Warning: Permanently added '[localhost]:39164' (ECDSA) to the list of known hosts. 2022/10/31 11:26:54 fuzzer started 2022/10/31 11:26:54 dialing manager at localhost:40945 syzkaller login: [ 45.207038] cgroup: Unknown subsys name 'net' [ 45.301798] cgroup: Unknown subsys name 'rlimit' 2022/10/31 11:27:09 syscalls: 2217 2022/10/31 11:27:09 code coverage: enabled 2022/10/31 11:27:09 comparison tracing: enabled 2022/10/31 11:27:09 extra coverage: enabled 2022/10/31 11:27:09 setuid sandbox: enabled 2022/10/31 11:27:09 namespace sandbox: enabled 2022/10/31 11:27:09 Android sandbox: enabled 2022/10/31 11:27:09 fault injection: enabled 2022/10/31 11:27:09 leak checking: enabled 2022/10/31 11:27:09 net packet injection: enabled 2022/10/31 11:27:09 net device setup: enabled 2022/10/31 11:27:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/31 11:27:09 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/31 11:27:09 USB emulation: enabled 2022/10/31 11:27:09 hci packet injection: enabled 2022/10/31 11:27:09 wifi device emulation: enabled 2022/10/31 11:27:09 802.15.4 emulation: enabled 2022/10/31 11:27:09 fetching corpus: 0, signal 0/2000 (executing program) 2022/10/31 11:27:09 fetching corpus: 50, signal 23879/27407 (executing program) 2022/10/31 11:27:09 fetching corpus: 100, signal 36732/41654 (executing program) 2022/10/31 11:27:09 fetching corpus: 150, signal 43825/50096 (executing program) 2022/10/31 11:27:09 fetching corpus: 200, signal 51837/59288 (executing program) 2022/10/31 11:27:09 fetching corpus: 250, signal 60978/69338 (executing program) 2022/10/31 11:27:10 fetching corpus: 300, signal 68836/77994 (executing program) 2022/10/31 11:27:10 fetching corpus: 350, signal 73308/83395 (executing program) 2022/10/31 11:27:10 fetching corpus: 400, signal 76591/87661 (executing program) 2022/10/31 11:27:10 fetching corpus: 450, signal 80823/92699 (executing program) 2022/10/31 11:27:10 fetching corpus: 500, signal 85886/98362 (executing program) 2022/10/31 11:27:10 fetching corpus: 550, signal 88980/102201 (executing program) 2022/10/31 11:27:10 fetching corpus: 600, signal 93526/107305 (executing program) 2022/10/31 11:27:10 fetching corpus: 650, signal 96975/111325 (executing program) 2022/10/31 11:27:11 fetching corpus: 700, signal 98879/113938 (executing program) 2022/10/31 11:27:11 fetching corpus: 750, signal 102537/117928 (executing program) 2022/10/31 11:27:11 fetching corpus: 800, signal 106942/122625 (executing program) 2022/10/31 11:27:11 fetching corpus: 850, signal 108890/125193 (executing program) 2022/10/31 11:27:11 fetching corpus: 900, signal 111973/128564 (executing program) 2022/10/31 11:27:11 fetching corpus: 950, signal 113483/130661 (executing program) 2022/10/31 11:27:11 fetching corpus: 1000, signal 116422/133782 (executing program) 2022/10/31 11:27:12 fetching corpus: 1050, signal 118791/136429 (executing program) 2022/10/31 11:27:12 fetching corpus: 1100, signal 120379/138472 (executing program) 2022/10/31 11:27:12 fetching corpus: 1150, signal 122490/140877 (executing program) 2022/10/31 11:27:12 fetching corpus: 1200, signal 124251/142979 (executing program) 2022/10/31 11:27:12 fetching corpus: 1250, signal 125931/145001 (executing program) 2022/10/31 11:27:12 fetching corpus: 1300, signal 126752/146308 (executing program) 2022/10/31 11:27:12 fetching corpus: 1350, signal 129289/148877 (executing program) 2022/10/31 11:27:13 fetching corpus: 1400, signal 130746/150624 (executing program) 2022/10/31 11:27:13 fetching corpus: 1450, signal 132475/152484 (executing program) 2022/10/31 11:27:13 fetching corpus: 1500, signal 134440/154496 (executing program) 2022/10/31 11:27:13 fetching corpus: 1550, signal 135674/155968 (executing program) 2022/10/31 11:27:13 fetching corpus: 1600, signal 136789/157351 (executing program) 2022/10/31 11:27:13 fetching corpus: 1650, signal 138487/159072 (executing program) 2022/10/31 11:27:13 fetching corpus: 1700, signal 139747/160452 (executing program) 2022/10/31 11:27:13 fetching corpus: 1750, signal 141387/162108 (executing program) 2022/10/31 11:27:14 fetching corpus: 1800, signal 143400/163953 (executing program) 2022/10/31 11:27:14 fetching corpus: 1850, signal 144953/165428 (executing program) 2022/10/31 11:27:14 fetching corpus: 1900, signal 146457/166797 (executing program) 2022/10/31 11:27:14 fetching corpus: 1950, signal 147372/167893 (executing program) 2022/10/31 11:27:14 fetching corpus: 2000, signal 148478/169067 (executing program) 2022/10/31 11:27:14 fetching corpus: 2050, signal 149135/169984 (executing program) 2022/10/31 11:27:14 fetching corpus: 2100, signal 150402/171229 (executing program) 2022/10/31 11:27:15 fetching corpus: 2150, signal 151538/172364 (executing program) 2022/10/31 11:27:15 fetching corpus: 2200, signal 153304/173825 (executing program) 2022/10/31 11:27:15 fetching corpus: 2250, signal 154530/174929 (executing program) 2022/10/31 11:27:15 fetching corpus: 2300, signal 155721/175995 (executing program) 2022/10/31 11:27:15 fetching corpus: 2350, signal 156686/176903 (executing program) 2022/10/31 11:27:15 fetching corpus: 2400, signal 157766/177845 (executing program) 2022/10/31 11:27:15 fetching corpus: 2450, signal 158748/178720 (executing program) 2022/10/31 11:27:16 fetching corpus: 2500, signal 159786/179708 (executing program) 2022/10/31 11:27:16 fetching corpus: 2550, signal 161062/180712 (executing program) 2022/10/31 11:27:16 fetching corpus: 2600, signal 162479/181760 (executing program) 2022/10/31 11:27:16 fetching corpus: 2650, signal 163308/182482 (executing program) 2022/10/31 11:27:16 fetching corpus: 2700, signal 165197/183683 (executing program) 2022/10/31 11:27:16 fetching corpus: 2750, signal 166160/184434 (executing program) 2022/10/31 11:27:16 fetching corpus: 2800, signal 167566/185388 (executing program) 2022/10/31 11:27:17 fetching corpus: 2850, signal 168494/186083 (executing program) 2022/10/31 11:27:17 fetching corpus: 2900, signal 169303/186686 (executing program) 2022/10/31 11:27:17 fetching corpus: 2950, signal 170410/187398 (executing program) 2022/10/31 11:27:17 fetching corpus: 3000, signal 171350/188037 (executing program) 2022/10/31 11:27:17 fetching corpus: 3050, signal 172206/188632 (executing program) 2022/10/31 11:27:17 fetching corpus: 3100, signal 173110/189233 (executing program) 2022/10/31 11:27:17 fetching corpus: 3150, signal 173909/189800 (executing program) 2022/10/31 11:27:18 fetching corpus: 3200, signal 175165/190478 (executing program) 2022/10/31 11:27:18 fetching corpus: 3250, signal 176232/191183 (executing program) 2022/10/31 11:27:18 fetching corpus: 3299, signal 177272/191840 (executing program) 2022/10/31 11:27:18 fetching corpus: 3349, signal 178217/192334 (executing program) 2022/10/31 11:27:18 fetching corpus: 3399, signal 179057/192770 (executing program) 2022/10/31 11:27:18 fetching corpus: 3449, signal 179817/193199 (executing program) 2022/10/31 11:27:18 fetching corpus: 3499, signal 180772/193674 (executing program) 2022/10/31 11:27:18 fetching corpus: 3549, signal 181659/194095 (executing program) 2022/10/31 11:27:19 fetching corpus: 3596, signal 182895/194603 (executing program) 2022/10/31 11:27:19 fetching corpus: 3646, signal 183359/194860 (executing program) 2022/10/31 11:27:19 fetching corpus: 3694, signal 184165/195209 (executing program) 2022/10/31 11:27:19 fetching corpus: 3743, signal 184674/195480 (executing program) 2022/10/31 11:27:19 fetching corpus: 3793, signal 186125/195965 (executing program) 2022/10/31 11:27:19 fetching corpus: 3842, signal 186849/196281 (executing program) 2022/10/31 11:27:19 fetching corpus: 3890, signal 187476/196558 (executing program) 2022/10/31 11:27:20 fetching corpus: 3937, signal 188100/196820 (executing program) 2022/10/31 11:27:20 fetching corpus: 3986, signal 188676/197047 (executing program) 2022/10/31 11:27:20 fetching corpus: 4035, signal 189777/197340 (executing program) 2022/10/31 11:27:20 fetching corpus: 4085, signal 190457/197529 (executing program) 2022/10/31 11:27:20 fetching corpus: 4135, signal 191268/197745 (executing program) 2022/10/31 11:27:20 fetching corpus: 4185, signal 191914/197938 (executing program) 2022/10/31 11:27:20 fetching corpus: 4235, signal 192755/198155 (executing program) 2022/10/31 11:27:20 fetching corpus: 4285, signal 193343/198276 (executing program) 2022/10/31 11:27:21 fetching corpus: 4335, signal 193778/198360 (executing program) 2022/10/31 11:27:21 fetching corpus: 4383, signal 194545/198490 (executing program) 2022/10/31 11:27:21 fetching corpus: 4384, signal 194546/198523 (executing program) 2022/10/31 11:27:21 fetching corpus: 4384, signal 194546/198575 (executing program) 2022/10/31 11:27:21 fetching corpus: 4384, signal 194546/198623 (executing program) 2022/10/31 11:27:21 fetching corpus: 4385, signal 194550/198666 (executing program) 2022/10/31 11:27:21 fetching corpus: 4385, signal 194550/198700 (executing program) 2022/10/31 11:27:21 fetching corpus: 4385, signal 194550/198734 (executing program) 2022/10/31 11:27:21 fetching corpus: 4385, signal 194550/198784 (executing program) 2022/10/31 11:27:21 fetching corpus: 4385, signal 194550/198824 (executing program) 2022/10/31 11:27:21 fetching corpus: 4385, signal 194550/198871 (executing program) 2022/10/31 11:27:21 fetching corpus: 4385, signal 194550/198902 (executing program) 2022/10/31 11:27:21 fetching corpus: 4385, signal 194550/198902 (executing program) 2022/10/31 11:27:24 