audit(1664420594.696:9): avc:  denied  { write } for  pid=3848 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  116.581954] Bluetooth: MGMT ver 1.22
[  117.745149] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  117.745953] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
03:03:16 executing program 0:
r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='\x00')
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000180)='journal_checksum')
close(r0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = accept(r1, &(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000000)=0x80)
fsetxattr$security_selinux(r2, &(0x7f0000000140), &(0x7f0000000240)='system_u:object_r:tpm_device_t:s0\x00', 0x22, 0x1)
r3 = dup(r1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x50, r3, 0x8)

03:03:16 executing program 5:
sysfs$1(0x1, &(0x7f0000000280)='!]-\x00')

03:03:16 executing program 6:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x44032, 0xffffffffffffffff, 0x0)
signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8)

03:03:16 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x6)
sendmsg$netlink(r0, &(0x7f000000c340)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000001340)={0x50, 0x21, 0x1, 0x0, 0x0, "", [@nested={0x3d, 0x0, 0x0, 0x1, [@generic="58f4db24ff596a629b0dc8a7e568fe2b0f23f18e2f6d4200b3bdabe512e9c9a79d7b673561a300cc1f5694f4e0e817c3d70a9cedd8fa1829be"]}]}, 0x50}], 0x1}, 0x0)

03:03:16 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x10}], 0x1, 0x0, 0x0)

03:03:16 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000000001010400000000000000000a000000440001802c000180140003002001000000000000000000000000000014000400ff0200000000000000000000000000010c000280040001"], 0x58}}, 0x0)

03:03:16 executing program 7:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000007c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)={0x14, 0x14, 0x9}, 0x14}}, 0x0)

03:03:16 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x13, &(0x7f0000000300)=@gcm_256={{}, "756bb56d458c539c", "8c45bf5a46ccf7c3aa31f4f6a6ad0c9993e088383443b3d4c1f95da6151ade4c", "cd707431", "ea3b9d624b23fb67"}, 0x38)

[  118.451042] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  118.451946] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
03:03:16 executing program 7:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000007c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)={0x14, 0x14, 0x9}, 0x14}}, 0x0)

03:03:16 executing program 5:
sysfs$1(0x1, &(0x7f0000000280)='!]-\x00')

[  118.595470] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  118.596206] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
03:03:16 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000000001010400000000000000000a000000440001802c000180140003002001000000000000000000000000000014000400ff0200000000000000000000000000010c000280040001"], 0x58}}, 0x0)

03:03:16 executing program 6:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x44032, 0xffffffffffffffff, 0x0)
signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8)

03:03:16 executing program 0:
r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='\x00')
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000180)='journal_checksum')
close(r0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = accept(r1, &(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000000)=0x80)
fsetxattr$security_selinux(r2, &(0x7f0000000140), &(0x7f0000000240)='system_u:object_r:tpm_device_t:s0\x00', 0x22, 0x1)
r3 = dup(r1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x50, r3, 0x8)

03:03:16 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x6)
sendmsg$netlink(r0, &(0x7f000000c340)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000001340)={0x50, 0x21, 0x1, 0x0, 0x0, "", [@nested={0x3d, 0x0, 0x0, 0x1, [@generic="58f4db24ff596a629b0dc8a7e568fe2b0f23f18e2f6d4200b3bdabe512e9c9a79d7b673561a300cc1f5694f4e0e817c3d70a9cedd8fa1829be"]}]}, 0x50}], 0x1}, 0x0)

03:03:16 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x10}], 0x1, 0x0, 0x0)

03:03:16 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x13, &(0x7f0000000300)=@gcm_256={{}, "756bb56d458c539c", "8c45bf5a46ccf7c3aa31f4f6a6ad0c9993e088383443b3d4c1f95da6151ade4c", "cd707431", "ea3b9d624b23fb67"}, 0x38)

03:03:16 executing program 7:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000007c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)={0x14, 0x14, 0x9}, 0x14}}, 0x0)

03:03:16 executing program 5:
sysfs$1(0x1, &(0x7f0000000280)='!]-\x00')