starting 8 fuzzer processes 11:27:24 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f0000008c80)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @empty, 0xffffffc0}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)='\"!', 0x2}], 0x1}}, {{&(0x7f0000000340)=@caif=@util={0x25, "57cde1f50bce25a61185be9d6e34cee3"}, 0x80, 0x0}}], 0x2, 0x8080) 11:27:24 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) poll(&(0x7f0000000580)=[{r0, 0x4441}, {}, {}], 0x3, 0x9) 11:27:24 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0) [ 72.795594] audit: type=1400 audit(1667215644.108:6): avc: denied { execmem } for pid=282 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:27:24 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000240)=0x7, 0x3e) 11:27:24 executing program 4: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x54, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10}, @NL80211_ATTR_KEYS={0x10, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}]}]}, 0x54}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000180001fb64a044803ea5d7d00a"], 0x28}}, 0x0) 11:27:24 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0) poll(&(0x7f0000000180)=[{r0}, {r1}], 0x2, 0x9) 11:27:24 executing program 6: flock(0xffffffffffffffff, 0x3) 11:27:24 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x26e1, 0x62) gettid() syncfs(r0) [ 74.181897] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.184163] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.186258] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.190675] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.192091] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.193842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.195017] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.197099] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.223002] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.228383] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.230498] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.233155] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.235500] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.236730] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.238239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.239385] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.240726] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.241956] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.243127] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.244367] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.245752] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.247806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.248725] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.253892] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.255834] Bluetooth: hci0: HCI_REQ-0x0c1a [ 74.257048] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.258246] Bluetooth: hci2: HCI_REQ-0x0c1a [ 74.259008] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 74.261573] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.266194] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 74.267688] Bluetooth: hci1: HCI_REQ-0x0c1a [ 74.267868] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.269365] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 74.271243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.272432] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.273863] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 74.280443] Bluetooth: hci4: HCI_REQ-0x0c1a [ 74.292626] Bluetooth: hci3: HCI_REQ-0x0c1a [ 74.297008] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 74.300508] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 74.304459] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 74.305831] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 74.311465] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 74.312520] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 74.313773] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 74.314811] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 74.319063] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 74.322936] Bluetooth: hci6: HCI_REQ-0x0c1a [ 74.324282] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 74.331840] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 74.333110] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 74.340974] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 74.349445] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 74.352800] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 74.354220] Bluetooth: hci7: HCI_REQ-0x0c1a [ 74.359181] Bluetooth: hci5: HCI_REQ-0x0c1a [ 76.309767] Bluetooth: hci3: command 0x0409 tx timeout [ 76.310491] Bluetooth: hci4: command 0x0409 tx timeout [ 76.311043] Bluetooth: hci1: command 0x0409 tx timeout [ 76.311634] Bluetooth: hci2: command 0x0409 tx timeout [ 76.312216] Bluetooth: hci0: command 0x0409 tx timeout [ 76.373415] Bluetooth: hci6: command 0x0409 tx timeout [ 76.374594] Bluetooth: hci5: command 0x0409 tx timeout [ 76.375250] Bluetooth: hci7: command 0x0409 tx timeout [ 78.357400] Bluetooth: hci0: command 0x041b tx timeout [ 78.357843] Bluetooth: hci2: command 0x041b tx timeout [ 78.358211] Bluetooth: hci1: command 0x041b tx timeout [ 78.358628] Bluetooth: hci4: command 0x041b tx timeout [ 78.358999] Bluetooth: hci3: command 0x041b tx timeout [ 78.421366] Bluetooth: hci7: command 0x041b tx timeout [ 78.421804] Bluetooth: hci5: command 0x041b tx timeout [ 78.422169] Bluetooth: hci6: command 0x041b tx timeout [ 80.405455] Bluetooth: hci3: command 0x040f tx timeout [ 80.405954] Bluetooth: hci4: command 0x040f tx timeout [ 80.406445] Bluetooth: hci1: command 0x040f tx timeout [ 80.406871] Bluetooth: hci2: command 0x040f tx timeout [ 80.407349] Bluetooth: hci0: command 0x040f tx timeout [ 80.469371] Bluetooth: hci6: command 0x040f tx timeout [ 80.469818] Bluetooth: hci5: command 0x040f tx timeout [ 80.470183] Bluetooth: hci7: command 0x040f tx timeout [ 82.454406] Bluetooth: hci0: command 0x0419 tx timeout [ 82.454866] Bluetooth: hci2: command 0x0419 tx timeout [ 82.455228] Bluetooth: hci1: command 0x0419 tx timeout [ 82.455624] Bluetooth: hci4: command 0x0419 tx timeout [ 82.455981] Bluetooth: hci3: command 0x0419 tx timeout [ 82.518433] Bluetooth: hci7: command 0x0419 tx timeout [ 82.518862] Bluetooth: hci5: command 0x0419 tx timeout [ 82.519226] Bluetooth: hci6: command 0x0419 tx timeout [ 127.877176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.878251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.880613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 128.155287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.156625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.158976] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 129.516024] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 129.533669] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 129.596443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.597040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.598317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 11:28:20 executing program 4: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x54, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10}, @NL80211_ATTR_KEYS={0x10, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}]}]}, 0x54}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000180001fb64a044803ea5d7d00a"], 0x28}}, 0x0) [ 129.756131] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 129.827971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.829656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.834484] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:28:21 executing program 4: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x54, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10}, @NL80211_ATTR_KEYS={0x10, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}]}]}, 0x54}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000180001fb64a044803ea5d7d00a"], 0x28}}, 0x0) [ 129.953138] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 11:28:21 executing program 4: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x54, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10}, @NL80211_ATTR_KEYS={0x10, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}]}]}, 0x54}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000180001fb64a044803ea5d7d00a"], 0x28}}, 0x0) [ 130.157212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.158339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.160806] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 130.163389] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 130.342751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.343429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.344743] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:28:21 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/sysvipc/msg\x00', 0x0, 0x0) 11:28:21 executing program 4: r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x10) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x10) [ 130.443229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.444511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.446509] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 11:28:21 executing program 4: r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x10) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x10) 11:28:21 executing program 4: r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x10) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x10) [ 130.666767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.668035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.670328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:28:22 executing program 4: r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x10) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x10) [ 131.233478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.234886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.238454] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 131.434732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.435531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.437050] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 132.348658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.349253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.350751] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 132.400285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.401147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.402395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 132.528723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.529391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.530845] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 132.576386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.576945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.578354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 135.347582] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 135.350698] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 135.352235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 135.358156] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 135.360063] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 135.361499] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 135.366065] Bluetooth: hci1: HCI_REQ-0x0c1a [ 137.429742] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 137.431223] Bluetooth: hci1: command 0x0409 tx timeout [ 139.477422] Bluetooth: hci1: command 0x041b tx timeout [ 139.692982] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 139.695736] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 139.697019] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 139.702075] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 139.703837] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 139.705334] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 139.709424] Bluetooth: hci3: HCI_REQ-0x0c1a [ 141.525576] Bluetooth: hci1: command 0x040f tx timeout [ 141.781454] Bluetooth: hci3: command 0x0409 tx timeout [ 143.573358] Bluetooth: hci1: command 0x0419 tx timeout [ 143.829348] Bluetooth: hci3: command 0x041b tx timeout [ 145.877394] Bluetooth: hci3: command 0x040f tx timeout [ 147.925490] Bluetooth: hci3: command 0x0419 tx timeout [ 151.628567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.629161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.630880] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 151.674061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.674693] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.676126] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 152.004707] audit: type=1400 audit(1667215723.315:7): avc: denied { open } for pid=4826 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 152.006099] audit: type=1400 audit(1667215723.316:8): avc: denied { kernel } for pid=4826 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 153.678134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.680451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.690119] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.704715] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.705898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.708478] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 154.209442] hrtimer: interrupt took 29235 ns 11:28:45 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0) poll(&(0x7f0000000180)=[{r0}, {r1}], 0x2, 0x9) 11:28:45 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f0000008c80)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @empty, 0xffffffc0}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)='\"!', 0x2}], 0x1}}, {{&(0x7f0000000340)=@caif=@util={0x25, "57cde1f50bce25a61185be9d6e34cee3"}, 0x80, 0x0}}], 0x2, 0x8080) 11:28:45 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) poll(&(0x7f0000000580)=[{r0, 0x4441}, {}, {}], 0x3, 0x9) 11:28:45 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0) 11:28:45 executing program 4: syz_io_uring_setup(0x3660, &(0x7f0000000000), &(0x7f0000fee000/0x10000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000080), 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 11:28:45 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x26e1, 0x62) gettid() syncfs(r0) 11:28:45 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000240)=0x7, 0x3e) 11:28:45 executing program 6: flock(0xffffffffffffffff, 0x3) 11:28:45 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) poll(&(0x7f0000000580)=[{r0, 0x4441}, {}, {}], 0x3, 0x9) 11:28:46 executing program 6: flock(0xffffffffffffffff, 0x3) 11:28:46 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f0000008c80)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @empty, 0xffffffc0}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)='\"!', 0x2}], 0x1}}, {{&(0x7f0000000340)=@caif=@util={0x25, "57cde1f50bce25a61185be9d6e34cee3"}, 0x80, 0x0}}], 0x2, 0x8080) 11:28:46 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000240)=0x7, 0x3e) 11:28:46 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0) 11:28:46 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0) poll(&(0x7f0000000180)=[{r0}, {r1}], 0x2, 0x9) 11:28:46 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) poll(&(0x7f0000000580)=[{r0, 0x4441}, {}, {}], 0x3, 0x9) 11:28:46 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0) 11:28:46 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f0000008c80)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @empty, 0xffffffc0}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)='\"!', 0x2}], 0x1}}, {{&(0x7f0000000340)=@caif=@util={0x25, "57cde1f50bce25a61185be9d6e34cee3"}, 0x80, 0x0}}], 0x2, 0x8080) 11:28:46 executing program 6: flock(0xffffffffffffffff, 0x3) 11:28:46 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000240)=0x7, 0x3e) 11:28:46 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x26e1, 0x62) gettid() syncfs(r0) 11:28:46 executing program 4: syz_io_uring_setup(0x3660, &(0x7f0000000000), &(0x7f0000fee000/0x10000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000080), 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 11:28:46 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x26e1, 0x62) gettid() syncfs(r0) 11:28:46 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="84", 0x20000141}], 0x1, 0x0) poll(&(0x7f0000000180)=[{r0}, {r1}], 0x2, 0x9) 11:28:47 executing program 4: syz_io_uring_setup(0x3660, &(0x7f0000000000), &(0x7f0000fee000/0x10000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000080), 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 11:28:47 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$int_in(r0, 0x541b, 0x0) 11:28:47 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x26e1, 0x62) gettid() syncfs(r0) 11:28:47 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f0000000380)=""/9) read(r0, &(0x7f00000003c0)=""/4096, 0x1000) shmat(0x0, &(0x7f0000ff6000/0x1000)=nil, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0xe000)=nil, 0x5000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x5}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000300)=""/69) socket$netlink(0x10, 0x3, 0x0) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000)=0x35, 0x1000, 0x1) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 11:28:47 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) poll(&(0x7f0000000580)=[{r0, 0x4441}, {}, {}], 0x3, 0x9) 11:28:47 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x26e1, 0x62) gettid() syncfs(r0) 11:28:47 executing program 6: sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x0, &(0x7f00000005c0)) [ 156.579711] audit: type=1400 audit(1667215727.890:9): avc: denied { read } for pid=4933 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 11:28:47 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x34, &(0x7f0000000200)={0x77359400}, 0x10) 11:28:47 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) poll(&(0x7f0000000580)=[{r0, 0x4441}, {}, {}], 0x3, 0x9) [ 156.693404] Bluetooth: hci3: command 0x0405 tx timeout 11:28:48 executing program 6: sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x0, &(0x7f00000005c0)) 11:28:48 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$int_in(r0, 0x541b, 0x0) 11:28:48 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x34, &(0x7f0000000200)={0x77359400}, 0x10) [ 156.882008] BUG: unable to handle page fault for address: ffffed100fffc000 [ 156.882912] #PF: supervisor write access in kernel mode [ 156.883617] #PF: error_code(0x0002) - not-present page [ 156.884457] PGD 7ffd3067 P4D 7ffd3067 PUD 7ffd2067 PMD 7ffd1067 PTE 0 [ 156.888477] Oops: 0002 [#1] PREEMPT SMP KASAN NOPTI [ 156.889088] CPU: 1 PID: 4950 Comm: syz-executor.5 Not tainted 