[  118.626500] ------------[ cut here ]------------
[  118.626899] WARNING: CPU: 0 PID: 3992 at kernel/events/core.c:2047 perf_group_detach+0x99e/0x12f0
[  118.627560] Modules linked in:
[  118.627833] CPU: 0 PID: 3992 Comm: syz-executor.2 Tainted: G        W          6.0.0-rc7-next-20220928 #1
[  118.628523] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  118.629361] RIP: 0010:perf_group_detach+0x99e/0x12f0
[  118.629742] Code: 85 d5 f8 ff ff e8 f2 49 ee ff 65 44 8b 25 06 b3 aa 7e 31 ff 44 89 e6 e8 90 46 ee ff 45 85 e4 0f 84 0a 05 00 00 e8 d2 49 ee ff <0f> 0b e9 a9 f8 ff ff e8 c6 49 ee ff 65 8b 1d db b2 aa 7e 31 ff 89
[  118.631088] RSP: 0018:ffff88806ce09e60 EFLAGS: 00010046
[  118.631494] RAX: 0000000080010002 RBX: ffff888020760000 RCX: 0000000000000000
[  118.632031] RDX: ffff88804052d040 RSI: ffffffff8157c2ce RDI: 0000000000000005
[  118.632551] RBP: ffff888020760000 R08: 0000000000000005 R09: 0000000000000001
[  118.633079] R10: 0000000000000000 R11: ffffffff865b401b R12: 0000000000000000
[  118.633608] R13: ffff888020760090 R14: ffff88806ce3d140 R15: ffff888020760000
[  118.634134] FS:  0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[  118.634726] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  118.635159] CR2: 00007f35e08ac5a3 CR3: 0000000017c9a000 CR4: 0000000000350ef0
[  118.635697] Call Trace:
[  118.635896]  <IRQ>
[  118.636063]  ? perf_event_idx_default+0x10/0x10
[  118.636429]  ? event_sched_out+0x71c/0xcd0
[  118.636758]  __perf_remove_from_context+0x71e/0xb20
[  118.637151]  event_function+0x297/0x3d0
[  118.637460]  ? perf_output_sample_regs+0x150/0x150
[  118.637835]  remote_function+0x125/0x1b0
[  118.638162]  __flush_smp_call_function_queue+0x1df/0x5a0
[  118.638574]  ? perf_duration_warn+0x40/0x40
[  118.638912]  __sysvec_call_function_single+0x92/0x3a0
[  118.639300]  sysvec_call_function_single+0x89/0xc0
[  118.639678]  </IRQ>
[  118.639848]  <TASK>
[  118.640022]  asm_sysvec_call_function_single+0x16/0x20
[  118.640422] RIP: 0010:lock_acquire+0x1db/0x530
[  118.640773] Code: 02 b8 ff ff ff ff 65 0f c1 05 81 52 d8 7e 83 f8 01 0f 85 c8 02 00 00 48 83 7c 24 08 00 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24
[  118.642129] RSP: 0018:ffff8880405e74d0 EFLAGS: 00000206
[  118.642527] RAX: dffffc0000000000 RBX: 1ffff110080bce9c RCX: 000000004b307976
[  118.643065] RDX: 1ffff110080a5b36 RSI: 0000000000000001 RDI: 0000000000000000
[  118.643583] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff86cd37c7
[  118.644113] R10: fffffbfff0d9a6f8 R11: 0000000000000001 R12: 0000000000000002
[  118.644649] R13: 0000000000000000 R14: ffffffff85407360 R15: 0000000000000000
[  118.645193]  ? lock_release+0x750/0x750
[  118.645501]  ? lock_is_held_type+0xd7/0x130
[  118.645823]  ? find_held_lock+0x2c/0x110
[  118.646141]  ? lock_release+0x3b2/0x750
[  118.646447]  ? unlock_page_memcg+0xbe/0x230
[  118.646782]  ? lock_downgrade+0x6d0/0x6d0
[  118.647098]  folio_memcg_lock+0x3a/0x4a0
[  118.647405]  ? mem_cgroup_get_oom_group+0x340/0x340
[  118.647807]  ? __pte_alloc_kernel+0x1c0/0x1c0
[  118.648159]  page_remove_rmap+0x1e/0x490
[  118.648479]  unmap_page_range+0x1c26/0x2a10
[  118.648835]  ? vm_normal_page+0x2e0/0x2e0
[  118.649151]  ? mas_find+0x209/0xdd0
[  118.649429]  ? uprobe_munmap+0x1c/0x560
[  118.649747]  unmap_single_vma+0x190/0x380
[  118.650063]  unmap_vmas+0x21e/0x370
[  118.650343]  ? unmap_mapping_range+0x280/0x280
[  118.650689]  ? find_held_lock+0x2c/0x110
[  118.651003]  ? lock_downgrade+0x6d0/0x6d0
[  118.651342]  exit_mmap+0x154/0x680
[  118.651627]  ? __ia32_sys_remap_file_pages+0x150/0x150
[  118.652040]  ? delayed_uprobe_remove+0x27/0x230
[  118.652403]  mmput+0xd1/0x390
[  118.652657]  do_exit+0xa2e/0x27f0
[  118.652931]  ? lock_release+0x3b2/0x750
[  118.653239]  ? get_signal+0x88b/0x22d0
[  118.653544]  ? mm_update_next_owner+0x7e0/0x7e0
[  118.653903]  ? lock_is_held_type+0xd7/0x130
[  118.654232]  do_group_exit+0xd0/0x2a0
[  118.654529]  get_signal+0x2195/0x22d0
[  118.654826]  ? wake_up_q+0x8b/0xf0
[  118.655110]  ? exit_signals+0x8b0/0x8b0
[  118.655425]  arch_do_signal_or_restart+0x89/0x1be0
[  118.655814]  ? do_futex+0x136/0x380
[  118.656089]  ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0
[  118.656528]  ? get_sigframe_size+0x10/0x10
[  118.656853]  ? __x64_sys_futex+0x1c6/0x4d0
[  118.657172]  ? __x64_sys_futex_time32+0x480/0x480
[  118.657533]  ? exit_to_user_mode_prepare+0x109/0x1a0
[  118.657917]  exit_to_user_mode_prepare+0x131/0x1a0
[  118.658285]  syscall_exit_to_user_mode+0x19/0x40
[  118.658646]  do_syscall_64+0x48/0x90
[  118.658932]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  118.659323] RIP: 0033:0x7f30cfb41b19
[  118.659613] Code: Unable to access opcode bytes at 0x7f30cfb41aef.
[  118.660096] RSP: 002b:00007f30cd0b7218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  118.660661] RAX: fffffffffffffe00 RBX: 00007f30cfc54f68 RCX: 00007f30cfb41b19
[  118.661203] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f30cfc54f68
[  118.661733] RBP: 00007f30cfc54f60 R08: 0000000000000000 R09: 0000000000000000
[  118.662262] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f30cfc54f6c
[  118.662794] R13: 00007ffc91a2971f R14: 00007f30cd0b7300 R15: 0000000000022000
[  118.663356]  </TASK>
[  118.663542] irq event stamp: 214
[  118.663805] hardirqs last  enabled at (213): [<ffffffff84270c38>] _raw_spin_unlock_irqrestore+0x28/0x60
[  118.664511] hardirqs last disabled at (214): [<ffffffff8424f74b>] sysvec_call_function_single+0xb/0xc0
[  118.665203] softirqs last  enabled at (202): [<ffffffff8116fa0b>] __irq_exit_rcu+0x11b/0x180
[  118.665841] softirqs last disabled at (197): [<ffffffff8116fa0b>] __irq_exit_rcu+0x11b/0x180
[  118.666485] ---[ end trace 0000000000000000 ]---
[  118.666867] ------------[ cut here ]------------
[  118.667216] WARNING: CPU: 0 PID: 3992 at kernel/events/core.c:2183 perf_group_detach+0x9c7/0x12f0
[  118.667878] Modules linked in:
[  118.668127] CPU: 0 PID: 3992 Comm: syz-executor.2 Tainted: G        W          6.0.0-rc7-next-20220928 #1
[  118.668843] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  118.669663] RIP: 0010:perf_group_detach+0x9c7/0x12f0
[  118.670042] Code: ff 0f 0b e9 a9 f8 ff ff e8 c6 49 ee ff 65 8b 1d db b2 aa 7e 31 ff 89 de e8 66 46 ee ff 85 db 0f 84 86 04 00 00 e8 a9 49 ee ff <0f> 0b e9 0e fa ff ff e8 9d 49 ee ff 48 8b 7c 24 20 48 81 c7 f8 00
[  118.671407] RSP: 0018:ffff88806ce09e60 EFLAGS: 00010046
[  118.671830] RAX: 0000000080010002 RBX: 0000000000000000 RCX: 0000000000000000
[  118.672363] RDX: ffff88804052d040 RSI: ffffffff8157c2f7 RDI: 0000000000000005
[  118.672891] RBP: ffff888020760000 R08: 0000000000000005 R09: 0000000000000001
[  118.673422] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff888020760000
[  118.673954] R13: ffff888020760000 R14: ffff88806ce3d140 R15: ffff888020760000
[  118.674491] FS:  0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[  118.675078] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  118.675516] CR2: 00007f35e08ac5a3 CR3: 0000000017c9a000 CR4: 0000000000350ef0
[  118.676056] Call Trace:
[  118.676253]  <IRQ>
[  118.676423]  ? perf_event_idx_default+0x10/0x10
[  118.676795]  ? event_sched_out+0x71c/0xcd0
[  118.677121]  __perf_remove_from_context+0x71e/0xb20
[  118.677507]  event_function+0x297/0x3d0
[  118.677829]  ? perf_output_sample_regs+0x150/0x150
[  118.678211]  remote_function+0x125/0x1b0
[  118.678534]  __flush_smp_call_function_queue+0x1df/0x5a0
[  118.678946]  ? perf_duration_warn+0x40/0x40
[  118.679286]  __sysvec_call_function_single+0x92/0x3a0
[  118.679689]  sysvec_call_function_single+0x89/0xc0
[  118.680064]  </IRQ>
[  118.680239]  <TASK>
[  118.680412]  asm_sysvec_call_function_single+0x16/0x20
[  118.680807] RIP: 0010:lock_acquire+0x1db/0x530
[  118.681163] Code: 02 b8 ff ff ff ff 65 0f c1 05 81 52 d8 7e 83 f8 01 0f 85 c8 02 00 00 48 83 7c 24 08 00 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24
[  118.682510] RSP: 0018:ffff8880405e74d0 EFLAGS: 00000206
[  118.682911] RAX: dffffc0000000000 RBX: 1ffff110080bce9c RCX: 000000004b307976
[  118.683444] RDX: 1ffff110080a5b36 RSI: 0000000000000001 RDI: 0000000000000000
[  118.683966] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff86cd37c7
[  118.684494] R10: fffffbfff0d9a6f8 R11: 0000000000000001 R12: 0000000000000002
[  118.685018] R13: 0000000000000000 R14: ffffffff85407360 R15: 0000000000000000
[  118.685558]  ? lock_release+0x750/0x750
[  118.685863]  ? lock_is_held_type+0xd7/0x130
[  118.686188]  ? find_held_lock+0x2c/0x110
[  118.686495]  ? lock_release+0x3b2/0x750
[  118.686802]  ? unlock_page_memcg+0xbe/0x230
[  118.687126]  ? lock_downgrade+0x6d0/0x6d0
[  118.687442]  folio_memcg_lock+0x3a/0x4a0
[  118.687754]  ? mem_cgroup_get_oom_group+0x340/0x340
[  118.688133]  ? __pte_alloc_kernel+0x1c0/0x1c0
[  118.688482]  page_remove_rmap+0x1e/0x490
[  118.688790]  unmap_page_range+0x1c26/0x2a10
[  118.689128]  ? vm_normal_page+0x2e0/0x2e0
[  118.689442]  ? mas_find+0x209/0xdd0
[  118.689720]  ? uprobe_munmap+0x1c/0x560
[  118.690024]  unmap_single_vma+0x190/0x380
[  118.690340]  unmap_vmas+0x21e/0x370
[  118.690614]  ? unmap_mapping_range+0x280/0x280
[  118.690955]  ? find_held_lock+0x2c/0x110
[  118.691272]  ? lock_downgrade+0x6d0/0x6d0
[  118.691615]  exit_mmap+0x154/0x680
[  118.691903]  ? __ia32_sys_remap_file_pages+0x150/0x150
[  118.692315]  ? delayed_uprobe_remove+0x27/0x230
[  118.692680]  mmput+0xd1/0x390
[  118.692931]  do_exit+0xa2e/0x27f0
[  118.693207]  ? lock_release+0x3b2/0x750
[  118.693515]  ? get_signal+0x88b/0x22d0
[  118.693818]  ? mm_update_next_owner+0x7e0/0x7e0
[  118.694177]  ? lock_is_held_type+0xd7/0x130
[  118.694508]  do_group_exit+0xd0/0x2a0
[  118.694805]  get_signal+0x2195/0x22d0
[  118.695104]  ? wake_up_q+0x8b/0xf0
[  118.695393]  ? exit_signals+0x8b0/0x8b0
[  118.695722]  arch_do_signal_or_restart+0x89/0x1be0
[  118.696097]  ? do_futex+0x136/0x380
[  118.696373]  ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0
[  118.696806]  ? get_sigframe_size+0x10/0x10
[  118.697130]  ? __x64_sys_futex+0x1c6/0x4d0
[  118.697453]  ? __x64_sys_futex_time32+0x480/0x480
[  118.697816]  ? exit_to_user_mode_prepare+0x109/0x1a0
[  118.698201]  exit_to_user_mode_prepare+0x131/0x1a0
[  118.698569]  syscall_exit_to_user_mode+0x19/0x40
[  118.698937]  do_syscall_64+0x48/0x90
[  118.699219]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  118.699613] RIP: 0033:0x7f30cfb41b19
[  118.699896] Code: Unable to access opcode bytes at 0x7f30cfb41aef.
[  118.700351] RSP: 002b:00007f30cd0b7218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  118.700915] RAX: fffffffffffffe00 RBX: 00007f30cfc54f68 RCX: 00007f30cfb41b19
[  118.701445] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f30cfc54f68
[  118.701977] RBP: 00007f30cfc54f60 R08: 0000000000000000 R09: 0000000000000000
[  118.702497] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f30cfc54f6c
[  118.703025] R13: 00007ffc91a2971f R14: 00007f30cd0b7300 R15: 0000000000022000
[  118.703572]  </TASK>
[  118.703766] irq event stamp: 214
[  118.704021] hardirqs last  enabled at (213): [<ffffffff84270c38>] _raw_spin_unlock_irqrestore+0x28/0x60
[  118.704713] hardirqs last disabled at (214): [<ffffffff8424f74b>] sysvec_call_function_single+0xb/0xc0
[  118.705401] softirqs last  enabled at (202): [<ffffffff8116fa0b>] __irq_exit_rcu+0x11b/0x180
[  118.706031] softirqs last disabled at (197): [<ffffffff8116fa0b>] __irq_exit_rcu+0x11b/0x180
[  118.706662] ---[ end trace 0000000000000000 ]---
[  118.707042] ------------[ cut here ]------------
[  118.707393] WARNING: CPU: 0 PID: 3992 at kernel/events/core.c:655 perf_event_update_sibling_time+0xd5/0x4d0
[  118.708118] Modules linked in:
[  118.708367] CPU: 0 PID: 3992 Comm: syz-executor.2 Tainted: G        W          6.0.0-rc7-next-20220928 #1
[  118.709064] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  118.709889] RIP: 0010:perf_event_update_sibling_time+0xd5/0x4d0
[  118.710346] Code: 5e 41 5f e9 4d eb f0 ff e8 48 eb f0 ff 65 8b 1d 5d 54 ad 7e 31 ff 89 de e8 e8 e7 f0 ff 85 db 0f 84 d3 02 00 00 e8 2b eb f0 ff <0f> 0b eb 97 e8 22 eb f0 ff 48 8d 7d 10 48 b8 00 00 00 00 00 fc ff
[  118.711691] RSP: 0018:ffff88806ce09e58 EFLAGS: 00010046
[  118.712084] RAX: 0000000080010002 RBX: 0000000000000000 RCX: 0000000000000000
[  118.712616] RDX: ffff88804052d040 RSI: ffffffff81552175 RDI: 0000000000000005
[  118.713148] RBP: ffff888020760000 R08: 0000000000000005 R09: 0000000000000001
[  118.713678] R10: 0000000000000000 R11: ffffffff865b401b R12: 0000000000000000
[  118.714205] R13: ffff8880207600a8 R14: 0000000000000001 R15: 0000000000000001
[  118.714741] FS:  0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[  118.715334] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  118.715767] CR2: 00007f35e08ac5a3 CR3: 0000000017c9a000 CR4: 0000000000350ef0
[  118.716295] Call Trace:
[  118.716494]  <IRQ>
[  118.716662]  ? lock_is_held_type+0xd7/0x130
[  118.716987]  ? perf_event_update_time+0x285/0x380
[  118.717354]  list_del_event+0x524/0x860
[  118.717670]  __perf_remove_from_context+0xd2/0xb20
[  118.718043]  event_function+0x297/0x3d0
[  118.718348]  ? perf_output_sample_regs+0x150/0x150
[  118.718724]  remote_function+0x125/0x1b0
[  118.719036]  __flush_smp_call_function_queue+0x1df/0x5a0
[  118.719442]  ? perf_duration_warn+0x40/0x40
[  118.719785]  __sysvec_call_function_single+0x92/0x3a0
[  118.720183]  sysvec_call_function_single+0x89/0xc0
[  118.720552]  </IRQ>
[  118.720728]  <TASK>
[  118.720904]  asm_sysvec_call_function_single+0x16/0x20
[  118.721298] RIP: 0010:lock_acquire+0x1db/0x530
[  118.721643] Code: 02 b8 ff ff ff ff 65 0f c1 05 81 52 d8 7e 83 f8 01 0f 85 c8 02 00 00 48 83 7c 24 08 00 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24
[  118.722980] RSP: 0018:ffff8880405e74d0 EFLAGS: 00000206
[  118.723381] RAX: dffffc0000000000 RBX: 1ffff110080bce9c RCX: 000000004b307976
[  118.723923] RDX: 1ffff110080a5b36 RSI: 0000000000000001 RDI: 0000000000000000
[  118.724452] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff86cd37c7
[  118.724983] R10: fffffbfff0d9a6f8 R11: 0000000000000001 R12: 0000000000000002
[  118.725505] R13: 0000000000000000 R14: ffffffff85407360 R15: 0000000000000000
[  118.726052]  ? lock_release+0x750/0x750
[  118.726370]  ? lock_is_held_type+0xd7/0x130
[  118.726700]  ? find_held_lock+0x2c/0x110
[  118.727015]  ? lock_release+0x3b2/0x750
[  118.727322]  ? unlock_page_memcg+0xbe/0x230
[  118.727657]  ? lock_downgrade+0x6d0/0x6d0
[  118.727983]  folio_memcg_lock+0x3a/0x4a0
[  118.728293]  ? mem_cgroup_get_oom_group+0x340/0x340
[  118.728676]  ? __pte_alloc_kernel+0x1c0/0x1c0
[  118.729031]  page_remove_rmap+0x1e/0x490
[  118.729340]  unmap_page_range+0x1c26/0x2a10
[  118.729685]  ? vm_normal_page+0x2e0/0x2e0
[  118.729996]  ? mas_find+0x209/0xdd0
[  118.730278]  ? uprobe_munmap+0x1c/0x560
[  118.730595]  unmap_single_vma+0x190/0x380
[  118.730916]  unmap_vmas+0x21e/0x370
[  118.731202]  ? unmap_mapping_range+0x280/0x280
[  118.731542]  ? find_held_lock+0x2c/0x110
[  118.731875]  ? lock_downgrade+0x6d0/0x6d0
[  118.732215]  exit_mmap+0x154/0x680
[  118.732497]  ? __ia32_sys_remap_file_pages+0x150/0x150
[  118.732913]  ? delayed_uprobe_remove+0x27/0x230
[  118.733280]  mmput+0xd1/0x390
[  118.733531]  do_exit+0xa2e/0x27f0
[  118.733807]  ? lock_release+0x3b2/0x750
[  118.734113]  ? get_signal+0x88b/0x22d0
[  118.734418]  ? mm_update_next_owner+0x7e0/0x7e0
[  118.734774]  ? lock_is_held_type+0xd7/0x130
[  118.735103]  do_group_exit+0xd0/0x2a0
[  118.735402]  get_signal+0x2195/0x22d0
[  118.735700]  ? wake_up_q+0x8b/0xf0
[  118.735985]  ? exit_signals+0x8b0/0x8b0
[  118.736313]  arch_do_signal_or_restart+0x89/0x1be0
[  118.736695]  ? do_futex+0x136/0x380
[  118.736980]  ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0
[  118.737407]  ? get_sigframe_size+0x10/0x10
[  118.737728]  ? __x64_sys_futex+0x1c6/0x4d0
[  118.738051]  ? __x64_sys_futex_time32+0x480/0x480
[  118.738405]  ? exit_to_user_mode_prepare+0x109/0x1a0
[  118.738786]  exit_to_user_mode_prepare+0x131/0x1a0
[  118.739153]  syscall_exit_to_user_mode+0x19/0x40
[  118.739520]  do_syscall_64+0x48/0x90
[  118.739815]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  118.740201] RIP: 0033:0x7f30cfb41b19
[  118.740487] Code: Unable to access opcode bytes at 0x7f30cfb41aef.
[  118.740944] RSP: 002b:00007f30cd0b7218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  118.741508] RAX: fffffffffffffe00 RBX: 00007f30cfc54f68 RCX: 00007f30cfb41b19
[  118.742034] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f30cfc54f68
[  118.742566] RBP: 00007f30cfc54f60 R08: 0000000000000000 R09: 0000000000000000
[  118.743090] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f30cfc54f6c
[  118.743625] R13: 00007ffc91a2971f R14: 00007f30cd0b7300 R15: 0000000000022000
[  118.744156]  </TASK>
[  118.744340] irq event stamp: 214
[  118.744597] hardirqs last  enabled at (213): [<ffffffff84270c38>] _raw_spin_unlock_irqrestore+0x28/0x60
[  118.745287] hardirqs last disabled at (214): [<ffffffff8424f74b>] sysvec_call_function_single+0xb/0xc0
[  118.745975] softirqs last  enabled at (202): [<ffffffff8116fa0b>] __irq_exit_rcu+0x11b/0x180
[  118.746602] softirqs last disabled at (197): [<ffffffff8116fa0b>] __irq_exit_rcu+0x11b/0x180
[  118.747235] ---[ end trace 0000000000000000 ]---
03:03:16 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x10}], 0x1, 0x0, 0x0)