6.1.0-rc3-next-20221031 #1 [ 156.890229] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 156.891202] RIP: 0010:__memset+0x24/0x50 [ 156.891766] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00 [ 156.893892] RSP: 0018:ffff8880409efcc0 EFLAGS: 00010212 [ 156.894538] RAX: 0000000000000000 RBX: ffff88800bfe60c0 RCX: 1ffffe21fe6002eb [ 156.895353] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000 [ 156.896222] RBP: ffff88800c005a00 R08: 0000000000000005 R09: ffffed10017fcc18 [ 156.897064] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c005a00 [ 156.897904] R13: ffff88800bfe60c0 R14: ffffffff815f27a0 R15: 1ffff1100112601f [ 156.898761] FS: 00007fc769b00700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000 [ 156.899711] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 156.900392] CR2: ffffed100fffc000 CR3: 000000003ef8c000 CR4: 0000000000350ee0 [ 156.901226] Call Trace: [ 156.901555] [ 156.901837] kasan_unpoison+0x23/0x60 [ 156.902298] mempool_exit+0x1c2/0x330 [ 156.902804] bioset_exit+0x2c9/0x630 [ 156.903264] disk_release+0x143/0x490 [ 156.903761] ? disk_release+0x0/0x490 [ 156.904221] ? device_release+0x0/0x250 [ 156.904725] device_release+0xa2/0x250 [ 156.905194] ? device_release+0x0/0x250 [ 156.905683] kobject_put+0x173/0x280 [ 156.906137] put_device+0x1b/0x40 [ 156.906593] put_disk+0x41/0x60 [ 156.907001] loop_control_ioctl+0x4d1/0x630 [ 156.907697] ? loop_control_ioctl+0x0/0x630 [ 156.908216] ? selinux_file_ioctl+0xb1/0x270 [ 156.908860] ? loop_control_ioctl+0x0/0x630 [ 156.909412] __x64_sys_ioctl+0x19a/0x220 [ 156.909918] do_syscall_64+0x3b/0xa0 [ 156.910385] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 156.911020] RIP: 0033:0x7fc76c5abb19 [ 156.911487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 156.913601] RSP: 002b:00007fc769b00188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.914501] RAX: ffffffffffffffda RBX: 00007fc76c6bf020 RCX: 00007fc76c5abb19 [ 156.915315] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000004 [ 156.916170] RBP: 00007fc76c605f6d R08: 0000000000000000 R09: 0000000000000000 [ 156.917007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.917846] R13: 00007ffc8eee440f R14: 00007fc769b00300 R15: 0000000000022000 [ 156.918706] [ 156.918990] Modules linked in: [ 156.919383] CR2: ffffed100fffc000 [ 156.919823] ---[ end trace 0000000000000000 ]--- [ 156.920370] RIP: 0010:__memset+0x24/0x50 [ 156.920895] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00 [ 156.923015] RSP: 0018:ffff8880409efcc0 EFLAGS: 00010212 [ 156.923668] RAX: 0000000000000000 RBX: ffff88800bfe60c0 RCX: 1ffffe21fe6002eb [ 156.924501] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000 [ 156.925317] RBP: ffff88800c005a00 R08: 0000000000000005 R09: ffffed10017fcc18 [ 156.926154] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c005a00 [ 156.926996] R13: ffff88800bfe60c0 R14: ffffffff815f27a0 R15: 1ffff1100112601f [ 156.927855] FS: 00007fc769b00700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000 [ 156.928793] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 156.929483] CR2: ffffed100fffc000 CR3: 000000003ef8c000 CR4: 0000000000350ee0 11:28:48 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$int_in(r0, 0x541b, 0x0) 11:28:48 executing program 6: sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x0, &(0x7f00000005c0)) 11:28:48 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(0x0, 0x0) clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) poll(&(0x7f0000000580)=[{r0, 0x4441}, {}, {}], 0x3, 0x9) 11:28:48 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$int_in(r0, 0x541b, 0x0) 11:28:48 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x34, &(0x7f0000000200)={0x77359400}, 0x10) 11:28:48 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x26e1, 0x62) gettid() syncfs(r0) 11:28:48 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f0000000380)=""/9) read(r0, &(0x7f00000003c0)=""/4096, 0x1000) shmat(0x0, &(0x7f0000ff6000/0x1000)=nil, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0xe000)=nil, 0x5000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x5}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000300)=""/69) socket$netlink(0x10, 0x3, 0x0) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000)=0x35, 0x1000, 0x1) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 11:28:48 executing program 4: syz_io_uring_setup(0x3660, &(0x7f0000000000), &(0x7f0000fee000/0x10000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000080), 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 11:28:48 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$int_in(r0, 0x541b, 0x0) 11:28:48 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$int_in(r0, 0x541b, 0x0) 11:28:48 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x34, &(0x7f0000000200)={0x77359400}, 0x10) 11:28:48 executing program 6: sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x0, &(0x7f00000005c0)) 11:28:48 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$int_in(r0, 0x541b, 0x0) 11:28:49 executing program 3: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f0000000380)=""/9) read(r0, &(0x7f00000003c0)=""/4096, 0x1000) shmat(0x0, &(0x7f0000ff6000/0x1000)=nil, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0xe000)=nil, 0x5000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x5}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000300)=""/69) socket$netlink(0x10, 0x3, 0x0) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000)=0x35, 0x1000, 0x1) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 11:28:49 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$int_in(r0, 0x541b, 0x0) 11:28:49 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) write(r0, &(0x7f0000000200)='E', 0x100000) creat(&(0x7f0000000080)='./file1\x00', 0x0) 11:28:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x118c008, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@seclabel}, {@dont_appraise}, {@uid_gt}]}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000001940)={{0x1, 0x1, 0x18, r0, {0x8}}, './file1\x00'}) socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001580)='/proc/vmstat\x00', 0x0, 0x0) readv(r3, &(0x7f00000017c0)=[{&(0x7f00000015c0)=""/211, 0xd3}], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @initdev}, &(0x7f0000000000)=0x8a) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f00000009c0)={0x2, 0x8, @status={[0x8, 0x6, 0x9, 0x436, 0x3, 0x40]}, [0x7, 0x20, 0x7, 0x496, 0xc4, 0x0, 0x5847, 0x9, 0x1, 0x0, 0x3f, 0x2, 0x9, 0x0, 0x8, 0x89db, 0x4, 0x3, 0x2, 0x2, 0x4d8, 0x5, 0xa88, 0x0, 0x7, 0x7, 0xffffffffffffffc1, 0x3, 0x200, 0x9, 0x1b, 0x7417e126, 0x40, 0x7, 0x3f, 0x200, 0x228, 0x5, 0x3, 0xffff, 0x9, 0xd58, 0x7, 0x6c8e, 0x400, 0x80000000, 0x4, 0x3, 0xfffffffffffffcc7, 0x7, 0xffff, 0x1, 0x7, 0x2, 0x5, 0x65773ef5, 0x2e7db773, 0x80000000, 0xf07b, 0x1f, 0xfffffffffffffffe, 0xbae, 0x86, 0x7]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x4, 0x2a) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x8}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000680)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in=@private}, @in=@loopback, {@in6=@local, @in=@private}, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x134}}, 0x0) 11:28:49 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00\x85\x01\x00\x00\x00\xa4T\x1d];\xbd\xa8B\xf6[$\xb5c\x10h\xb3\xcb\xe6\xb7', 0x0) io_setup(0x5985, &(0x7f0000000080)=0x0) io_submit(r1, 0x2, &(0x7f0000000400)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffefff1f00000000}]) 11:28:49 executing program 4: clock_adjtime(0x0, &(0x7f0000000200)={0xffffffffffffffb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000000000000}) 11:28:49 executing program 4: clock_adjtime(0x0, &(0x7f0000000200)={0xffffffffffffffb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000000000000}) 11:28:50 executing program 4: clock_adjtime(0x0, &(0x7f0000000200)={0xffffffffffffffb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000000000000}) 11:28:50 executing program 4: clock_adjtime(0x0, &(0x7f0000000200)={0xffffffffffffffb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000000000000}) 11:28:50 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f0000000380)=""/9) read(r0, &(0x7f00000003c0)=""/4096, 0x1000) shmat(0x0, &(0x7f0000ff6000/0x1000)=nil, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0xe000)=nil, 0x5000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x5}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000300)=""/69) socket$netlink(0x10, 0x3, 0x0) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000)=0x35, 0x1000, 0x1) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 11:28:50 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$int_in(r0, 0x541b, 0x0) 11:28:50 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz1\x00', 0x1ff) kexec_load(0x0, 0x0, 0x0, 0x0) kexec_load(0x2, 0x6, &(0x7f00000003c0)=[{&(0x7f0000000000)="665845d064009b88f8ac06ac046d10d437ad72149c2c4c80327f3b75ea9429b6e7ae4ed2dd53db4d00381cd2bce368c42aab39926b1edb237c7d93ef5d03314b9efe8e179f751aa81acf3bc65df4e1bbc567d593de41403a2ba7746b3611923d80fee877b908add2bb61ef22c2b4083ae91f26c4fb7fe09921eb9f641b0cf15ff077c0f86a422b5d8a1549a0ea25d16412d9978708273de8d050dbfa2111d4f2515c79dc634319ee2e9638fb30c4c03158cd881db7", 0xb5, 0x5, 