03:03:16 executing program 6:
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x44032, 0xffffffffffffffff, 0x0)
signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8)

03:03:16 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000000001010400000000000000000a000000440001802c000180140003002001000000000000000000000000000014000400ff0200000000000000000000000000010c000280040001"], 0x58}}, 0x0)

03:03:16 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x10}], 0x1, 0x0, 0x0)

03:03:16 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x6)
sendmsg$netlink(r0, &(0x7f000000c340)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000001340)={0x50, 0x21, 0x1, 0x0, 0x0, "", [@nested={0x3d, 0x0, 0x0, 0x1, [@generic="58f4db24ff596a629b0dc8a7e568fe2b0f23f18e2f6d4200b3bdabe512e9c9a79d7b673561a300cc1f5694f4e0e817c3d70a9cedd8fa1829be"]}]}, 0x50}], 0x1}, 0x0)

03:03:16 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x13, &(0x7f0000000300)=@gcm_256={{}, "756bb56d458c539c", "8c45bf5a46ccf7c3aa31f4f6a6ad0c9993e088383443b3d4c1f95da6151ade4c", "cd707431", "ea3b9d624b23fb67"}, 0x38)

[  118.854032] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  118.854703] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
03:03:17 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x10}], 0x1, 0x0, 0x0)

03:03:17 executing program 7:
r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='\x00')
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000180)='journal_checksum')
close(r0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = accept(r1, &(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000000)=0x80)
fsetxattr$security_selinux(r2, &(0x7f0000000140), &(0x7f0000000240)='system_u:object_r:tpm_device_t:s0\x00', 0x22, 0x1)
r3 = dup(r1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x50, r3, 0x8)

03:03:17 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x10}], 0x1, 0x0, 0x0)

03:03:17 executing program 6:
r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='\x00')
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000180)='journal_checksum')
close(r0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = accept(r1, &(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000000)=0x80)
fsetxattr$security_selinux(r2, &(0x7f0000000140), &(0x7f0000000240)='system_u:object_r:tpm_device_t:s0\x00', 0x22, 0x1)
r3 = dup(r1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x50, r3, 0x8)

03:03:17 executing program 4:
r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='\x00')
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000180)='journal_checksum')
close(r0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = accept(r1, &(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000000)=0x80)
fsetxattr$security_selinux(r2, &(0x7f0000000140), &(0x7f0000000240)='system_u:object_r:tpm_device_t:s0\x00', 0x22, 0x1)
r3 = dup(r1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x50, r3, 0x8)

03:03:17 executing program 1:
r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='\x00')
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000180)='journal_checksum')
close(r0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = accept(r1, &(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000000)=0x80)
fsetxattr$security_selinux(r2, &(0x7f0000000140), &(0x7f0000000240)='system_u:object_r:tpm_device_t:s0\x00', 0x22, 0x1)
r3 = dup(r1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x50, r3, 0x8)

03:03:17 executing program 7:
r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='\x00')
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000180)='journal_checksum')
close(r0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = accept(r1, &(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000000)=0x80)
fsetxattr$security_selinux(r2, &(0x7f0000000140), &(0x7f0000000240)='system_u:object_r:tpm_device_t:s0\x00', 0x22, 0x1)
r3 = dup(r1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x50, r3, 0x8)

03:03:17 executing program 3:
r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='\x00')
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000180)='journal_checksum')
close(r0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = accept(r1, &(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000000)=0x80)
fsetxattr$security_selinux(r2, &(0x7f0000000140), &(0x7f0000000240)='system_u:object_r:tpm_device_t:s0\x00', 0x22, 0x1)
r3 = dup(r1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x50, r3, 0x8)

[  119.071945] ------------[ cut here ]------------
[  119.072341] WARNING: CPU: 0 PID: 4023 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[  119.073029] Modules linked in:
[  119.073282] CPU: 0 PID: 4023 Comm: syz-executor.5 Tainted: G        W          6.0.0-rc7-next-20220928 #1
[  119.073987] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  119.074816] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  119.075225] Code: 5e 41 5f e9 cb a9 ef ff e8 c6 a9 ef ff 65 8b 1d db 12 ac 7e 31 ff 89 de e8 66 a6 ef ff 85 db 0f 84 8a 00 00 00 e8 a9 a9 ef ff <0f> 0b e9 a5 fe ff ff e8 9d a9 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  119.076568] RSP: 0018:ffff88806ce09e48 EFLAGS: 00010046
[  119.076965] RAX: 0000000080010002 RBX: 0000000000000000 RCX: 0000000000000000
[  119.077503] RDX: ffff88803fea5040 RSI: ffffffff815662f7 RDI: 0000000000000005
[  119.078026] RBP: ffff8880207605c8 R08: 0000000000000005 R09: 0000000000000001
[  119.078567] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff88806ce3d140
[  119.079095] R13: ffff88806ce3d140 R14: ffffffff8547d060 R15: 0000000000000002
[  119.079636] FS:  00007f270fb05700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[  119.080232] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  119.080663] CR2: 00007f27126a3018 CR3: 000000000eed2000 CR4: 0000000000350ef0
[  119.081199] Call Trace:
[  119.081401]  <IRQ>
[  119.081570]  ctx_sched_out+0x8f1/0xc10
[  119.081869]  ctx_resched+0x2f3/0x390
[  119.082151]  __perf_install_in_context+0x285/0x9c0
[  119.082523]  ? ctx_resched+0x390/0x390
[  119.082821]  remote_function+0x125/0x1b0
[  119.083138]  __flush_smp_call_function_queue+0x1df/0x5a0
[  119.083538]  ? perf_duration_warn+0x40/0x40
[  119.083885]  __sysvec_call_function_single+0x92/0x3a0
[  119.084271]  sysvec_call_function_single+0x89/0xc0
[  119.084642]  </IRQ>
[  119.084817]  <TASK>
[  119.084988]  asm_sysvec_call_function_single+0x16/0x20
[  119.085372] RIP: 0010:unwind_next_frame+0xa3f/0x20b0
[  119.085751] Code: 89 e9 48 c1 e9 03 80 3c 11 00 0f 85 01 11 00 00 48 8b 14 24 49 89 46 58 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 <0f> 85 bf 10 00 00 48 8b 44 24 18 4c 89 ea 48 c1 ea 03 49 89 46 48
[  119.087032] RSP: 0018:ffff888040957930 EFLAGS: 00000246
[  119.087419] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 1ffff1100812af41
[  119.087940] RDX: 1ffff1100812af3f RSI: ffff888040957d88 RDI: ffff888040957d88
[  119.088453] RBP: ffff888040957a08 R08: ffffffff85edfcfc R09: ffffffff85edfd00
[  119.088961] R10: ffffed100812af43 R11: ffff8880409579f0 R12: ffff8880409579f1
[  119.089501] R13: ffff888040957a10 R14: ffff8880409579b0 R15: ffffffff85edfd01
[  119.090040]  ? kmem_cache_free+0xf7/0x610
[  119.090358]  ? kernel_text_address+0xd/0xb0
[  119.090682]  ? write_profile+0x3a0/0x3a0
[  119.090992]  ? write_profile+0x3a0/0x3a0
[  119.091309]  arch_stack_walk+0x83/0xf0
[  119.091629]  ? putname+0xfe/0x140
[  119.091900]  ? putname+0xfe/0x140
[  119.092166]  stack_trace_save+0x8c/0xc0
[  119.092471]  ? filter_irq_stacks+0x90/0x90
[  119.092795]  ? putname+0xfe/0x140
[  119.093061]  ? kasan_save_stack+0x31/0x40
[  119.093376]  ? kasan_save_stack+0x1e/0x40
[  119.093695]  ? __kasan_record_aux_stack+0x95/0xb0
[  119.094064]  kasan_save_stack+0x1e/0x40
[  119.094372]  ? kasan_save_stack+0x1e/0x40
[  119.094689]  ? kasan_set_track+0x21/0x30
[  119.094998]  ? kasan_save_free_info+0x2a/0x50
[  119.095352]  ? __kasan_slab_free+0x106/0x190
[  119.095704]  ? kmem_cache_free+0xf7/0x610
[  119.096017]  ? __lock_acquire+0xbad/0x5e70
[  119.096349]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  119.096760]  ? lock_is_held_type+0xd7/0x130
[  119.097093]  ? find_held_lock+0x2c/0x110
[  119.097409]  ? lock_release+0x3b2/0x750
[  119.097712]  ? __delete_object+0xb3/0x100
[  119.098032]  ? call_rcu+0x589/0xa30
[  119.098311]  ? call_rcu+0x589/0xa30
[  119.098587]  ? lockdep_hardirqs_on+0x79/0x100
[  119.098927]  kasan_set_track+0x21/0x30
[  119.099223]  kasan_save_free_info+0x2a/0x50
[  119.099556]  __kasan_slab_free+0x106/0x190
[  119.099895]  ? putname+0xfe/0x140
[  119.100159]  kmem_cache_free+0xf7/0x610
[  119.100465]  putname+0xfe/0x140
[  119.100723]  do_sys_openat2+0x157/0x4c0
[  119.101029]  ? build_open_flags+0x6f0/0x6f0
[  119.101359]  ? handle_mm_fault+0x6fd/0xa20
[  119.101676]  ? up_write+0x520/0x520
[  119.101962]  __x64_sys_openat+0x13f/0x1f0
[  119.102280]  ? __ia32_compat_sys_open+0x1c0/0x1c0
[  119.102648]  ? syscall_enter_from_user_mode+0x1d/0x50
[  119.103034]  ? syscall_enter_from_user_mode+0x1d/0x50
[  119.103433]  do_syscall_64+0x3b/0x90
[  119.103729]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  119.104111] RIP: 0033:0x7f271258fb19
[  119.104386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  119.105724] RSP: 002b:00007f270fb05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  119.106286] RAX: ffffffffffffffda RBX: 00007f27126a2f60 RCX: 00007f271258fb19
[  119.106816] RDX: 0000000000000000 RSI: 0000000020000040 RDI: ffffffffffffff9c
[  119.107342] RBP: 00007f27125e9f6d R08: 0000000000000000 R09: 0000000000000000
[  119.107881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  119.108408] R13: 00007ffe9e8ae05f R14: 00007f270fb05300 R15: 0000000000022000
[  119.108946]  </TASK>
[  119.109129] irq event stamp: 86
[  119.109378] hardirqs last  enabled at (85): [<ffffffff81321499>] call_rcu+0x589/0xa30
[  119.109955] hardirqs last disabled at (86): [<ffffffff8424f74b>] sysvec_call_function_single+0xb/0xc0
[  119.110631] softirqs last  enabled at (0): [<ffffffff8114f175>] copy_process+0x1e15/0x6e20
[  119.111246] softirqs last disabled at (0): [<0000000000000000>] 0x0
[  119.111725] ---[ end trace 0000000000000000 ]---
03:03:17 executing program 0:
r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='\x00')
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000180)='journal_checksum')
close(r0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = accept(r1, &(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000000)=0x80)
fsetxattr$security_selinux(r2, &(0x7f0000000140), &(0x7f0000000240)='system_u:object_r:tpm_device_t:s0\x00', 0x22, 0x1)
r3 = dup(r1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x50, r3, 0x8)

03:03:17 executing program 2:
r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='\x00')
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000180)='journal_checksum')
close(r0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = accept(r1, &(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000000)=0x80)
fsetxattr$security_selinux(r2, &(0x7f0000000140), &(0x7f0000000240)='system_u:object_r:tpm_device_t:s0\x00', 0x22, 0x1)
r3 = dup(r1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x50, r3, 0x8)

03:03:17 executing program 6:
r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='\x00')
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000180)='journal_checksum')
close(r0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = accept(r1, &(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000000)=0x80)
fsetxattr$security_selinux(r2, &(0x7f0000000140), &(0x7f0000000240)='system_u:object_r:tpm_device_t:s0\x00', 0x22, 0x1)
r3 = dup(r1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x50, r3, 0x8)

03:03:17 executing program 1:
r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='\x00')
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000180)='journal_checksum')
close(r0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = accept(r1, &(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000000)=0x80)
fsetxattr$security_selinux(r2, &(0x7f0000000140), &(0x7f0000000240)='system_u:object_r:tpm_device_t:s0\x00', 0x22, 0x1)
r3 = dup(r1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x50, r3, 0x8)

03:03:17 executing program 4:
r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='\x00')
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000180)='journal_checksum')
close(r0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = accept(r1, &(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000000)=0x80)
fsetxattr$security_selinux(r2, &(0x7f0000000140), &(0x7f0000000240)='system_u:object_r:tpm_device_t:s0\x00', 0x22, 0x1)
r3 = dup(r1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x50, r3, 0x8)

03:03:17 executing program 0:
r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='\x00')
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000180)='journal_checksum')
close(r0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = accept(r1, &(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000000)=0x80)
fsetxattr$security_selinux(r2, &(0x7f0000000140), &(0x7f0000000240)='system_u:object_r:tpm_device_t:s0\x00', 0x22, 0x1)
r3 = dup(r1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x50, r3, 0x8)

03:03:17 executing program 3:
r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='\x00')
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000180)='journal_checksum')
close(r0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = accept(r1, &(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000000)=0x80)
fsetxattr$security_selinux(r2, &(0x7f0000000140), &(0x7f0000000240)='system_u:object_r:tpm_device_t:s0\x00', 0x22, 0x1)
r3 = dup(r1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x50, r3, 0x8)

03:03:17 executing program 2:
r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='\x00')
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000180)='journal_checksum')
close(r0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = accept(r1, &(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000000)=0x80)
fsetxattr$security_selinux(r2, &(0x7f0000000140), &(0x7f0000000240)='system_u:object_r:tpm_device_t:s0\x00', 0x22, 0x1)
r3 = dup(r1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x50, r3, 0x8)

03:03:17 executing program 0:
r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='\x00')
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000180)='journal_checksum')
close(r0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = accept(r1, &(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000000)=0x80)
fsetxattr$security_selinux(r2, &(0x7f0000000140), &(0x7f0000000240)='system_u:object_r:tpm_device_t:s0\x00', 0x22, 0x1)
r3 = dup(r1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x50, r3, 0x8)

03:03:17 executing program 1:
r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='\x00')
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000180)='journal_checksum')
close(r0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = accept(r1, &(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000000)=0x80)
fsetxattr$security_selinux(r2, &(0x7f0000000140), &(0x7f0000000240)='system_u:object_r:tpm_device_t:s0\x00', 0x22, 0x1)
r3 = dup(r1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x50, r3, 0x8)

03:03:17 executing program 4:
r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='\x00')
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000180)='journal_checksum')
close(r0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = accept(r1, &(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000000)=0x80)
fsetxattr$security_selinux(r2, &(0x7f0000000140), &(0x7f0000000240)='system_u:object_r:tpm_device_t:s0\x00', 0x22, 0x1)
r3 = dup(r1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x50, r3, 0x8)

03:03:17 executing program 2:
r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='\x00')
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000180)='journal_checksum')
close(r0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = accept(r1, &(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000000)=0x80)
fsetxattr$security_selinux(r2, &(0x7f0000000140), &(0x7f0000000240)='system_u:object_r:tpm_device_t:s0\x00', 0x22, 0x1)
r3 = dup(r1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x50, r3, 0x8)

03:03:17 executing program 3:
r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='\x00')
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000180)='journal_checksum')
close(r0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = accept(r1, &(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000000)=0x80)
fsetxattr$security_selinux(r2, &(0x7f0000000140), &(0x7f0000000240)='system_u:object_r:tpm_device_t:s0\x00', 0x22, 0x1)
r3 = dup(r1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x50, r3, 0x8)

03:03:17 executing program 5:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000180)=""/4096, 0x10}], 0x1, 0x0, 0x0)

03:03:17 executing program 6:
r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='\x00')
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000180)='journal_checksum')
close(r0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = accept(r1, &(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000000)=0x80)
fsetxattr$security_selinux(r2, &(0x7f0000000140), &(0x7f0000000240)='system_u:object_r:tpm_device_t:s0\x00', 0x22, 0x1)
r3 = dup(r1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x50, r3, 0x8)

03:03:17 executing program 7:
r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='\x00')
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000180)='journal_checksum')
close(r0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = accept(r1, &(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000000)=0x80)
fsetxattr$security_selinux(r2, &(0x7f0000000140), &(0x7f0000000240)='system_u:object_r:tpm_device_t:s0\x00', 0x22, 0x1)
r3 = dup(r1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x50, r3, 0x8)

03:03:17 executing program 0:
r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='\x00')
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000180)='journal_checksum')
close(r0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = accept(r1, &(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000000)=0x80)
fsetxattr$security_selinux(r2, &(0x7f0000000140), &(0x7f0000000240)='system_u:object_r:tpm_device_t:s0\x00', 0x22, 0x1)
r3 = dup(r1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x50, r3, 0x8)

03:03:17 executing program 1:
syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000880)=[{0x0}], 0x0, 0x0)

03:03:17 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0)

03:03:17 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)

03:03:17 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2})
sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)

03:03:17 executing program 4:
getrandom(&(0x7f0000000000)=""/83, 0x53, 0x0)

03:03:17 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0)
getxattr(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000140)=@known='trusted.overlay.opaque\x00', &(0x7f0000000180)=""/180, 0xb4)

03:03:17 executing program 3:
clock_getres(0xa, 0x0)

03:03:17 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x12, 0xfffffffffffffffd, &(0x7f0000000000))

[  119.613623] hrtimer: interrupt took 21000 ns
03:03:17 executing program 4:
getrandom(&(0x7f0000000000)=""/83, 0x53, 0x0)

03:03:17 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)

03:03:17 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0)

03:03:17 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x12, 0xfffffffffffffffd, &(0x7f0000000000))

03:03:17 executing program 1:
shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)

03:03:17 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0)
getxattr(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000140)=@known='trusted.overlay.opaque\x00', &(0x7f0000000180)=""/180, 0xb4)

03:03:17 executing program 3:
clock_getres(0xa, 0x0)

03:03:17 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2})
sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)

03:03:17 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x12, 0xfffffffffffffffd, &(0x7f0000000000))

03:03:17 executing program 4:
getrandom(&(0x7f0000000000)=""/83, 0x53, 0x0)

03:03:17 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)

03:03:17 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0)

03:03:17 executing program 3:
clock_getres(0xa, 0x0)

03:03:17 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2})
sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)

03:03:17 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0)
getxattr(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000140)=@known='trusted.overlay.opaque\x00', &(0x7f0000000180)=""/180, 0xb4)