0xfffffffffffffffc}, {&(0x7f00000000c0)="26f68196dd05a1d00cc55af6ff064916245a0ba68d7248515257243b567bd9d706e796753fff67eb3befbec0d29a5b6da4a0cb4c30b3b425f8f2e1a4fdb7a199f055b4de47c1f1dcff243f068382e81ff02d9adb597385f3af183a9654fcd070d6a1fd0385ff468eda05fe802c2c7424eb6e2b158fd520ae7979c0ea48d903358969290a3f5e05bddacbda79eceb77e5f5172947ed33", 0x96, 0x5, 0x79c}, {&(0x7f0000000180)="2415b816d0dd69a75d4d16015ee99fe35462ce3d764b915331932f93e2c44a8ba1de15d88254ad4fcab49a529ff96d0485d217c62a08b7d01ddfc5ce343c95a606924f5ddf11c356dd976ee735b72feb7ae3bb29b26f2dd744b819c8f6277a94959e5a532726", 0x66, 0x9, 0x3}, {&(0x7f0000000200)="81c97b1535429a0477186d6ff3cd54f8c24c6ff27ec7491ed95fd98cc2c3742a8d704b4ca5ea3aad77ac598c7d271ebe454784fa69a72aa00b3a6acb65977761c01ecc9ed2c21b7e8fdb03e2909b8f46ea874dc4a14a5775f9fc0e0ef61d258f119cb9c73bdedc39820bdb1238609426c39abf051d9a0ddeeeb10d7adbfe9099a0f2f3d08d730351a251d02ac67c2ae3752c40bf7eadd2032f0a41affe7f52b3a447375146c7fdd014", 0xa9, 0x2, 0xfff}, {&(0x7f00000002c0)="74bbf6bedacc7430", 0x8, 0xf664, 0x1}, {&(0x7f0000000300)="98e31e2eede602f165abb2d8a42ca4c71ad6e641bdf6d24a48d5e91a176dd0ac7038994d9f1d19d531e2e07fa139efba23fa752fc046f28c4256fcb5951fa55b784e28070bdfc4b520686c688af104f6fcf492e0939c4bed9fd81e102abc536925068d18bc078348d6affbdecf7ae1a93499441998fcb04a004500c1a160614cfc757d03902a91f8c9c121c7a6ff5ded3628018e3bd9a4e9dca0d24ed103f6a56c5d25f7fcd8a886fcb17795f0b07bde859047dae893b2", 0xb7, 0x800, 0x6}], 0x0) 11:28:50 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$int_in(r0, 0x541b, 0x0) 11:28:50 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00\x85\x01\x00\x00\x00\xa4T\x1d];\xbd\xa8B\xf6[$\xb5c\x10h\xb3\xcb\xe6\xb7', 0x0) io_setup(0x5985, &(0x7f0000000080)=0x0) io_submit(r1, 0x2, &(0x7f0000000400)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffefff1f00000000}]) 11:28:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x118c008, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@seclabel}, {@dont_appraise}, {@uid_gt}]}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000001940)={{0x1, 0x1, 0x18, r0, {0x8}}, './file1\x00'}) socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001580)='/proc/vmstat\x00', 0x0, 0x0) readv(r3, &(0x7f00000017c0)=[{&(0x7f00000015c0)=""/211, 0xd3}], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @initdev}, &(0x7f0000000000)=0x8a) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f00000009c0)={0x2, 0x8, @status={[0x8, 0x6, 0x9, 0x436, 0x3, 0x40]}, [0x7, 0x20, 0x7, 0x496, 0xc4, 0x0, 0x5847, 0x9, 0x1, 0x0, 0x3f, 0x2, 0x9, 0x0, 0x8, 0x89db, 0x4, 0x3, 0x2, 0x2, 0x4d8, 0x5, 0xa88, 0x0, 0x7, 0x7, 0xffffffffffffffc1, 0x3, 0x200, 0x9, 0x1b, 0x7417e126, 0x40, 0x7, 0x3f, 0x200, 0x228, 0x5, 0x3, 0xffff, 0x9, 0xd58, 0x7, 0x6c8e, 0x400, 0x80000000, 0x4, 0x3, 0xfffffffffffffcc7, 0x7, 0xffff, 0x1, 0x7, 0x2, 0x5, 0x65773ef5, 0x2e7db773, 0x80000000, 0xf07b, 0x1f, 0xfffffffffffffffe, 0xbae, 0x86, 0x7]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x4, 0x2a) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x8}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000680)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in=@private}, @in=@loopback, {@in6=@local, @in=@private}, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x134}}, 0x0) 11:28:50 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) write(r0, &(0x7f0000000200)='E', 0x100000) creat(&(0x7f0000000080)='./file1\x00', 0x0) [ 159.804950] BUG: unable to handle page fault for address: ffffed100fffc000 [ 159.805511] #PF: supervisor write access in kernel mode [ 159.805926] #PF: error_code(0x0002) - not-present page [ 159.806303] PGD 7ffd3067 P4D 7ffd3067 PUD 7ffd2067 PMD 7ffd1067 PTE 0 [ 159.806807] Oops: 0002 [#2] PREEMPT SMP KASAN NOPTI [ 159.807180] CPU: 1 PID: 5037 Comm: syz-executor.5 Tainted: G D 6.1.0-rc3-next-20221031 #1 [ 159.807864] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 159.808477] RIP: 0010:__memset+0x24/0x50 [ 159.808802] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00 [ 159.810098] RSP: 0018:ffff888040917cc0 EFLAGS: 00010212 [ 159.810498] RAX: 0000000000000000 RBX: ffff88800bfe63c0 RCX: 1ffffe21fe6002f7 [ 159.811026] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000 [ 159.811551] RBP: ffff88800c005a00 R08: 0000000000000005 R09: ffffed10017fcc78 [ 159.812077] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c005a00 [ 159.812594] R13: ffff88800bfe63c0 R14: ffffffff815f27a0 R15: 1ffff11001125a1f [ 159.813109] FS: 00007fc769b21700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000 [ 159.813692] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.814126] CR2: ffffed100fffc000 CR3: 000000003d8aa000 CR4: 0000000000350ee0 [ 159.814641] Call Trace: [ 159.814839] [ 159.815013] kasan_unpoison+0x23/0x60 [ 159.815308] mempool_exit+0x1c2/0x330 [ 159.815619] bioset_exit+0x2c9/0x630 [ 159.815910] disk_release+0x143/0x490 [ 159.816207] ? disk_release+0x0/0x490 [ 159.816497] ? device_release+0x0/0x250 [ 159.816797] device_release+0xa2/0x250 [ 159.817091] ? device_release+0x0/0x250 [ 159.817388] kobject_put+0x173/0x280 [ 159.817675] put_device+0x1b/0x40 [ 159.817945] put_disk+0x41/0x60 [ 159.818208] loop_control_ioctl+0x4d1/0x630 [ 159.818534] ? loop_control_ioctl+0x0/0x630 [ 159.818857] ? selinux_file_ioctl+0xb1/0x270 [ 159.819199] ? loop_control_ioctl+0x0/0x630 [ 159.819526] __x64_sys_ioctl+0x19a/0x220 [ 159.819866] do_syscall_64+0x3b/0xa0 [ 159.820161] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 159.820542] RIP: 0033:0x7fc76c5abb19 [ 159.820820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 159.822109] RSP: 002b:00007fc769b21188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.822660] RAX: ffffffffffffffda RBX: 00007fc76c6bef60 RCX: 00007fc76c5abb19 [ 159.823170] RDX: 0000000000000002 RSI: 0000000000004c81 RDI: 0000000000000005 [ 159.823691] RBP: 00007fc76c605f6d R08: 0000000000000000 R09: 0000000000000000 [ 159.824210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.824748] R13: 00007ffc8eee440f R14: 00007fc769b21300 R15: 0000000000022000 [ 159.825289] [ 159.825471] Modules linked in: [ 159.825725] CR2: ffffed100fffc000 [ 159.825997] ---[ end trace 0000000000000000 ]--- [ 159.826350] RIP: 0010:__memset+0x24/0x50 [ 159.826678] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00 [ 159.828029] RSP: 0018:ffff8880409efcc0 EFLAGS: 00010212 [ 159.828438] RAX: 0000000000000000 RBX: ffff88800bfe60c0 RCX: 1ffffe21fe6002eb [ 159.828972] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000 [ 159.829509] RBP: ffff88800c005a00 R08: 0000000000000005 R09: ffffed10017fcc18 [ 159.830047] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c005a00 [ 159.830587] R13: ffff88800bfe60c0 R14: ffffffff815f27a0 R15: 1ffff1100112601f [ 159.831134] FS: 00007fc769b21700(0000) GS:ffff88806d100000(0000) knlGS:0000000000000000 [ 159.831735] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.832175] CR2: ffffed100fffc000 CR3: 000000003d8aa000 CR4: 0000000000350ee0 [ 159.867621] BUG: unable to handle page fault for address: ffffed100fffc000 [ 159.868672] #PF: supervisor write access in kernel mode [ 159.869449] #PF: error_code(0x0002) - not-present page [ 159.870210] PGD 7ffd3067 P4D 7ffd3067 PUD 7ffd2067 PMD 7ffd1067 PTE 0 [ 159.871178] Oops: 0002 [#3] PREEMPT SMP KASAN NOPTI [ 159.871852] CPU: 0 PID: 5018 Comm: syz-executor.3 Tainted: G D 6.1.0-rc3-next-20221031 #1 [ 159.872876] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 159.873764] RIP: 0010:__memset+0x24/0x50 [ 159.874239] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00 [ 159.876207] RSP: 0018:ffff88800dadfcc0 EFLAGS: 00010212 [ 159.876775] RAX: 0000000000000000 RBX: ffff88800bfe6240 RCX: 1ffffe21fe6002f1 [ 159.877514] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000 [ 159.878254] RBP: ffff88800c005a00 R08: 0000000000000005 R09: ffffed10017fcc48 [ 159.878996] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c005a00 [ 159.879786] R13: ffff88800bfe6240 R14: ffffffff815f27a0 R15: 1ffff11001125e1f [ 159.880558] FS: 00007f50f8c55700(0000) GS:ffff88806d000000(0000) knlGS:0000000000000000 [ 159.881406] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.882014] CR2: ffffed100fffc000 CR3: 0000000019e1e000 CR4: 0000000000350ef0 [ 159.882770] Call Trace: [ 159.883052] [ 159.883316] kasan_unpoison+0x23/0x60 [ 159.883757] mempool_exit+0x1c2/0x330 [ 159.884181] bioset_exit+0x2c9/0x630 [ 159.884603] ? _raw_spin_unlock_irq+0x1f/0x60 [ 159.885107] disk_release+0x143/0x490 [ 159.885564] ? disk_release+0x0/0x490 [ 159.885981] ? device_release+0x0/0x250 [ 159.886430] device_release+0xa2/0x250 [ 159.886851] ? device_release+0x0/0x250 [ 159.887296] kobject_put+0x173/0x280 [ 159.887719] put_device+0x1b/0x40 [ 159.888098] put_disk+0x41/0x60 [ 159.888492] loop_control_ioctl+0x4d1/0x630 [ 159.888974] ? loop_control_ioctl+0x0/0x630 [ 159.889477] ? selinux_file_ioctl+0xb1/0x270 [ 159.889971] ? loop_control_ioctl+0x0/0x630 [ 159.890461] __x64_sys_ioctl+0x19a/0x220 [ 159.890911] do_syscall_64+0x3b/0xa0 [ 159.891340] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 159.891908] RIP: 0033:0x7f50fb700b19 [ 159.892324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 159.894167] RSP: 002b:00007f50f8c55188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.894975] RAX: ffffffffffffffda RBX: 00007f50fb814020 RCX: 00007f50fb700b19 [ 159.895731] RDX: 0000000000000001 RSI: 0000000000004c81 RDI: 0000000000000005 [ 159.896486] RBP: 00007f50fb75af6d R08: 0000000000000000 R09: 0000000000000000 [ 159.897216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.897973] R13: 00007ffd1aee3e6f R14: 00007f50f8c55300 R15: 0000000000022000 [ 159.898732] [ 159.898990] Modules linked in: [ 159.899356] CR2: ffffed100fffc000 [ 159.899736] ---[ end trace 0000000000000000 ]--- [ 159.900235] RIP: 0010:__memset+0x24/0x50 [ 159.900703] Code: 90 90 90 90 90 90 0f 1f 44 00 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 48 ab 89 d1 f3 aa 4c 89 c8 e9 4d d4 12 00 66 66 2e 0f 1f 84 00 [ 159.902600] RSP: 0018:ffff8880409efcc0 EFLAGS: 00010212 [ 159.903159] RAX: 0000000000000000 RBX: ffff88800bfe60c0 RCX: 1ffffe21fe6002eb [ 159.903929] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed100fffc000 [ 159.904677] RBP: ffff88800c005a00 R08: 0000000000000005 R09: ffffed10017fcc18 [ 159.905438] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800c005a00 [ 159.906190] R13: ffff88800bfe60c0 R14: ffffffff815f27a0 R15: 1ffff1100112601f [ 159.906947] FS: 00007f50f8c55700(0000) GS:ffff88806d000000(0000) knlGS:0000000000000000 [ 159.907800] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.908432] CR2: ffffed100fffc000 CR3: 0000000019e1e000 CR4: 0000000000350ef0 11:28:51 executing program 3: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f0000000380)=""/9) read(r0, &(0x7f00000003c0)=""/4096, 0x1000) shmat(0x0, &(0x7f0000ff6000/0x1000)=nil, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0xe000)=nil, 0x5000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x5}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000300)=""/69) socket$netlink(0x10, 0x3, 0x0) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000)=0x35, 0x1000, 0x1) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 11:28:51 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00\x85\x01\x00\x00\x00\xa4T\x1d];\xbd\xa8B\xf6[$\xb5c\x10h\xb3\xcb\xe6\xb7', 0x0) io_setup(0x5985, &(0x7f0000000080)=0x0) io_submit(r1, 0x2, &(0x7f0000000400)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffefff1f00000000}]) 11:28:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) write(r0, &(0x7f0000000200)='E', 0x100000) creat(&(0x7f0000000080)='./file1\x00', 0x0) 11:28:51 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz1\x00', 0x1ff) kexec_load(0x0, 0x0, 0x0, 0x0) kexec_load(0x2, 0x6, &(0x7f00000003c0)=[{&(0x7f0000000000)="665845d064009b88f8ac06ac046d10d437ad72149c2c4c80327f3b75ea9429b6e7ae4ed2dd53db4d00381cd2bce368c42aab39926b1edb237c7d93ef5d03314b9efe8e179f751aa81acf3bc65df4e1bbc567d593de41403a2ba7746b3611923d80fee877b908add2bb61ef22c2b4083ae91f26c4fb7fe09921eb9f641b0cf15ff077c0f86a422b5d8a1549a0ea25d16412d9978708273de8d050dbfa2111d4f2515c79dc634319ee2e9638fb30c4c03158cd881db7", 0xb5, 0x5, 0xfffffffffffffffc}, {&(0x7f00000000c0)="26f68196dd05a1d00cc55af6ff064916245a0ba68d7248515257243b567bd9d706e796753fff67eb3befbec0d29a5b6da4a0cb4c30b3b425f8f2e1a4fdb7a199f055b4de47c1f1dcff243f068382e81ff02d9adb597385f3af183a9654fcd070d6a1fd0385ff468eda05fe802c2c7424eb6e2b158fd520ae7979c0ea48d903358969290a3f5e05bddacbda79eceb77e5f5172947ed33", 0x96, 0x5, 0x79c}, {&(0x7f0000000180)="2415b816d0dd69a75d4d16015ee99fe35462ce3d764b915331932f93e2c44a8ba1de15d88254ad4fcab49a529ff96d0485d217c62a08b7d01ddfc5ce343c95a606924f5ddf11c356dd976ee735b72feb7ae3bb29b26f2dd744b819c8f6277a94959e5a532726", 0x66, 0x9, 0x3}, {&(0x7f0000000200)="81c97b1535429a0477186d6ff3cd54f8c24c6ff27ec7491ed95fd98cc2c3742a8d704b4ca5ea3aad77ac598c7d271ebe454784fa69a72aa00b3a6acb65977761c01ecc9ed2c21b7e8fdb03e2909b8f46ea874dc4a14a5775f9fc0e0ef61d258f119cb9c73bdedc39820bdb1238609426c39abf051d9a0ddeeeb10d7adbfe9099a0f2f3d08d730351a251d02ac67c2ae3752c40bf7eadd2032f0a41affe7f52b3a447375146c7fdd014", 0xa9, 0x2, 0xfff}, {&(0x7f00000002c0)="74bbf6bedacc7430", 0x8, 0xf664, 0x1}, {&(0x7f0000000300)="98e31e2eede602f165abb2d8a42ca4c71ad6e641bdf6d24a48d5e91a176dd0ac7038994d9f1d19d531e2e07fa139efba23fa752fc046f28c4256fcb5951fa55b784e28070bdfc4b520686c688af104f6fcf492e0939c4bed9fd81e102abc536925068d18bc078348d6affbdecf7ae1a93499441998fcb04a004500c1a160614cfc757d03902a91f8c9c121c7a6ff5ded3628018e3bd9a4e9dca0d24ed103f6a56c5d25f7fcd8a886fcb17795f0b07bde859047dae893b2", 0xb7, 0x800, 0x6}], 0x0) 11:28:51 executing program 6: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz1\x00', 0x1ff) kexec_load(0x0, 0x0, 0x0, 0x0) kexec_load(0x2, 0x6, &(0x7f00000003c0)=[{&(0x7f0000000000)="665845d064009b88f8ac06ac046d10d437ad72149c2c4c80327f3b75ea9429b6e7ae4ed2dd53db4d00381cd2bce368c42aab39926b1edb237c7d93ef5d03314b9efe8e179f751aa81acf3bc65df4e1bbc567d593de41403a2ba7746b3611923d80fee877b908add2bb61ef22c2b4083ae91f26c4fb7fe09921eb9f641b0cf15ff077c0f86a422b5d8a1549a0ea25d16412d9978708273de8d050dbfa2111d4f2515c79dc634319ee2e9638fb30c4c03158cd881db7", 0xb5, 0x5, 0xfffffffffffffffc}, {&(0x7f00000000c0)="26f68196dd05a1d00cc55af6ff064916245a0ba68d7248515257243b567bd9d706e796753fff67eb3befbec0d29a5b6da4a0cb4c30b3b425f8f2e1a4fdb7a199f055b4de47c1f1dcff243f068382e81ff02d9adb597385f3af183a9654fcd070d6a1fd0385ff468eda05fe802c2c7424eb6e2b158fd520ae7979c0ea48d903358969290a3f5e05bddacbda79eceb77e5f5172947ed33", 0x96, 0x5, 0x79c}, {&(0x7f0000000180)="2415b816d0dd69a75d4d16015ee99fe35462ce3d764b915331932f93e2c44a8ba1de15d88254ad4fcab49a529ff96d0485d217c62a08b7d01ddfc5ce343c95a606924f5ddf11c356dd976ee735b72feb7ae3bb29b26f2dd744b819c8f6277a94959e5a532726", 0x66, 0x9, 0x3}, {&(0x7f0000000200)="81c97b1535429a0477186d6ff3cd54f8c24c6ff27ec7491ed95fd98cc2c3742a8d704b4ca5ea3aad77ac598c7d271ebe454784fa69a72aa00b3a6acb65977761c01ecc9ed2c21b7e8fdb03e2909b8f46ea874dc4a14a5775f9fc0e0ef61d258f119cb9c73bdedc39820bdb1238609426c39abf051d9a0ddeeeb10d7adbfe9099a0f2f3d08d730351a251d02ac67c2ae3752c40bf7eadd2032f0a41affe7f52b3a447375146c7fdd014", 0xa9, 0x2, 0xfff}, {&(0x7f00000002c0)="74bbf6bedacc7430", 0x8, 0xf664, 0x1}, {&(0x7f0000000300)="98e31e2eede602f165abb2d8a42ca4c71ad6e641bdf6d24a48d5e91a176dd0ac7038994d9f1d19d531e2e07fa139efba23fa752fc046f28c4256fcb5951fa55b784e28070bdfc4b520686c688af104f6fcf492e0939c4bed9fd81e102abc536925068d18bc078348d6affbdecf7ae1a93499441998fcb04a004500c1a160614cfc757d03902a91f8c9c121c7a6ff5ded3628018e3bd9a4e9dca0d24ed103f6a56c5d25f7fcd8a886fcb17795f0b07bde859047dae893b2", 0xb7, 0x800, 0x6}], 0x0) 11:28:51 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) write(r0, &(0x7f0000000200)='E', 0x100000) creat(&(0x7f0000000080)='./file1\x00', 0x0) 11:28:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x118c008, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@seclabel}, {@dont_appraise}, {@uid_gt}]}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000001940)={{0x1, 0x1, 0x18, r0, {0x8}}, './file1\x00'}) socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001580)='/proc/vmstat\x00', 0x0, 0x0) readv(r3, &(0x7f00000017c0)=[{&(0x7f00000015c0)=""/211, 0xd3}], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @initdev}, &(0x7f0000000000)=0x8a) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f00000009c0)={0x2, 0x8, @status={[0x8, 0x6, 0x9, 0x436, 0x3, 0x40]}, [0x7, 0x20, 0x7, 0x496, 0xc4, 0x0, 0x5847, 0x9, 0x1, 0x0, 0x3f, 0x2, 0x9, 0x0, 0x8, 0x89db, 0x4, 0x3, 0x2, 0x2, 0x4d8, 0x5, 0xa88, 0x0, 0x7, 0x7, 0xffffffffffffffc1, 0x3, 0x200, 0x9, 0x1b, 0x7417e126, 0x40, 0x7, 0x3f, 0x200, 0x228, 0x5, 0x3, 0xffff, 0x9, 0xd58, 0x7, 0x6c8e, 0x400, 0x80000000, 0x4, 0x3, 0xfffffffffffffcc7, 0x7, 0xffff, 0x1, 0x7, 0x2, 0x5, 0x65773ef5, 0x2e7db773, 0x80000000, 0xf07b, 0x1f, 0xfffffffffffffffe, 0xbae, 0x86, 0x7]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x4, 0x2a) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x8}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000680)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in=@private}, @in=@loopback, {@in6=@local, @in=@private}, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x134}}, 0x0) 11:28:51 executing program 5: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f0000000380)=""/9) read(r0, &(0x7f00000003c0)=""/4096, 0x1000) shmat(0x0, &(0x7f0000ff6000/0x1000)=nil, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0xe000)=nil, 0x5000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x5}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000300)=""/69) socket$netlink(0x10, 0x3, 0x0) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000)=0x35, 0x1000, 0x1) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 11:28:51 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz1\x00', 0x1ff) kexec_load(0x0, 0x0, 0x0, 0x0) kexec_load(0x2, 0x6, &(0x7f00000003c0)=[{&(0x7f0000000000)="665845d064009b88f8ac06ac046d10d437ad72149c2c4c80327f3b75ea9429b6e7ae4ed2dd53db4d00381cd2bce368c42aab39926b1edb237c7d93ef5d03314b9efe8e179f751aa81acf3bc65df4e1bbc567d593de41403a2ba7746b3611923d80fee877b908add2bb61ef22c2b4083ae91f26c4fb7fe09921eb9f641b0cf15ff077c0f86a422b5d8a1549a0ea25d16412d9978708273de8d050dbfa2111d4f2515c79dc634319ee2e9638fb30c4c03158cd881db7", 0xb5, 0x5, 0xfffffffffffffffc}, {&(0x7f00000000c0)="26f68196dd05a1d00cc55af6ff064916245a0ba68d7248515257243b567bd9d706e796753fff67eb3befbec0d29a5b6da4a0cb4c30b3b425f8f2e1a4fdb7a199f055b4de47c1f1dcff243f068382e81ff02d9adb597385f3af183a9654fcd070d6a1fd0385ff468eda05fe802c2c7424eb6e2b158fd520ae7979c0ea48d903358969290a3f5e05bddacbda79eceb77e5f5172947ed33", 0x96, 0x5, 0x79c}, {&(0x7f0000000180)="2415b816d0dd69a75d4d16015ee99fe35462ce3d764b915331932f93e2c44a8ba1de15d88254ad4fcab49a529ff96d0485d217c62a08b7d01ddfc5ce343c95a606924f5ddf11c356dd976ee735b72feb7ae3bb29b26f2dd744b819c8f6277a94959e5a532726", 0x66, 0x9, 