[  119.850669] ------------[ cut here ]------------
[  119.850710] 
[  119.850714] ======================================================
[  119.850718] WARNING: possible circular locking dependency detected
[  119.850723] 6.0.0-rc7-next-20220928 #1 Tainted: G        W         
[  119.850731] ------------------------------------------------------
[  119.850735] syz-executor.7/4096 is trying to acquire lock:
[  119.850742] ffffffff853faab8 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0xe/0x70
[  119.850786] 
[  119.850786] but task is already holding lock:
[  119.850789] ffff88800fcfec20 (&ctx->lock){-.-.}-{2:2}, at: perf_event_task_tick+0x1ce/0x1050
[  119.850818] 
[  119.850818] which lock already depends on the new lock.
[  119.850818] 
[  119.850821] 
[  119.850821] the existing dependency chain (in reverse order) is:
[  119.850824] 
[  119.850824] -> #3 (&ctx->lock){-.-.}-{2:2}:
[  119.850839]        _raw_spin_lock+0x2a/0x40
[  119.850853]        __perf_event_task_sched_out+0x53b/0x18d0
[  119.850867]        __schedule+0xedd/0x2470
[  119.850885]        schedule+0xda/0x1b0
[  119.850902]        futex_wait_queue+0xf5/0x1e0
[  119.850914]        futex_wait+0x28e/0x690
[  119.850926]        do_futex+0x2ff/0x380
[  119.850936]        __x64_sys_futex+0x1c6/0x4d0
[  119.850947]        do_syscall_64+0x3b/0x90
[  119.850958]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  119.850974] 
[  119.850974] -> #2 (&rq->__lock){-.-.}-{2:2}:
[  119.850988]        _raw_spin_lock_nested+0x30/0x40
[  119.851002]        raw_spin_rq_lock_nested+0x1e/0x30
[  119.851016]        task_fork_fair+0x63/0x4d0
[  119.851034]        sched_cgroup_fork+0x3d0/0x540
[  119.851050]        copy_process+0x4183/0x6e20
[  119.851061]        kernel_clone+0xe7/0x890
[  119.851072]        user_mode_thread+0xad/0xf0
[  119.851083]        rest_init+0x24/0x250
[  119.851098]        arch_call_rest_init+0xf/0x14
[  119.851119]        start_kernel+0x4c6/0x4eb
[  119.851138]        secondary_startup_64_no_verify+0xe0/0xeb
[  119.851153] 
[  119.851153] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[  119.851168]        _raw_spin_lock_irqsave+0x39/0x60
[  119.851181]        try_to_wake_up+0xab/0x1930
[  119.851196]        up+0x75/0xb0
[  119.851214]        __up_console_sem+0x6e/0x80
[  119.851232]        console_unlock+0x46a/0x590
[  119.851251]        vprintk_emit+0x1bd/0x560
[  119.851269]        vprintk+0x84/0xa0
[  119.851288]        _printk+0xba/0xf1
[  119.851302]        regdb_fw_cb.cold+0x6c/0xa7
[  119.851323]        request_firmware_work_func+0x12e/0x240
[  119.851337]        process_one_work+0xa17/0x16a0
[  119.851357]        worker_thread+0x637/0x1260
[  119.851376]        kthread+0x2ed/0x3a0
[  119.851392]        ret_from_fork+0x22/0x30
[  119.851405] 
[  119.851405] -> #0 ((console_sem).lock){-.-.}-{2:2}:
[  119.851420]        __lock_acquire+0x2a02/0x5e70
[  119.851439]        lock_acquire+0x1a2/0x530
[  119.851458]        _raw_spin_lock_irqsave+0x39/0x60
[  119.851471]        down_trylock+0xe/0x70
[  119.851490]        __down_trylock_console_sem+0x3b/0xd0
[  119.851509]        vprintk_emit+0x16b/0x560
[  119.851527]        vprintk+0x84/0xa0
[  119.851546]        _printk+0xba/0xf1
[  119.851559]        report_bug.cold+0x72/0xab
[  119.851569]        handle_bug+0x3c/0x70
[  119.851580]        exc_invalid_op+0x14/0x50
[  119.851591]        asm_exc_invalid_op+0x16/0x20
[  119.851606]        perf_event_task_tick+0xbeb/0x1050
[  119.851626]        scheduler_tick+0x17e/0x350
[  119.851642]        update_process_times+0x138/0x190
[  119.851655]        tick_sched_handle+0x9b/0x180
[  119.851673]        tick_sched_timer+0xf2/0x120
[  119.851691]        __hrtimer_run_queues+0x184/0xb50
[  119.851705]        hrtimer_interrupt+0x315/0x770
[  119.851718]        __sysvec_apic_timer_interrupt+0x144/0x500
[  119.851741]        sysvec_apic_timer_interrupt+0x3b/0xc0
[  119.851757]        asm_sysvec_apic_timer_interrupt+0x16/0x20
[  119.851774]        unwind_next_frame+0x1c5/0x20b0
[  119.851791]        arch_stack_walk+0x83/0xf0
[  119.851811]        stack_trace_save+0x8c/0xc0
[  119.851829]        kasan_save_stack+0x1e/0x40
[  119.851846]        kasan_set_track+0x21/0x30
[  119.851863]        kasan_save_free_info+0x2a/0x50
[  119.851884]        __kasan_slab_free+0x106/0x190
[  119.851902]        kmem_cache_free+0xf7/0x610
[  119.851918]        rcu_core+0x7e2/0x2080
[  119.851933]        __do_softirq+0x1c3/0x8f5
[  119.851951]        __irq_exit_rcu+0x11b/0x180
[  119.851969]        irq_exit_rcu+0x5/0x20
[  119.851987]        sysvec_apic_timer_interrupt+0x8e/0xc0
[  119.852002]        asm_sysvec_apic_timer_interrupt+0x16/0x20
[  119.852020]        memset+0x15/0x50
[  119.852029]        __unwind_start+0x2a/0x7c0
[  119.852045]        arch_stack_walk+0x5f/0xf0
[  119.852065]        stack_trace_save+0x8c/0xc0
[  119.852082]        kasan_save_stack+0x1e/0x40
[  119.852099]        kasan_set_track+0x21/0x30
[  119.852116]        __kasan_kmalloc+0x7e/0x90
[  119.852133]        percpu_ref_init+0xdb/0x400
[  119.852150]        io_uring_setup.cold+0x3f2/0x1b1d
[  119.852166]        do_syscall_64+0x3b/0x90
[  119.852177]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  119.852193] 
[  119.852193] other info that might help us debug this:
[  119.852193] 
[  119.852196] Chain exists of:
[  119.852196]   (console_sem).lock --> &rq->__lock --> &ctx->lock
[  119.852196] 
[  119.852211]  Possible unsafe locking scenario:
[  119.852211] 
[  119.852214]        CPU0                    CPU1
[  119.852216]        ----                    ----
[  119.852219]   lock(&ctx->lock);
[  119.852225]                                lock(&rq->__lock);
[  119.852231]                                lock(&ctx->lock);
[  119.852238]   lock((console_sem).lock);
[  119.852244] 
[  119.852244]  *** DEADLOCK ***
[  119.852244] 
[  119.852246] 2 locks held by syz-executor.7/4096:
[  119.852254]  #0: ffffffff85407240 (rcu_callback){....}-{0:0}, at: rcu_core+0x759/0x2080
[  119.852286]  #1: ffff88800fcfec20 (&ctx->lock){-.-.}-{2:2}, at: perf_event_task_tick+0x1ce/0x1050
[  119.852315] 
[  119.852315] stack backtrace:
[  119.852318] CPU: 0 PID: 4096 Comm: syz-executor.7 Tainted: G        W          6.0.0-rc7-next-20220928 #1
[  119.852332] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  119.852341] Call Trace:
[  119.852345]  <IRQ>
[  119.852349]  dump_stack_lvl+0x8b/0xb3
[  119.852362]  check_noncircular+0x263/0x2e0
[  119.852381]  ? format_decode+0x26c/0xb50
[  119.852401]  ? print_circular_bug+0x450/0x450
[  119.852420]  ? enable_ptr_key_workfn+0x20/0x20
[  119.852440]  ? __lock_acquire+0xbad/0x5e70
[  119.852459]  ? __kernel_text_address+0x9/0x40
[  119.852474]  ? format_decode+0x26c/0xb50
[  119.852496]  ? alloc_chain_hlocks+0x1ec/0x5a0
[  119.852516]  __lock_acquire+0x2a02/0x5e70
[  119.852541]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  119.852566]  lock_acquire+0x1a2/0x530
[  119.852585]  ? down_trylock+0xe/0x70
[  119.852607]  ? lock_release+0x750/0x750
[  119.852629]  ? lock_chain_count+0x20/0x20
[  119.852649]  ? vprintk+0x84/0xa0
[  119.852670]  _raw_spin_lock_irqsave+0x39/0x60
[  119.852684]  ? down_trylock+0xe/0x70
[  119.852705]  down_trylock+0xe/0x70
[  119.852725]  ? vprintk+0x84/0xa0
[  119.852745]  __down_trylock_console_sem+0x3b/0xd0
[  119.852765]  vprintk_emit+0x16b/0x560
[  119.852786]  vprintk+0x84/0xa0
[  119.852807]  _printk+0xba/0xf1
[  119.852821]  ? record_print_text.cold+0x16/0x16
[  119.852841]  ? report_bug.cold+0x66/0xab
[  119.852853]  ? perf_event_task_tick+0xbeb/0x1050
[  119.852867]  report_bug.cold+0x72/0xab
[  119.852880]  handle_bug+0x3c/0x70
[  119.852892]  exc_invalid_op+0x14/0x50
[  119.852904]  asm_exc_invalid_op+0x16/0x20
[  119.852921] RIP: 0010:perf_event_task_tick+0xbeb/0x1050
[  119.852936] Code: e9 34 fd ff ff e8 45 2e ef ff 65 44 8b 35 59 97 ab 7e 31 ff 44 89 f6 e8 e3 2a ef ff 45 85 f6 0f 84 04 01 00 00 e8 25 2e ef ff <0f> 0b e9 60 fa ff ff e8 19 2e ef ff 65 8b 1d 2e 97 ab 7e 31 ff 89
[  119.852949] RSP: 0018:ffff88806ce09640 EFLAGS: 00010046
[  119.852959] RAX: 0000000000000000 RBX: ffff8880086650f0 RCX: 0000000000000100
[  119.852967] RDX: ffff888040320000 RSI: ffffffff8156de7b RDI: 0000000000000005
[  119.852975] RBP: ffff88800fcfed08 R08: 0000000000000005 R09: 0000000000000001
[  119.852983] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888008665188
[  119.852991] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000
[  119.853003]  ? perf_event_task_tick+0xbeb/0x1050
[  119.853021]  scheduler_tick+0x17e/0x350
[  119.853041]  update_process_times+0x138/0x190
[  119.853054]  ? tick_sched_do_timer+0x174/0x470
[  119.853074]  tick_sched_handle+0x9b/0x180
[  119.853094]  tick_sched_timer+0xf2/0x120
[  119.853114]  __hrtimer_run_queues+0x184/0xb50
[  119.853129]  ? tick_sched_do_timer+0x470/0x470
[  119.853151]  ? hrtimer_sleeper_start_expires+0x80/0x80
[  119.853167]  ? ktime_get_update_offsets_now+0x256/0x360
[  119.853188]  hrtimer_interrupt+0x315/0x770
[  119.853207]  __sysvec_apic_timer_interrupt+0x144/0x500
[  119.853231]  sysvec_apic_timer_interrupt+0x3b/0xc0
[  119.853248]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  119.853265] RIP: 0010:unwind_next_frame+0x1c5/0x20b0
[  119.853284] Code: 8d 43 ff 39 c6 0f 83 18 15 00 00 48 b8 00 00 00 00 00 fc ff df 89 f2 48 8d 3c 95 e4 31 27 86 48 89 f9 48 c1 e9 03 0f b6 0c 01 <48> 89 f8 83 e0 07 83 c0 03 38 c8 7c 27 84 c9 74 23 48 89 54 24 28
[  119.853296] RSP: 0018:ffff88806ce099f8 EFLAGS: 00000216
[  119.853305] RAX: dffffc0000000000 RBX: 0000000000000002 RCX: 0000000000000000
[  119.853313] RDX: 000000000000359f RSI: 000000000000359f RDI: ffffffff86280860
[  119.853321] RBP: ffff88806ce09ad0 R08: ffffffff852c46c0 R09: ffffffff85e33bae
[  119.853329] R10: ffffed100d9c135c R11: 000000000003603d R12: ffff88806ce09ab9
[  119.853338] R13: ffff88806ce09ad8 R14: ffff88806ce09a78 R15: ffffffff81359f4b
[  119.853346]  ? stack_trace_save+0x8b/0xc0
[  119.853369]  ? unwind_next_frame+0xac/0x20b0
[  119.853387]  ? stack_trace_save+0x8c/0xc0
[  119.853405]  ? stack_trace_save+0x8c/0xc0
[  119.853423]  ? kernel_text_address+0xd/0xb0
[  119.853437]  ? write_profile+0x3a0/0x3a0
[  119.853455]  arch_stack_walk+0x83/0xf0
[  119.853479]  ? rcu_core+0x7e2/0x2080
[  119.853495]  ? stack_trace_save+0x8c/0xc0
[  119.853514]  ? rcu_core+0x7e2/0x2080
[  119.853530]  stack_trace_save+0x8c/0xc0
[  119.853548]  ? filter_irq_stacks+0x90/0x90
[  119.853568]  ? rcu_core+0x7e2/0x2080
[  119.853585]  kasan_save_stack+0x1e/0x40
[  119.853603]  ? kasan_save_stack+0x1e/0x40
[  119.853621]  ? kasan_set_track+0x21/0x30
[  119.853640]  ? __lock_acquire+0xbad/0x5e70
[  119.853663]  ? kasan_quarantine_put+0xa1/0x1f0
[  119.853676]  ? perf_trace_run_bpf_submit+0xf5/0x1d0
[  119.853689]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  119.853711]  ? perf_trace_preemptirq_template+0x274/0x420
[  119.853736]  ? lock_acquire+0x1b2/0x530
[  119.853756]  ? lock_release+0x750/0x750
[  119.853777]  kasan_set_track+0x21/0x30
[  119.853795]  kasan_save_free_info+0x2a/0x50
[  119.853817]  __kasan_slab_free+0x106/0x190
[  119.853836]  ? rcu_core+0x7e2/0x2080
[  119.853852]  kmem_cache_free+0xf7/0x610
[  119.853871]  rcu_core+0x7e2/0x2080
[  119.853890]  ? rcu_report_dead+0x5b0/0x5b0
[  119.853909]  ? lock_is_held_type+0xd7/0x130
[  119.853927]  __do_softirq+0x1c3/0x8f5
[  119.853948]  __irq_exit_rcu+0x11b/0x180
[  119.853968]  irq_exit_rcu+0x5/0x20
[  119.853986]  sysvec_apic_timer_interrupt+0x8e/0xc0
[  119.854003]  </IRQ>
[  119.854006]  <TASK>
[  119.854010]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  119.854028] RIP: 0010:memset+0x15/0x50
[  119.854039] Code: 31 b3 e7 02 0f 0b e9 2a b3 e7 02 66 2e 0f 1f 84 00 00 00 00 00 41 55 41 89 f5 41 54 49 89 d4 ba 01 00 00 00 55 48 8b 4c 24 18 <4c> 89 e6 48 89 fd e8 f0 f6 ff ff 84 c0 74 13 4c 89 e2 44 89 ee 48
[  119.854051] RSP: 0018:ffff88804031f9d8 EFLAGS: 00000292
[  119.854060] RAX: ffff888040320000 RBX: ffff88804031fae0 RCX: ffffffff8111c29a
[  119.854069] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88804031fa48
[  119.854077] RBP: ffff888040320000 R08: 0000000000000dc0 R09: ffffed1007d2b0b7
[  119.854085] R10: fffffbfff0a99ea8 R11: 0000000000000001 R12: 0000000000000070
[  119.854093] R13: 0000000000000000 R14: ffff888040320000 R15: ffff88804031fa48
[  119.854104]  ? __unwind_start+0x2a/0x7c0
[  119.854123]  ? stack_trace_save+0x8c/0xc0
[  119.854142]  __unwind_start+0x2a/0x7c0
[  119.854159]  ? write_profile+0x3a0/0x3a0
[  119.854178]  arch_stack_walk+0x5f/0xf0
[  119.854201]  ? __lock_acquire+0x164d/0x5e70
[  119.854223]  stack_trace_save+0x8c/0xc0
[  119.854241]  ? filter_irq_stacks+0x90/0x90
[  119.854260]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  119.854283]  kasan_save_stack+0x1e/0x40
[  119.854305]  ? lock_acquire+0x1b2/0x530
[  119.854325]  ? lock_is_held_type+0xd7/0x130
[  119.854341]  ? find_held_lock+0x2c/0x110
[  119.854360]  ? lock_release+0x3b2/0x750
[  119.854379]  ? __kmem_cache_alloc_node+0x22f/0x3d0
[  119.854397]  ? lock_downgrade+0x6d0/0x6d0
[  119.854419]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  119.854435]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  119.854452]  ? lock_is_held_type+0xd7/0x130
[  119.854469]  kasan_set_track+0x21/0x30
[  119.854487]  __kasan_kmalloc+0x7e/0x90
[  119.854506]  ? io_tctx_exit_cb+0xd3/0xd3
[  119.854521]  percpu_ref_init+0xdb/0x400
[  119.854540]  io_uring_setup.cold+0x3f2/0x1b1d
[  119.854556]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  119.854574]  ? io_cqring_overflow_flush+0x150/0x150
[  119.854599]  ? syscall_enter_from_user_mode+0x27/0x50
[  119.854618]  do_syscall_64+0x3b/0x90
[  119.854630]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  119.854647] RIP: 0033:0x7f6bed991b19
[  119.854656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  119.854668] RSP: 002b:00007f6beaf07188 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[  119.854679] RAX: ffffffffffffffda RBX: 00007f6bedaa4f60 RCX: 00007f6bed991b19
[  119.854688] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 000000000000792a
[  119.854695] RBP: 00007f6bed9ebf6d R08: 0000000000000000 R09: 0000000000000000
[  119.854703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  119.854711] R13: 00007fff1268615f R14: 00007f6beaf07300 R15: 0000000000022000
[  119.854725]  </TASK>
[  119.949451] WARNING: CPU: 0 PID: 4096 at kernel/events/core.c:2233 perf_event_task_tick+0xbeb/0x1050
[  119.950125] Modules linked in:
[  119.950371] CPU: 0 PID: 4096 Comm: syz-executor.7 Tainted: G        W          6.0.0-rc7-next-20220928 #1
[  119.951073] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  119.951911] RIP: 0010:perf_event_task_tick+0xbeb/0x1050
[  119.952311] Code: e9 34 fd ff ff e8 45 2e ef ff 65 44 8b 35 59 97 ab 7e 31 ff 44 89 f6 e8 e3 2a ef ff 45 85 f6 0f 84 04 01 00 00 e8 25 2e ef ff <0f> 0b e9 60 fa ff ff e8 19 2e ef ff 65 8b 1d 2e 97 ab 7e 31 ff 89
[  119.953650] RSP: 0018:ffff88806ce09640 EFLAGS: 00010046
[  119.954048] RAX: 0000000000000000 RBX: ffff8880086650f0 RCX: 0000000000000100
[  119.954573] RDX: ffff888040320000 RSI: ffffffff8156de7b RDI: 0000000000000005
[  119.955096] RBP: ffff88800fcfed08 R08: 0000000000000005 R09: 0000000000000001
[  119.955623] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888008665188
[  119.956149] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000
[  119.956680] FS:  00007f6beaf07700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[  119.957275] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  119.957708] CR2: 00007fa452df0f64 CR3: 000000000fbb0000 CR4: 0000000000350ef0
[  119.958239] Call Trace:
[  119.958434]  <IRQ>
[  119.958603]  scheduler_tick+0x17e/0x350
[  119.958909]  update_process_times+0x138/0x190
[  119.959250]  ? tick_sched_do_timer+0x174/0x470
[  119.959600]  tick_sched_handle+0x9b/0x180
[  119.959927]  tick_sched_timer+0xf2/0x120
[  119.960241]  __hrtimer_run_queues+0x184/0xb50
[  119.960578]  ? tick_sched_do_timer+0x470/0x470
[  119.960938]  ? hrtimer_sleeper_start_expires+0x80/0x80
[  119.961328]  ? ktime_get_update_offsets_now+0x256/0x360
[  119.961725]  hrtimer_interrupt+0x315/0x770
[  119.962049]  __sysvec_apic_timer_interrupt+0x144/0x500
[  119.962449]  sysvec_apic_timer_interrupt+0x3b/0xc0
[  119.962820]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  119.963218] RIP: 0010:unwind_next_frame+0x1c5/0x20b0
[  119.963598] Code: 8d 43 ff 39 c6 0f 83 18 15 00 00 48 b8 00 00 00 00 00 fc ff df 89 f2 48 8d 3c 95 e4 31 27 86 48 89 f9 48 c1 e9 03 0f b6 0c 01 <48> 89 f8 83 e0 07 83 c0 03 38 c8 7c 27 84 c9 74 23 48 89 54 24 28
[  119.964950] RSP: 0018:ffff88806ce099f8 EFLAGS: 00000216
[  119.965355] RAX: dffffc0000000000 RBX: 0000000000000002 RCX: 0000000000000000
[  119.965889] RDX: 000000000000359f RSI: 000000000000359f RDI: ffffffff86280860
[  119.966427] RBP: ffff88806ce09ad0 R08: ffffffff852c46c0 R09: ffffffff85e33bae
[  119.966965] R10: ffffed100d9c135c R11: 000000000003603d R12: ffff88806ce09ab9
[  119.967502] R13: ffff88806ce09ad8 R14: ffff88806ce09a78 R15: ffffffff81359f4b
[  119.968048]  ? stack_trace_save+0x8b/0xc0
[  119.968370]  ? unwind_next_frame+0xac/0x20b0
[  119.968719]  ? stack_trace_save+0x8c/0xc0
[  119.969039]  ? stack_trace_save+0x8c/0xc0
[  119.969357]  ? kernel_text_address+0xd/0xb0
[  119.969682]  ? write_profile+0x3a0/0x3a0
[  119.969995]  arch_stack_walk+0x83/0xf0
[  119.970307]  ? rcu_core+0x7e2/0x2080
[  119.970591]  ? stack_trace_save+0x8c/0xc0
[  119.970905]  ? rcu_core+0x7e2/0x2080
[  119.971192]  stack_trace_save+0x8c/0xc0
[  119.971501]  ? filter_irq_stacks+0x90/0x90
[  119.971840]  ? rcu_core+0x7e2/0x2080
[  119.972133]  kasan_save_stack+0x1e/0x40
[  119.972442]  ? kasan_save_stack+0x1e/0x40
[  119.972763]  ? kasan_set_track+0x21/0x30
[  119.973076]  ? __lock_acquire+0xbad/0x5e70
[  119.973407]  ? kasan_quarantine_put+0xa1/0x1f0
[  119.973757]  ? perf_trace_run_bpf_submit+0xf5/0x1d0
[  119.974134]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  119.974526]  ? perf_trace_preemptirq_template+0x274/0x420
[  119.974947]  ? lock_acquire+0x1b2/0x530
[  119.975257]  ? lock_release+0x750/0x750
[  119.975570]  kasan_set_track+0x21/0x30
[  119.975879]  kasan_save_free_info+0x2a/0x50
[  119.976209]  __kasan_slab_free+0x106/0x190
[  119.976528]  ? rcu_core+0x7e2/0x2080
[  119.976820]  kmem_cache_free+0xf7/0x610
[  119.977126]  rcu_core+0x7e2/0x2080
[  119.977407]  ? rcu_report_dead+0x5b0/0x5b0
[  119.977732]  ? lock_is_held_type+0xd7/0x130
[  119.978057]  __do_softirq+0x1c3/0x8f5
[  119.978354]  __irq_exit_rcu+0x11b/0x180
[  119.978660]  irq_exit_rcu+0x5/0x20
[  119.978937]  sysvec_apic_timer_interrupt+0x8e/0xc0
[  119.979321]  </IRQ>
[  119.979494]  <TASK>
[  119.979677]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  119.980076] RIP: 0010:memset+0x15/0x50
[  119.980369] Code: 31 b3 e7 02 0f 0b e9 2a b3 e7 02 66 2e 0f 1f 84 00 00 00 00 00 41 55 41 89 f5 41 54 49 89 d4 ba 01 00 00 00 55 48 8b 4c 24 18 <4c> 89 e6 48 89 fd e8 f0 f6 ff ff 84 c0 74 13 4c 89 e2 44 89 ee 48
[  119.981700] RSP: 0018:ffff88804031f9d8 EFLAGS: 00000292
[  119.982096] RAX: ffff888040320000 RBX: ffff88804031fae0 RCX: ffffffff8111c29a
[  119.982619] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88804031fa48
[  119.983149] RBP: ffff888040320000 R08: 0000000000000dc0 R09: ffffed1007d2b0b7
[  119.983678] R10: fffffbfff0a99ea8 R11: 0000000000000001 R12: 0000000000000070
[  119.984200] R13: 0000000000000000 R14: ffff888040320000 R15: ffff88804031fa48
[  119.984727]  ? __unwind_start+0x2a/0x7c0
[  119.985039]  ? stack_trace_save+0x8c/0xc0
[  119.985355]  __unwind_start+0x2a/0x7c0
[  119.985655]  ? write_profile+0x3a0/0x3a0
[  119.985969]  arch_stack_walk+0x5f/0xf0
[  119.986279]  ? __lock_acquire+0x164d/0x5e70
[  119.986610]  stack_trace_save+0x8c/0xc0
[  119.986914]  ? filter_irq_stacks+0x90/0x90
[  119.987240]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  119.987652]  kasan_save_stack+0x1e/0x40
[  119.987966]  ? lock_acquire+0x1b2/0x530
[  119.988272]  ? lock_is_held_type+0xd7/0x130
[  119.988604]  ? find_held_lock+0x2c/0x110
[  119.988923]  ? lock_release+0x3b2/0x750
[  119.989228]  ? __kmem_cache_alloc_node+0x22f/0x3d0
[  119.989605]  ? lock_downgrade+0x6d0/0x6d0
[  119.989926]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  119.990312]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  119.990693]  ? lock_is_held_type+0xd7/0x130
[  119.991017]  kasan_set_track+0x21/0x30
[  119.991312]  __kasan_kmalloc+0x7e/0x90
[  119.991624]  ? io_tctx_exit_cb+0xd3/0xd3
[  119.991930]  percpu_ref_init+0xdb/0x400
[  119.992235]  io_uring_setup.cold+0x3f2/0x1b1d
[  119.992580]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  119.992980]  ? io_cqring_overflow_flush+0x150/0x150
[  119.993364]  ? syscall_enter_from_user_mode+0x27/0x50
[  119.993758]  do_syscall_64+0x3b/0x90
[  119.994045]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  119.994439] RIP: 0033:0x7f6bed991b19
[  119.994718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  119.996059] RSP: 002b:00007f6beaf07188 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[  119.996617] RAX: ffffffffffffffda RBX: 00007f6bedaa4f60 RCX: 00007f6bed991b19
[  119.997145] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 000000000000792a
[  119.997668] RBP: 00007f6bed9ebf6d R08: 0000000000000000 R09: 0000000000000000
[  119.998196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  119.998729] R13: 00007fff1268615f R14: 00007f6beaf07300 R15: 0000000000022000
[  119.999265]  </TASK>
[  119.999444] irq event stamp: 2783
[  119.999712] hardirqs last  enabled at (2782): [<ffffffff81788f1b>] kasan_quarantine_put+0x8b/0x1f0
[  120.000374] hardirqs last disabled at (2783): [<ffffffff8424f80b>] sysvec_apic_timer_interrupt+0xb/0xc0
[  120.001071] softirqs last  enabled at (2208): [<ffffffff8116fa0b>] __irq_exit_rcu+0x11b/0x180
[  120.001701] softirqs last disabled at (2523): [<ffffffff8116fa0b>] __irq_exit_rcu+0x11b/0x180
[  120.002335] ---[ end trace 0000000000000000 ]---
03:03:18 executing program 6:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0)
getxattr(&(0x7f0000000000)='./mnt\x00', &(0x7f0000000140)=@known='trusted.overlay.opaque\x00', &(0x7f0000000180)=""/180, 0xb4)

03:03:18 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2})
sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)

03:03:18 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0)

03:03:18 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x12, 0xfffffffffffffffd, &(0x7f0000000000))

03:03:18 executing program 4:
getrandom(&(0x7f0000000000)=""/83, 0x53, 0x0)

03:03:18 executing program 3:
clock_getres(0xa, 0x0)

03:03:18 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)

03:03:18 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2})
sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)

03:03:18 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2})
sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)

03:03:18 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2})
sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)

03:03:18 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2})
sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)

03:03:18 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2})
sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)

03:03:18 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2})
sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)

03:03:18 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2})
sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)

03:03:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
shutdown(r0, 0x0)

03:03:18 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2})
sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)

03:03:18 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2})
sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)

03:03:18 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2})
sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)

03:03:18 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2})
sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)

03:03:18 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2})
sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)

03:03:18 executing program 1:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000000), 0x4)

03:03:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
shutdown(r0, 0x0)

03:03:18 executing program 1:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000000), 0x4)

03:03:18 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2})
sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)

03:03:18 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2})
sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)

03:03:18 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2})
sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)

03:03:18 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2})
sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)

03:03:18 executing program 7:
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000001c0)="6fb9", 0x2}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}], 0x20}, 0x0)

03:03:18 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2})
sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)

03:03:18 executing program 1:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000000), 0x4)

03:03:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
shutdown(r0, 0x0)

03:03:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
shutdown(r0, 0x0)

03:03:18 executing program 7:
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000001c0)="6fb9", 0x2}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}], 0x20}, 0x0)

03:03:18 executing program 1:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000000), 0x4)

03:03:18 executing program 6:
syz_io_uring_setup(0x521f, &(0x7f0000000480), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x2f8a, &(0x7f0000000840), &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000008c0), &(0x7f0000000900))

03:03:18 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2})
sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)

03:03:18 executing program 5:
perf_event_open(&(0x7f0000000040)={0x8, 0x80, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

03:03:18 executing program 7:
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000001c0)="6fb9", 0x2}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}], 0x20}, 0x0)

03:03:18 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000002d80), 0x4)

03:03:18 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000280)=""/115, 0x73)
getdents64(r0, 0x0, 0x0)

03:03:18 executing program 2:
setitimer(0x2, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0)
setitimer(0x1, &(0x7f0000000140)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0)
setitimer(0x2, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r0=>0x0})
setitimer(0x2, &(0x7f0000000080)={{0x0, 0xea60}, {0x0, r0/1000+10000}}, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

03:03:18 executing program 5:
perf_event_open(&(0x7f0000000040)={0x8, 0x80, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

03:03:18 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000002d80), 0x4)

[  120.697728] syz-executor.2 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
03:03:18 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000280)=""/115, 0x73)
getdents64(r0, 0x0, 0x0)

03:03:18 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000280)=""/115, 0x73)
getdents64(r0, 0x0, 0x0)

03:03:18 executing program 7:
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x1000000, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000001c0)="6fb9", 0x2}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @broadcast}}}], 0x20}, 0x0)

03:03:18 executing program 6:
timer_create(0x9, &(0x7f00000000c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_gettime(0x0, &(0x7f0000000340))

03:03:18 executing program 2:
setitimer(0x2, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0)
setitimer(0x1, &(0x7f0000000140)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0)
setitimer(0x2, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r0=>0x0})
setitimer(0x2, &(0x7f0000000080)={{0x0, 0xea60}, {0x0, r0/1000+10000}}, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

03:03:18 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000280)=""/115, 0x73)
getdents64(r0, 0x0, 0x0)

03:03:18 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000002d80), 0x4)

03:03:18 executing program 5:
perf_event_open(&(0x7f0000000040)={0x8, 0x80, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

03:03:18 executing program 5:
perf_event_open(&(0x7f0000000040)={0x8, 0x80, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

03:03:18 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000280)=""/115, 0x73)
getdents64(r0, 0x0, 0x0)

03:03:18 executing program 2:
setitimer(0x2, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0)
setitimer(0x1, &(0x7f0000000140)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0)
setitimer(0x2, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r0=>0x0})
setitimer(0x2, &(0x7f0000000080)={{0x0, 0xea60}, {0x0, r0/1000+10000}}, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

03:03:18 executing program 6:
timer_create(0x9, &(0x7f00000000c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_gettime(0x0, &(0x7f0000000340))

03:03:18 executing program 3:
timer_create(0x9, &(0x7f00000000c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_gettime(0x0, &(0x7f0000000340))

03:03:18 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000002d80), 0x4)

03:03:18 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000280)=""/115, 0x73)
getdents64(r0, 0x0, 0x0)

03:03:19 executing program 7:
setitimer(0x2, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0)
setitimer(0x1, &(0x7f0000000140)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0)
setitimer(0x2, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r0=>0x0})
setitimer(0x2, &(0x7f0000000080)={{0x0, 0xea60}, {0x0, r0/1000+10000}}, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

03:03:19 executing program 0:
setitimer(0x2, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0)
setitimer(0x1, &(0x7f0000000140)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0)
setitimer(0x2, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r0=>0x0})
setitimer(0x2, &(0x7f0000000080)={{0x0, 0xea60}, {0x0, r0/1000+10000}}, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

03:03:19 executing program 3:
timer_create(0x9, &(0x7f00000000c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_gettime(0x0, &(0x7f0000000340))

03:03:19 executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000280)=""/115, 0x73)
getdents64(r0, 0x0, 0x0)

03:03:19 executing program 6:
timer_create(0x9, &(0x7f00000000c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_gettime(0x0, &(0x7f0000000340))

03:03:19 executing program 2:
setitimer(0x2, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0)
setitimer(0x1, &(0x7f0000000140)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0)
setitimer(0x2, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r0=>0x0})
setitimer(0x2, &(0x7f0000000080)={{0x0, 0xea60}, {0x0, r0/1000+10000}}, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

03:03:19 executing program 4:
setitimer(0x2, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0)
setitimer(0x1, &(0x7f0000000140)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0)
setitimer(0x2, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r0=>0x0})
setitimer(0x2, &(0x7f0000000080)={{0x0, 0xea60}, {0x0, r0/1000+10000}}, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

03:03:19 executing program 7:
setitimer(0x2, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0)
setitimer(0x1, &(0x7f0000000140)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0)
setitimer(0x2, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r0=>0x0})
setitimer(0x2, &(0x7f0000000080)={{0x0, 0xea60}, {0x0, r0/1000+10000}}, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

03:03:19 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x88, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @remote}, [{0x2, 0xe, "c4d412f9f786c294369e5442ebe7779dcbfc9eff2bc7898319030334e8f0512d0e81eeb392bf5f0ee7c48198dec07d8c2f6e761e09e85e70ef63d109faf79fdb443c40591572f02a0a386b13ab57d8b6ec247f46cd3d5bd710c342c5327911e4b587aba0b04e11105c55e5c74dd8"}]}}}}}}, 0x0)

03:03:19 executing program 0:
setitimer(0x2, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0)
setitimer(0x1, &(0x7f0000000140)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0)
setitimer(0x2, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r0=>0x0})
setitimer(0x2, &(0x7f0000000080)={{0x0, 0xea60}, {0x0, r0/1000+10000}}, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

03:03:19 executing program 6:
timer_create(0x9, &(0x7f00000000c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_gettime(0x0, &(0x7f0000000340))

03:03:19 executing program 3:
timer_create(0x9, &(0x7f00000000c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_gettime(0x0, &(0x7f0000000340))

03:03:19 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0)
ioctl$FITRIM(r0, 0x80086601, &(0x7f0000000000))

03:03:19 executing program 4:
setitimer(0x2, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0)
setitimer(0x1, &(0x7f0000000140)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0)
setitimer(0x2, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r0=>0x0})
setitimer(0x2, &(0x7f0000000080)={{0x0, 0xea60}, {0x0, r0/1000+10000}}, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

03:03:19 executing program 7:
setitimer(0x2, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0)
setitimer(0x1, &(0x7f0000000140)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0)
setitimer(0x2, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r0=>0x0})
setitimer(0x2, &(0x7f0000000080)={{0x0, 0xea60}, {0x0, r0/1000+10000}}, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

03:03:19 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0)
ioctl$FITRIM(r0, 0x80086601, &(0x7f0000000000))

03:03:19 executing program 0:
setitimer(0x2, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0)
setitimer(0x1, &(0x7f0000000140)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0)
setitimer(0x2, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r0=>0x0})
setitimer(0x2, &(0x7f0000000080)={{0x0, 0xea60}, {0x0, r0/1000+10000}}, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

03:03:19 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x88, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @remote}, [{0x2, 0xe, "c4d412f9f786c294369e5442ebe7779dcbfc9eff2bc7898319030334e8f0512d0e81eeb392bf5f0ee7c48198dec07d8c2f6e761e09e85e70ef63d109faf79fdb443c40591572f02a0a386b13ab57d8b6ec247f46cd3d5bd710c342c5327911e4b587aba0b04e11105c55e5c74dd8"}]}}}}}}, 0x0)

03:03:19 executing program 3:
syz_emit_ethernet(0x48, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x12, 0x3a, 0xff, @local, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}]}}}}}}, 0x0)

03:03:19 executing program 1:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = timerfd_create(0x0, 0x80800)
timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
read(r0, &(0x7f0000000080)=""/19, 0x13)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0)

03:03:19 executing program 6:
r0 = getpid()
pidfd_open(r0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0x1240, 0x8, 0x2, 0xc1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000200))
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r1, 0x10000000)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x43, &(0x7f0000000140)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{}, 0x0, @in6=@mcast2}}, 0xe8)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x242880, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=fscache,version=9p2000.u,pri\x00\x00\x00\x00\x00\x00\x00\x00devmap,loose,\x00osixacl,access=', @ANYRESDEC, @ANYBLOB=',access=any,cache=none,subj_role=,smackfsroot=,fsname=\\,smackfshat=,(^\\)\a^,hash,smackfsfloor=^#\",func=FIRMWARE_CHECK,\x00'])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0)

03:03:19 executing program 3:
syz_emit_ethernet(0x48, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x12, 0x3a, 0xff, @local, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}]}}}}}}, 0x0)

03:03:19 executing program 4:
setitimer(0x2, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0)
setitimer(0x1, &(0x7f0000000140)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0)
setitimer(0x2, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={0x0, <r0=>0x0})
setitimer(0x2, &(0x7f0000000080)={{0x0, 0xea60}, {0x0, r0/1000+10000}}, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

03:03:19 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x88, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @remote}, [{0x2, 0xe, "c4d412f9f786c294369e5442ebe7779dcbfc9eff2bc7898319030334e8f0512d0e81eeb392bf5f0ee7c48198dec07d8c2f6e761e09e85e70ef63d109faf79fdb443c40591572f02a0a386b13ab57d8b6ec247f46cd3d5bd710c342c5327911e4b587aba0b04e11105c55e5c74dd8"}]}}}}}}, 0x0)

03:03:19 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x80901)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0x80000001})

03:03:19 executing program 1:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = timerfd_create(0x0, 0x80800)
timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
read(r0, &(0x7f0000000080)=""/19, 0x13)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0)

03:03:19 executing program 3:
syz_emit_ethernet(0x48, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x12, 0x3a, 0xff, @local, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}]}}}}}}, 0x0)

03:03:19 executing program 7:
clone3(&(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000740)=""/4096, 0x1000, 0x0, 0x0}, 0x58)

03:03:19 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0)
ioctl$FITRIM(r0, 0x80086601, &(0x7f0000000000))

03:03:19 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x80901)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0x80000001})

03:03:19 executing program 4:
r0 = getpid()
pidfd_open(r0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0x1240, 0x8, 0x2, 0xc1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000200))
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r1, 0x10000000)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x43, &(0x7f0000000140)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{}, 0x0, @in6=@mcast2}}, 0xe8)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x242880, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=fscache,version=9p2000.u,pri\x00\x00\x00\x00\x00\x00\x00\x00devmap,loose,\x00osixacl,access=', @ANYRESDEC, @ANYBLOB=',access=any,cache=none,subj_role=,smackfsroot=,fsname=\\,smackfshat=,(^\\)\a^,hash,smackfsfloor=^#\",func=FIRMWARE_CHECK,\x00'])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0)

03:03:19 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x88, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @remote}, [{0x2, 0xe, "c4d412f9f786c294369e5442ebe7779dcbfc9eff2bc7898319030334e8f0512d0e81eeb392bf5f0ee7c48198dec07d8c2f6e761e09e85e70ef63d109faf79fdb443c40591572f02a0a386b13ab57d8b6ec247f46cd3d5bd710c342c5327911e4b587aba0b04e11105c55e5c74dd8"}]}}}}}}, 0x0)

03:03:19 executing program 6:
r0 = getpid()
pidfd_open(r0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0x1240, 0x8, 0x2, 0xc1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000200))
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r1, 0x10000000)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x43, &(0x7f0000000140)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{}, 0x0, @in6=@mcast2}}, 0xe8)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x242880, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=fscache,version=9p2000.u,pri\x00\x00\x00\x00\x00\x00\x00\x00devmap,loose,\x00osixacl,access=', @ANYRESDEC, @ANYBLOB=',access=any,cache=none,subj_role=,smackfsroot=,fsname=\\,smackfshat=,(^\\)\a^,hash,smackfsfloor=^#\",func=FIRMWARE_CHECK,\x00'])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0)

03:03:19 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x80901)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0x80000001})

03:03:19 executing program 3:
syz_emit_ethernet(0x48, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x12, 0x3a, 0xff, @local, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}]}}}}}}, 0x0)

03:03:19 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0)
ioctl$FITRIM(r0, 0x80086601, &(0x7f0000000000))

03:03:19 executing program 1:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = timerfd_create(0x0, 0x80800)
timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
read(r0, &(0x7f0000000080)=""/19, 0x13)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0)

03:03:19 executing program 4:
r0 = getpid()
pidfd_open(r0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0x1240, 0x8, 0x2, 0xc1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000200))
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r1, 0x10000000)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x43, &(0x7f0000000140)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{}, 0x0, @in6=@mcast2}}, 0xe8)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x242880, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=fscache,version=9p2000.u,pri\x00\x00\x00\x00\x00\x00\x00\x00devmap,loose,\x00osixacl,access=', @ANYRESDEC, @ANYBLOB=',access=any,cache=none,subj_role=,smackfsroot=,fsname=\\,smackfshat=,(^\\)\a^,hash,smackfsfloor=^#\",func=FIRMWARE_CHECK,\x00'])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0)

03:03:19 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x80901)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0x80000001})

03:03:19 executing program 3:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = timerfd_create(0x0, 0x80800)
timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
read(r0, &(0x7f0000000080)=""/19, 0x13)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0)

03:03:19 executing program 1:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = timerfd_create(0x0, 0x80800)
timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
read(r0, &(0x7f0000000080)=""/19, 0x13)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0)

03:03:19 executing program 4:
r0 = getpid()
pidfd_open(r0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0x1240, 0x8, 0x2, 0xc1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000200))
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r1, 0x10000000)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x43, &(0x7f0000000140)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{}, 0x0, @in6=@mcast2}}, 0xe8)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x242880, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=fscache,version=9p2000.u,pri\x00\x00\x00\x00\x00\x00\x00\x00devmap,loose,\x00osixacl,access=', @ANYRESDEC, @ANYBLOB=',access=any,cache=none,subj_role=,smackfsroot=,fsname=\\,smackfshat=,(^\\)\a^,hash,smackfsfloor=^#\",func=FIRMWARE_CHECK,\x00'])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0)

03:03:19 executing program 7:
r0 = getpid()
pidfd_open(r0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0x1240, 0x8, 0x2, 0xc1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000200))
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r1, 0x10000000)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x43, &(0x7f0000000140)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{}, 0x0, @in6=@mcast2}}, 0xe8)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x242880, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=fscache,version=9p2000.u,pri\x00\x00\x00\x00\x00\x00\x00\x00devmap,loose,\x00osixacl,access=', @ANYRESDEC, @ANYBLOB=',access=any,cache=none,subj_role=,smackfsroot=,fsname=\\,smackfshat=,(^\\)\a^,hash,smackfsfloor=^#\",func=FIRMWARE_CHECK,\x00'])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0)

03:03:19 executing program 0:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = timerfd_create(0x0, 0x80800)
timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
read(r0, &(0x7f0000000080)=""/19, 0x13)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0)

03:03:19 executing program 2:
r0 = getpid()
pidfd_open(r0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0x1240, 0x8, 0x2, 0xc1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000200))
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r1, 0x10000000)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x43, &(0x7f0000000140)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{}, 0x0, @in6=@mcast2}}, 0xe8)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x242880, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=fscache,version=9p2000.u,pri\x00\x00\x00\x00\x00\x00\x00\x00devmap,loose,\x00osixacl,access=', @ANYRESDEC, @ANYBLOB=',access=any,cache=none,subj_role=,smackfsroot=,fsname=\\,smackfshat=,(^\\)\a^,hash,smackfsfloor=^#\",func=FIRMWARE_CHECK,\x00'])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0)

03:03:19 executing program 6:
r0 = getpid()
pidfd_open(r0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0x1240, 0x8, 0x2, 0xc1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000200))
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r1, 0x10000000)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x43, &(0x7f0000000140)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{}, 0x0, @in6=@mcast2}}, 0xe8)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x242880, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=fscache,version=9p2000.u,pri\x00\x00\x00\x00\x00\x00\x00\x00devmap,loose,\x00osixacl,access=', @ANYRESDEC, @ANYBLOB=',access=any,cache=none,subj_role=,smackfsroot=,fsname=\\,smackfshat=,(^\\)\a^,hash,smackfsfloor=^#\",func=FIRMWARE_CHECK,\x00'])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0)

03:03:19 executing program 5:
r0 = getpid()
pidfd_open(r0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0x1240, 0x8, 0x2, 0xc1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000200))
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r1, 0x10000000)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x43, &(0x7f0000000140)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{}, 0x0, @in6=@mcast2}}, 0xe8)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x242880, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=fscache,version=9p2000.u,pri\x00\x00\x00\x00\x00\x00\x00\x00devmap,loose,\x00osixacl,access=', @ANYRESDEC, @ANYBLOB=',access=any,cache=none,subj_role=,smackfsroot=,fsname=\\,smackfshat=,(^\\)\a^,hash,smackfsfloor=^#\",func=FIRMWARE_CHECK,\x00'])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0)

03:03:19 executing program 2:
r0 = getpid()
pidfd_open(r0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0x1240, 0x8, 0x2, 0xc1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000200))
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r1, 0x10000000)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x43, &(0x7f0000000140)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{}, 0x0, @in6=@mcast2}}, 0xe8)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x242880, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=fscache,version=9p2000.u,pri\x00\x00\x00\x00\x00\x00\x00\x00devmap,loose,\x00osixacl,access=', @ANYRESDEC, @ANYBLOB=',access=any,cache=none,subj_role=,smackfsroot=,fsname=\\,smackfshat=,(^\\)\a^,hash,smackfsfloor=^#\",func=FIRMWARE_CHECK,\x00'])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0)

03:03:19 executing program 5:
r0 = getpid()
pidfd_open(r0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0x1240, 0x8, 0x2, 0xc1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000200))
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r1, 0x10000000)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x43, &(0x7f0000000140)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{}, 0x0, @in6=@mcast2}}, 0xe8)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x242880, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=fscache,version=9p2000.u,pri\x00\x00\x00\x00\x00\x00\x00\x00devmap,loose,\x00osixacl,access=', @ANYRESDEC, @ANYBLOB=',access=any,cache=none,subj_role=,smackfsroot=,fsname=\\,smackfshat=,(^\\)\a^,hash,smackfsfloor=^#\",func=FIRMWARE_CHECK,\x00'])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0)

03:03:19 executing program 0:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = timerfd_create(0x0, 0x80800)
timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
read(r0, &(0x7f0000000080)=""/19, 0x13)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0)

03:03:19 executing program 3:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = timerfd_create(0x0, 0x80800)
timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
read(r0, &(0x7f0000000080)=""/19, 0x13)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0)

03:03:19 executing program 4:
r0 = getpid()
pidfd_open(r0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0x1240, 0x8, 0x2, 0xc1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000200))
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r1, 0x10000000)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x43, &(0x7f0000000140)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{}, 0x0, @in6=@mcast2}}, 0xe8)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x242880, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=fscache,version=9p2000.u,pri\x00\x00\x00\x00\x00\x00\x00\x00devmap,loose,\x00osixacl,access=', @ANYRESDEC, @ANYBLOB=',access=any,cache=none,subj_role=,smackfsroot=,fsname=\\,smackfshat=,(^\\)\a^,hash,smackfsfloor=^#\",func=FIRMWARE_CHECK,\x00'])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0)

03:03:19 executing program 1:
r0 = getpid()
pidfd_open(r0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0x1240, 0x8, 0x2, 0xc1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000200))
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r1, 0x10000000)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x43, &(0x7f0000000140)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{}, 0x0, @in6=@mcast2}}, 0xe8)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x242880, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=fscache,version=9p2000.u,pri\x00\x00\x00\x00\x00\x00\x00\x00devmap,loose,\x00osixacl,access=', @ANYRESDEC, @ANYBLOB=',access=any,cache=none,subj_role=,smackfsroot=,fsname=\\,smackfshat=,(^\\)\a^,hash,smackfsfloor=^#\",func=FIRMWARE_CHECK,\x00'])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0)

03:03:20 executing program 6:
r0 = getpid()
pidfd_open(r0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0x1240, 0x8, 0x2, 0xc1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000200))
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r1, 0x10000000)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x43, &(0x7f0000000140)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{}, 0x0, @in6=@mcast2}}, 0xe8)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x242880, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=fscache,version=9p2000.u,pri\x00\x00\x00\x00\x00\x00\x00\x00devmap,loose,\x00osixacl,access=', @ANYRESDEC, @ANYBLOB=',access=any,cache=none,subj_role=,smackfsroot=,fsname=\\,smackfshat=,(^\\)\a^,hash,smackfsfloor=^#\",func=FIRMWARE_CHECK,\x00'])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0)

03:03:20 executing program 5:
r0 = getpid()
pidfd_open(r0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0x1240, 0x8, 0x2, 0xc1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000200))
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r1, 0x10000000)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x43, &(0x7f0000000140)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{}, 0x0, @in6=@mcast2}}, 0xe8)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x242880, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=fscache,version=9p2000.u,pri\x00\x00\x00\x00\x00\x00\x00\x00devmap,loose,\x00osixacl,access=', @ANYRESDEC, @ANYBLOB=',access=any,cache=none,subj_role=,smackfsroot=,fsname=\\,smackfshat=,(^\\)\a^,hash,smackfsfloor=^#\",func=FIRMWARE_CHECK,\x00'])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0)

03:03:20 executing program 0:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = timerfd_create(0x0, 0x80800)
timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
read(r0, &(0x7f0000000080)=""/19, 0x13)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0)

03:03:20 executing program 2:
r0 = getpid()
pidfd_open(r0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0x1240, 0x8, 0x2, 0xc1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000200))
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r1, 0x10000000)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x43, &(0x7f0000000140)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{}, 0x0, @in6=@mcast2}}, 0xe8)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x242880, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=fscache,version=9p2000.u,pri\x00\x00\x00\x00\x00\x00\x00\x00devmap,loose,\x00osixacl,access=', @ANYRESDEC, @ANYBLOB=',access=any,cache=none,subj_role=,smackfsroot=,fsname=\\,smackfshat=,(^\\)\a^,hash,smackfsfloor=^#\",func=FIRMWARE_CHECK,\x00'])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0)

03:03:20 executing program 7:
r0 = getpid()
pidfd_open(r0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0x1240, 0x8, 0x2, 0xc1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000200))
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r1, 0x10000000)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x43, &(0x7f0000000140)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{}, 0x0, @in6=@mcast2}}, 0xe8)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x242880, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=fscache,version=9p2000.u,pri\x00\x00\x00\x00\x00\x00\x00\x00devmap,loose,\x00osixacl,access=', @ANYRESDEC, @ANYBLOB=',access=any,cache=none,subj_role=,smackfsroot=,fsname=\\,smackfshat=,(^\\)\a^,hash,smackfsfloor=^#\",func=FIRMWARE_CHECK,\x00'])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0)

03:03:20 executing program 4:
r0 = getpid()
pidfd_open(r0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0x1240, 0x8, 0x2, 0xc1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000200))
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r1, 0x10000000)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x43, &(0x7f0000000140)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{}, 0x0, @in6=@mcast2}}, 0xe8)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x242880, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=fscache,version=9p2000.u,pri\x00\x00\x00\x00\x00\x00\x00\x00devmap,loose,\x00osixacl,access=', @ANYRESDEC, @ANYBLOB=',access=any,cache=none,subj_role=,smackfsroot=,fsname=\\,smackfshat=,(^\\)\a^,hash,smackfsfloor=^#\",func=FIRMWARE_CHECK,\x00'])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0)

03:03:20 executing program 3:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = timerfd_create(0x0, 0x80800)
timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
read(r0, &(0x7f0000000080)=""/19, 0x13)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0)

03:03:20 executing program 0:
r0 = getpid()
pidfd_open(r0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0x1240, 0x8, 0x2, 0xc1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000200))
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r1, 0x10000000)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x43, &(0x7f0000000140)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{}, 0x0, @in6=@mcast2}}, 0xe8)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x242880, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=fscache,version=9p2000.u,pri\x00\x00\x00\x00\x00\x00\x00\x00devmap,loose,\x00osixacl,access=', @ANYRESDEC, @ANYBLOB=',access=any,cache=none,subj_role=,smackfsroot=,fsname=\\,smackfshat=,(^\\)\a^,hash,smackfsfloor=^#\",func=FIRMWARE_CHECK,\x00'])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0)

03:03:20 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r1, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e)
connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)

03:03:20 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x20, 0x7, 0xff, 0x39, 0x0, 0x4, 0x20, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x8}, 0x800, 0x7, 0x5, 0x4, 0x1, 0x2, 0xfc, 0x0, 0x800, 0x0, 0x80000001}, 0xffffffffffffffff, 0xb, r0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = dup(r1)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000300)={0xffffffffffffffe5, 0x2})
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x88, 0x8, 0x5d, 0x4, 0x0, 0x3, 0x10, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x44000, 0x2, 0x20, 0x4, 0x40, 0x60, 0x8, 0x0, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x3)
setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x8)
sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0)
getsockname$packet(r2, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003b00)=0x14)

03:03:20 executing program 1:
r0 = getpid()
pidfd_open(r0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0x1240, 0x8, 0x2, 0xc1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000200))
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r1, 0x10000000)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x43, &(0x7f0000000140)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{}, 0x0, @in6=@mcast2}}, 0xe8)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x242880, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=fscache,version=9p2000.u,pri\x00\x00\x00\x00\x00\x00\x00\x00devmap,loose,\x00osixacl,access=', @ANYRESDEC, @ANYBLOB=',access=any,cache=none,subj_role=,smackfsroot=,fsname=\\,smackfshat=,(^\\)\a^,hash,smackfsfloor=^#\",func=FIRMWARE_CHECK,\x00'])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0)

03:03:20 executing program 7:
r0 = getpid()
pidfd_open(r0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0x1240, 0x8, 0x2, 0xc1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000200))
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r1, 0x10000000)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x43, &(0x7f0000000140)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{}, 0x0, @in6=@mcast2}}, 0xe8)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x242880, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=fscache,version=9p2000.u,pri\x00\x00\x00\x00\x00\x00\x00\x00devmap,loose,\x00osixacl,access=', @ANYRESDEC, @ANYBLOB=',access=any,cache=none,subj_role=,smackfsroot=,fsname=\\,smackfshat=,(^\\)\a^,hash,smackfsfloor=^#\",func=FIRMWARE_CHECK,\x00'])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0)

03:03:20 executing program 2:
membarrier(0x2, 0x0)

03:03:20 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r1, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e)
connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)

03:03:20 executing program 4:
r0 = getpid()
pidfd_open(r0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x7ff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
syz_io_uring_setup(0x227d, &(0x7f0000000140)={0x0, 0x1240, 0x8, 0x2, 0xc1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000200))
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r1, 0x10000000)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x43, &(0x7f0000000140)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{}, 0x0, @in6=@mcast2}}, 0xe8)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x242880, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=fscache,version=9p2000.u,pri\x00\x00\x00\x00\x00\x00\x00\x00devmap,loose,\x00osixacl,access=', @ANYRESDEC, @ANYBLOB=',access=any,cache=none,subj_role=,smackfsroot=,fsname=\\,smackfshat=,(^\\)\a^,hash,smackfsfloor=^#\",func=FIRMWARE_CHECK,\x00'])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0)

03:03:20 executing program 2:
membarrier(0x2, 0x0)

03:03:20 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x18, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002000028020000028400001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e37313539353330323300"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000006a641059655a4e10bf1130ee7fdbd1e0010000000c00000000000000d9f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000003000000000000000", 0x40, 0x540}, {&(0x7f0000010300)="02000000030000000400000066000f000300040000000000000000000f007f5c", 0x20, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff
VM DIAGNOSIS:
03:03:14  Registers:
info registers vcpu 0
RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff823ba131 RDI=ffffffff8765a980 RBP=ffffffff8765a940 RSP=ffff88806ce09590
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000064 R11=0000000000000001
R12=0000000000000064 R13=ffffffff8765a940 R14=0000000000000010 R15=ffffffff823ba120
RIP=ffffffff823ba189 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f870a362e98 CR3=000000003fcd0000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f
YMM01=0000000000000000 0000000000000000 322e6f732e6c6462 696c2f756e672d78
YMM02=0000000000000000 0000000000000000 00322e6f732e6c64 62696c2f756e672d
YMM03=0000000000000000 0000000000000000 78756e696c2d3436 5f3638782f62696c
YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=0000000000028a6a RBX=1ffff11007f89f84 RCX=ffffc90000787000 RDX=0000000000040000
RSI=ffffffff813bb213 RDI=0000000000000005 RBP=ffff88803fc4fcc8 RSP=ffff88803fc4fc00
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=0000000000000001 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200
RIP=ffffffff813bb215 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fa6dc38a700 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9b603c16f4 CR3=00000000176fc000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 00007f9b603d0470 00007f9b603cff20
YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM03=0000000000000000 0000000000000000 756e20796d6d7564 20736e6f6974706f
YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 73253d656d616e6c 6165722073253d73
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000