0x3}, {&(0x7f0000000200)="81c97b1535429a0477186d6ff3cd54f8c24c6ff27ec7491ed95fd98cc2c3742a8d704b4ca5ea3aad77ac598c7d271ebe454784fa69a72aa00b3a6acb65977761c01ecc9ed2c21b7e8fdb03e2909b8f46ea874dc4a14a5775f9fc0e0ef61d258f119cb9c73bdedc39820bdb1238609426c39abf051d9a0ddeeeb10d7adbfe9099a0f2f3d08d730351a251d02ac67c2ae3752c40bf7eadd2032f0a41affe7f52b3a447375146c7fdd014", 0xa9, 0x2, 0xfff}, {&(0x7f00000002c0)="74bbf6bedacc7430", 0x8, 0xf664, 0x1}, {&(0x7f0000000300)="98e31e2eede602f165abb2d8a42ca4c71ad6e641bdf6d24a48d5e91a176dd0ac7038994d9f1d19d531e2e07fa139efba23fa752fc046f28c4256fcb5951fa55b784e28070bdfc4b520686c688af104f6fcf492e0939c4bed9fd81e102abc536925068d18bc078348d6affbdecf7ae1a93499441998fcb04a004500c1a160614cfc757d03902a91f8c9c121c7a6ff5ded3628018e3bd9a4e9dca0d24ed103f6a56c5d25f7fcd8a886fcb17795f0b07bde859047dae893b2", 0xb7, 0x800, 0x6}], 0x0) 11:28:52 executing program 6: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz1\x00', 0x1ff) kexec_load(0x0, 0x0, 0x0, 0x0) kexec_load(0x2, 0x6, &(0x7f00000003c0)=[{&(0x7f0000000000)="665845d064009b88f8ac06ac046d10d437ad72149c2c4c80327f3b75ea9429b6e7ae4ed2dd53db4d00381cd2bce368c42aab39926b1edb237c7d93ef5d03314b9efe8e179f751aa81acf3bc65df4e1bbc567d593de41403a2ba7746b3611923d80fee877b908add2bb61ef22c2b4083ae91f26c4fb7fe09921eb9f641b0cf15ff077c0f86a422b5d8a1549a0ea25d16412d9978708273de8d050dbfa2111d4f2515c79dc634319ee2e9638fb30c4c03158cd881db7", 0xb5, 0x5, 0xfffffffffffffffc}, {&(0x7f00000000c0)="26f68196dd05a1d00cc55af6ff064916245a0ba68d7248515257243b567bd9d706e796753fff67eb3befbec0d29a5b6da4a0cb4c30b3b425f8f2e1a4fdb7a199f055b4de47c1f1dcff243f068382e81ff02d9adb597385f3af183a9654fcd070d6a1fd0385ff468eda05fe802c2c7424eb6e2b158fd520ae7979c0ea48d903358969290a3f5e05bddacbda79eceb77e5f5172947ed33", 0x96, 0x5, 0x79c}, {&(0x7f0000000180)="2415b816d0dd69a75d4d16015ee99fe35462ce3d764b915331932f93e2c44a8ba1de15d88254ad4fcab49a529ff96d0485d217c62a08b7d01ddfc5ce343c95a606924f5ddf11c356dd976ee735b72feb7ae3bb29b26f2dd744b819c8f6277a94959e5a532726", 0x66, 0x9, 0x3}, {&(0x7f0000000200)="81c97b1535429a0477186d6ff3cd54f8c24c6ff27ec7491ed95fd98cc2c3742a8d704b4ca5ea3aad77ac598c7d271ebe454784fa69a72aa00b3a6acb65977761c01ecc9ed2c21b7e8fdb03e2909b8f46ea874dc4a14a5775f9fc0e0ef61d258f119cb9c73bdedc39820bdb1238609426c39abf051d9a0ddeeeb10d7adbfe9099a0f2f3d08d730351a251d02ac67c2ae3752c40bf7eadd2032f0a41affe7f52b3a447375146c7fdd014", 0xa9, 0x2, 0xfff}, {&(0x7f00000002c0)="74bbf6bedacc7430", 0x8, 0xf664, 0x1}, {&(0x7f0000000300)="98e31e2eede602f165abb2d8a42ca4c71ad6e641bdf6d24a48d5e91a176dd0ac7038994d9f1d19d531e2e07fa139efba23fa752fc046f28c4256fcb5951fa55b784e28070bdfc4b520686c688af104f6fcf492e0939c4bed9fd81e102abc536925068d18bc078348d6affbdecf7ae1a93499441998fcb04a004500c1a160614cfc757d03902a91f8c9c121c7a6ff5ded3628018e3bd9a4e9dca0d24ed103f6a56c5d25f7fcd8a886fcb17795f0b07bde859047dae893b2", 0xb7, 0x800, 0x6}], 0x0) 11:28:52 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) write(r0, &(0x7f0000000200)='E', 0x100000) creat(&(0x7f0000000080)='./file1\x00', 0x0) 11:28:52 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00\x85\x01\x00\x00\x00\xa4T\x1d];\xbd\xa8B\xf6[$\xb5c\x10h\xb3\xcb\xe6\xb7', 0x0) io_setup(0x5985, &(0x7f0000000080)=0x0) io_submit(r1, 0x2, &(0x7f0000000400)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffefff1f00000000}]) 11:28:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) write(r0, &(0x7f0000000200)='E', 0x100000) creat(&(0x7f0000000080)='./file1\x00', 0x0) 11:28:52 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz1\x00', 0x1ff) kexec_load(0x0, 0x0, 0x0, 0x0) kexec_load(0x2, 0x6, &(0x7f00000003c0)=[{&(0x7f0000000000)="665845d064009b88f8ac06ac046d10d437ad72149c2c4c80327f3b75ea9429b6e7ae4ed2dd53db4d00381cd2bce368c42aab39926b1edb237c7d93ef5d03314b9efe8e179f751aa81acf3bc65df4e1bbc567d593de41403a2ba7746b3611923d80fee877b908add2bb61ef22c2b4083ae91f26c4fb7fe09921eb9f641b0cf15ff077c0f86a422b5d8a1549a0ea25d16412d9978708273de8d050dbfa2111d4f2515c79dc634319ee2e9638fb30c4c03158cd881db7", 0xb5, 0x5, 0xfffffffffffffffc}, {&(0x7f00000000c0)="26f68196dd05a1d00cc55af6ff064916245a0ba68d7248515257243b567bd9d706e796753fff67eb3befbec0d29a5b6da4a0cb4c30b3b425f8f2e1a4fdb7a199f055b4de47c1f1dcff243f068382e81ff02d9adb597385f3af183a9654fcd070d6a1fd0385ff468eda05fe802c2c7424eb6e2b158fd520ae7979c0ea48d903358969290a3f5e05bddacbda79eceb77e5f5172947ed33", 0x96, 0x5, 0x79c}, {&(0x7f0000000180)="2415b816d0dd69a75d4d16015ee99fe35462ce3d764b915331932f93e2c44a8ba1de15d88254ad4fcab49a529ff96d0485d217c62a08b7d01ddfc5ce343c95a606924f5ddf11c356dd976ee735b72feb7ae3bb29b26f2dd744b819c8f6277a94959e5a532726", 0x66, 0x9, 0x3}, {&(0x7f0000000200)="81c97b1535429a0477186d6ff3cd54f8c24c6ff27ec7491ed95fd98cc2c3742a8d704b4ca5ea3aad77ac598c7d271ebe454784fa69a72aa00b3a6acb65977761c01ecc9ed2c21b7e8fdb03e2909b8f46ea874dc4a14a5775f9fc0e0ef61d258f119cb9c73bdedc39820bdb1238609426c39abf051d9a0ddeeeb10d7adbfe9099a0f2f3d08d730351a251d02ac67c2ae3752c40bf7eadd2032f0a41affe7f52b3a447375146c7fdd014", 0xa9, 0x2, 0xfff}, {&(0x7f00000002c0)="74bbf6bedacc7430", 0x8, 0xf664, 0x1}, {&(0x7f0000000300)="98e31e2eede602f165abb2d8a42ca4c71ad6e641bdf6d24a48d5e91a176dd0ac7038994d9f1d19d531e2e07fa139efba23fa752fc046f28c4256fcb5951fa55b784e28070bdfc4b520686c688af104f6fcf492e0939c4bed9fd81e102abc536925068d18bc078348d6affbdecf7ae1a93499441998fcb04a004500c1a160614cfc757d03902a91f8c9c121c7a6ff5ded3628018e3bd9a4e9dca0d24ed103f6a56c5d25f7fcd8a886fcb17795f0b07bde859047dae893b2", 0xb7, 0x800, 0x6}], 0x0) 11:28:52 executing program 6: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz1\x00', 0x1ff) kexec_load(0x0, 0x0, 0x0, 0x0) kexec_load(0x2, 0x6, &(0x7f00000003c0)=[{&(0x7f0000000000)="665845d064009b88f8ac06ac046d10d437ad72149c2c4c80327f3b75ea9429b6e7ae4ed2dd53db4d00381cd2bce368c42aab39926b1edb237c7d93ef5d03314b9efe8e179f751aa81acf3bc65df4e1bbc567d593de41403a2ba7746b3611923d80fee877b908add2bb61ef22c2b4083ae91f26c4fb7fe09921eb9f641b0cf15ff077c0f86a422b5d8a1549a0ea25d16412d9978708273de8d050dbfa2111d4f2515c79dc634319ee2e9638fb30c4c03158cd881db7", 0xb5, 0x5, 0xfffffffffffffffc}, {&(0x7f00000000c0)="26f68196dd05a1d00cc55af6ff064916245a0ba68d7248515257243b567bd9d706e796753fff67eb3befbec0d29a5b6da4a0cb4c30b3b425f8f2e1a4fdb7a199f055b4de47c1f1dcff243f068382e81ff02d9adb597385f3af183a9654fcd070d6a1fd0385ff468eda05fe802c2c7424eb6e2b158fd520ae7979c0ea48d903358969290a3f5e05bddacbda79eceb77e5f5172947ed33", 0x96, 0x5, 0x79c}, {&(0x7f0000000180)="2415b816d0dd69a75d4d16015ee99fe35462ce3d764b915331932f93e2c44a8ba1de15d88254ad4fcab49a529ff96d0485d217c62a08b7d01ddfc5ce343c95a606924f5ddf11c356dd976ee735b72feb7ae3bb29b26f2dd744b819c8f6277a94959e5a532726", 0x66, 0x9, 0x3}, {&(0x7f0000000200)="81c97b1535429a0477186d6ff3cd54f8c24c6ff27ec7491ed95fd98cc2c3742a8d704b4ca5ea3aad77ac598c7d271ebe454784fa69a72aa00b3a6acb65977761c01ecc9ed2c21b7e8fdb03e2909b8f46ea874dc4a14a5775f9fc0e0ef61d258f119cb9c73bdedc39820bdb1238609426c39abf051d9a0ddeeeb10d7adbfe9099a0f2f3d08d730351a251d02ac67c2ae3752c40bf7eadd2032f0a41affe7f52b3a447375146c7fdd014", 0xa9, 0x2, 0xfff}, {&(0x7f00000002c0)="74bbf6bedacc7430", 0x8, 0xf664, 0x1}, {&(0x7f0000000300)="98e31e2eede602f165abb2d8a42ca4c71ad6e641bdf6d24a48d5e91a176dd0ac7038994d9f1d19d531e2e07fa139efba23fa752fc046f28c4256fcb5951fa55b784e28070bdfc4b520686c688af104f6fcf492e0939c4bed9fd81e102abc536925068d18bc078348d6affbdecf7ae1a93499441998fcb04a004500c1a160614cfc757d03902a91f8c9c121c7a6ff5ded3628018e3bd9a4e9dca0d24ed103f6a56c5d25f7fcd8a886fcb17795f0b07bde859047dae893b2", 0xb7, 0x800, 0x6}], 0x0) 11:28:52 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz1\x00', 0x1ff) kexec_load(0x0, 0x0, 0x0, 0x0) kexec_load(0x2, 0x6, &(0x7f00000003c0)=[{&(0x7f0000000000)="665845d064009b88f8ac06ac046d10d437ad72149c2c4c80327f3b75ea9429b6e7ae4ed2dd53db4d00381cd2bce368c42aab39926b1edb237c7d93ef5d03314b9efe8e179f751aa81acf3bc65df4e1bbc567d593de41403a2ba7746b3611923d80fee877b908add2bb61ef22c2b4083ae91f26c4fb7fe09921eb9f641b0cf15ff077c0f86a422b5d8a1549a0ea25d16412d9978708273de8d050dbfa2111d4f2515c79dc634319ee2e9638fb30c4c03158cd881db7", 0xb5, 0x5, 0xfffffffffffffffc}, {&(0x7f00000000c0)="26f68196dd05a1d00cc55af6ff064916245a0ba68d7248515257243b567bd9d706e796753fff67eb3befbec0d29a5b6da4a0cb4c30b3b425f8f2e1a4fdb7a199f055b4de47c1f1dcff243f068382e81ff02d9adb597385f3af183a9654fcd070d6a1fd0385ff468eda05fe802c2c7424eb6e2b158fd520ae7979c0ea48d903358969290a3f5e05bddacbda79eceb77e5f5172947ed33", 0x96, 0x5, 0x79c}, {&(0x7f0000000180)="2415b816d0dd69a75d4d16015ee99fe35462ce3d764b915331932f93e2c44a8ba1de15d88254ad4fcab49a529ff96d0485d217c62a08b7d01ddfc5ce343c95a606924f5ddf11c356dd976ee735b72feb7ae3bb29b26f2dd744b819c8f6277a94959e5a532726", 0x66, 0x9, 0x3}, {&(0x7f0000000200)="81c97b1535429a0477186d6ff3cd54f8c24c6ff27ec7491ed95fd98cc2c3742a8d704b4ca5ea3aad77ac598c7d271ebe454784fa69a72aa00b3a6acb65977761c01ecc9ed2c21b7e8fdb03e2909b8f46ea874dc4a14a5775f9fc0e0ef61d258f119cb9c73bdedc39820bdb1238609426c39abf051d9a0ddeeeb10d7adbfe9099a0f2f3d08d730351a251d02ac67c2ae3752c40bf7eadd2032f0a41affe7f52b3a447375146c7fdd014", 0xa9, 0x2, 0xfff}, {&(0x7f00000002c0)="74bbf6bedacc7430", 0x8, 0xf664, 0x1}, {&(0x7f0000000300)="98e31e2eede602f165abb2d8a42ca4c71ad6e641bdf6d24a48d5e91a176dd0ac7038994d9f1d19d531e2e07fa139efba23fa752fc046f28c4256fcb5951fa55b784e28070bdfc4b520686c688af104f6fcf492e0939c4bed9fd81e102abc536925068d18bc078348d6affbdecf7ae1a93499441998fcb04a004500c1a160614cfc757d03902a91f8c9c121c7a6ff5ded3628018e3bd9a4e9dca0d24ed103f6a56c5d25f7fcd8a886fcb17795f0b07bde859047dae893b2", 0xb7, 0x800, 0x6}], 0x0) 11:28:52 executing program 3: mlock2(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) shmat(0xffffffffffffffff, &(0x7f0000fed000/0x13000)=nil, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f0000000380)=""/9) read(r0, &(0x7f00000003c0)=""/4096, 0x1000) shmat(0x0, &(0x7f0000ff6000/0x1000)=nil, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)) shmat(0xffffffffffffffff, &(0x7f0000ff2000/0xe000)=nil, 0x5000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x5}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000300)=""/69) socket$netlink(0x10, 0x3, 0x0) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000)=0x35, 0x1000, 0x1) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 11:28:52 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00\x85\x01\x00\x00\x00\xa4T\x1d];\xbd\xa8B\xf6[$\xb5c\x10h\xb3\xcb\xe6\xb7', 0x0) io_setup(0x5985, &(0x7f0000000080)=0x0) io_submit(r1, 0x2, &(0x7f0000000400)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffefff1f00000000}]) 11:28:52 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) write(r0, &(0x7f0000000200)='E', 0x100000) creat(&(0x7f0000000080)='./file1\x00', 0x0) 11:28:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x118c008, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@seclabel}, {@dont_appraise}, {@uid_gt}]}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000001940)={{0x1, 0x1, 0x18, r0, {0x8}}, './file1\x00'}) socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001580)='/proc/vmstat\x00', 0x0, 0x0) readv(r3, &(0x7f00000017c0)=[{&(0x7f00000015c0)=""/211, 0xd3}], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @initdev}, &(0x7f0000000000)=0x8a) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f00000009c0)={0x2, 0x8, @status={[0x8, 0x6, 0x9, 0x436, 0x3, 0x40]}, [0x7, 0x20, 0x7, 0x496, 0xc4, 0x0, 0x5847, 0x9, 0x1, 0x0, 0x3f, 0x2, 0x9, 0x0, 0x8, 0x89db, 0x4, 0x3, 0x2, 0x2, 0x4d8, 0x5, 0xa88, 0x0, 0x7, 0x7, 0xffffffffffffffc1, 0x3, 0x200, 0x9, 0x1b, 0x7417e126, 0x40, 0x7, 0x3f, 0x200, 0x228, 0x5, 0x3, 0xffff, 0x9, 0xd58, 0x7, 0x6c8e, 0x400, 0x80000000, 0x4, 0x3, 0xfffffffffffffcc7, 0x7, 0xffff, 0x1, 0x7, 0x2, 0x5, 0x65773ef5, 0x2e7db773, 0x80000000, 0xf07b, 0x1f, 0xfffffffffffffffe, 0xbae, 0x86, 0x7]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x4, 0x2a) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x8}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000680)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in=@private}, @in=@loopback, {@in6=@local, @in=@private}, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x134}}, 0x0) 11:28:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) write(r0, &(0x7f0000000200)='E', 0x100000) creat(&(0x7f0000000080)='./file1\x00', 0x0) 11:28:52 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz1\x00', 0x1ff) kexec_load(0x0, 0x0, 0x0, 0x0) kexec_load(0x2, 0x6, &(0x7f00000003c0)=[{&(0x7f0000000000)="665845d064009b88f8ac06ac046d10d437ad72149c2c4c80327f3b75ea9429b6e7ae4ed2dd53db4d00381cd2bce368c42aab39926b1edb237c7d93ef5d03314b9efe8e179f751aa81acf3bc65df4e1bbc567d593de41403a2ba7746b3611923d80fee877b908add2bb61ef22c2b4083ae91f26c4fb7fe09921eb9f641b0cf15ff077c0f86a422b5d8a1549a0ea25d16412d9978708273de8d050dbfa2111d4f2515c79dc634319ee2e9638fb30c4c03158cd881db7", 0xb5, 0x5, 0xfffffffffffffffc}, {&(0x7f00000000c0)="26f68196dd05a1d00cc55af6ff064916245a0ba68d7248515257243b567bd9d706e796753fff67eb3befbec0d29a5b6da4a0cb4c30b3b425f8f2e1a4fdb7a199f055b4de47c1f1dcff243f068382e81ff02d9adb597385f3af183a9654fcd070d6a1fd0385ff468eda05fe802c2c7424eb6e2b158fd520ae7979c0ea48d903358969290a3f5e05bddacbda79eceb77e5f5172947ed33", 0x96, 0x5, 0x79c}, {&(0x7f0000000180)="2415b816d0dd69a75d4d16015ee99fe35462ce3d764b915331932f93e2c44a8ba1de15d88254ad4fcab49a529ff96d0485d217c62a08b7d01ddfc5ce343c95a606924f5ddf11c356dd976ee735b72feb7ae3bb29b26f2dd744b819c8f6277a94959e5a532726", 0x66, 0x9, 0x3}, {&(0x7f0000000200)="81c97b1535429a0477186d6ff3cd54f8c24c6ff27ec7491ed95fd98cc2c3742a8d704b4ca5ea3aad77ac598c7d271ebe454784fa69a72aa00b3a6acb65977761c01ecc9ed2c21b7e8fdb03e2909b8f46ea874dc4a14a5775f9fc0e0ef61d258f119cb9c73bdedc39820bdb1238609426c39abf051d9a0ddeeeb10d7adbfe9099a0f2f3d08d730351a251d02ac67c2ae3752c40bf7eadd2032f0a41affe7f52b3a447375146c7fdd014", 0xa9, 0x2, 0xfff}, {&(0x7f00000002c0)="74bbf6bedacc7430", 0x8, 0xf664, 0x1}, {&(0x7f0000000300)="98e31e2eede602f165abb2d8a42ca4c71ad6e641bdf6d24a48d5e91a176dd0ac7038994d9f1d19d531e2e07fa139efba23fa752fc046f28c4256fcb5951fa55b784e28070bdfc4b520686c688af104f6fcf492e0939c4bed9fd81e102abc536925068d18bc078348d6affbdecf7ae1a93499441998fcb04a004500c1a160614cfc757d03902a91f8c9c121c7a6ff5ded3628018e3bd9a4e9dca0d24ed103f6a56c5d25f7fcd8a886fcb17795f0b07bde859047dae893b2", 0xb7, 0x800, 0x6}], 0x0) 11:28:52 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x118c008, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@seclabel}, {@dont_appraise}, {@uid_gt}]}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000001940)={{0x1, 0x1, 0x18, r0, {0x8}}, './file1\x00'}) socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001580)='/proc/vmstat\x00', 0x0, 0x0) readv(r3, &(0x7f00000017c0)=[{&(0x7f00000015c0)=""/211, 0xd3}], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @initdev}, &(0x7f0000000000)=0x8a) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f00000009c0)={0x2, 0x8, @status={[0x8, 0x6, 0x9, 0x436, 0x3, 0x40]}, [0x7, 0x20, 0x7, 0x496, 0xc4, 0x0, 0x5847, 0x9, 0x1, 0x0, 0x3f, 0x2, 0x9, 0x0, 0x8, 0x89db, 0x4, 0x3, 0x2, 0x2, 0x4d8, 0x5, 0xa88, 0x0, 0x7, 0x7, 0xffffffffffffffc1, 0x3, 0x200, 0x9, 0x1b, 0x7417e126, 0x40, 0x7, 0x3f, 0x200, 0x228, 0x5, 0x3, 0xffff, 0x9, 0xd58, 0x7, 0x6c8e, 0x400, 0x80000000, 0x4, 0x3, 0xfffffffffffffcc7, 0x7, 0xffff, 0x1, 0x7, 0x2, 0x5, 0x65773ef5, 0x2e7db773, 0x80000000, 0xf07b, 0x1f, 0xfffffffffffffffe, 0xbae, 0x86, 0x7]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x4, 0x2a) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x8}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000680)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in=@private}, @in=@loopback, {@in6=@local, @in=@private}, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x134}}, 0x0) 11:28:52 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000a80), 0x4) 11:28:52 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz1\x00', 0x1ff) kexec_load(0x0, 0x0, 0x0, 0x0) kexec_load(0x2, 0x6, &(0x7f00000003c0)=[{&(0x7f0000000000)="665845d064009b88f8ac06ac046d10d437ad72149c2c4c80327f3b75ea9429b6e7ae4ed2dd53db4d00381cd2bce368c42aab39926b1edb237c7d93ef5d03314b9efe8e179f751aa81acf3bc65df4e1bbc567d593de41403a2ba7746b3611923d80fee877b908add2bb61ef22c2b4083ae91f26c4fb7fe09921eb9f641b0cf15ff077c0f86a422b5d8a1549a0ea25d16412d9978708273de8d050dbfa2111d4f2515c79dc634319ee2e9638fb30c4c03158cd881db7", 0xb5, 0x5, 0xfffffffffffffffc}, {&(0x7f00000000c0)="26f68196dd05a1d00cc55af6ff064916245a0ba68d7248515257243b567bd9d706e796753fff67eb3befbec0d29a5b6da4a0cb4c30b3b425f8f2e1a4fdb7a199f055b4de47c1f1dcff243f068382e81ff02d9adb597385f3af183a9654fcd070d6a1fd0385ff468eda05fe802c2c7424eb6e2b158fd520ae7979c0ea48d903358969290a3f5e05bddacbda79eceb77e5f5172947ed33", 0x96, 0x5, 0x79c}, {&(0x7f0000000180)="2415b816d0dd69a75d4d16015ee99fe35462ce3d764b915331932f93e2c44a8ba1de15d88254ad4fcab49a529ff96d0485d217c62a08b7d01ddfc5ce343c95a606924f5ddf11c356dd976ee735b72feb7ae3bb29b26f2dd744b819c8f6277a94959e5a532726", 0x66, 0x9, 0x3}, {&(0x7f0000000200)="81c97b1535429a0477186d6ff3cd54f8c24c6ff27ec7491ed95fd98cc2c3742a8d704b4ca5ea3aad77ac598c7d271ebe454784fa69a72aa00b3a6acb65977761c01ecc9ed2c21b7e8fdb03e2909b8f46ea874dc4a14a5775f9fc0e0ef61d258f119cb9c73bdedc39820bdb1238609426c39abf051d9a0ddeeeb10d7adbfe9099a0f2f3d08d730351a251d02ac67c2ae3752c40bf7eadd2032f0a41affe7f52b3a447375146c7fdd014", 0xa9, 0x2, 0xfff}, {&(0x7f00000002c0)="74bbf6bedacc7430", 0x8, 0xf664, 0x1}, {&(0x7f0000000300)="98e31e2eede602f165abb2d8a42ca4c71ad6e641bdf6d24a48d5e91a176dd0ac7038994d9f1d19d531e2e07fa139efba23fa752fc046f28c4256fcb5951fa55b784e28070bdfc4b520686c688af104f6fcf492e0939c4bed9fd81e102abc536925068d18bc078348d6affbdecf7ae1a93499441998fcb04a004500c1a160614cfc757d03902a91f8c9c121c7a6ff5ded3628018e3bd9a4e9dca0d24ed103f6a56c5d25f7fcd8a886fcb17795f0b07bde859047dae893b2", 0xb7, 0x800, 0x6}], 0x0) 11:28:52 executing program 5: syz_mount_image$vfat(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0xfe2c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 11:28:52 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00\x85\x01\x00\x00\x00\xa4T\x1d];\xbd\xa8B\xf6[$\xb5c\x10h\xb3\xcb\xe6\xb7', 0x0) io_setup(0x5985, &(0x7f0000000080)=0x0) io_submit(r1, 0x2, &(0x7f0000000400)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffefff1f00000000}]) 11:28:52 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) write(r0, &(0x7f0000000200)='E', 0x100000) creat(&(0x7f0000000080)='./file1\x00', 0x0) 11:28:52 executing program 1: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9) 11:28:52 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x118c008, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@seclabel}, {@dont_appraise}, {@uid_gt}]}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000001940)={{0x1, 0x1, 0x18, r0, {0x8}}, './file1\x00'}) socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001580)='/proc/vmstat\x00', 0x0, 0x0) readv(r3, &(0x7f00000017c0)=[{&(0x7f00000015c0)=""/211, 0xd3}], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @initdev}, &(0x7f0000000000)=0x8a) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f00000009c0)={0x2, 0x8, @status={[0x8, 0x6, 0x9, 0x436, 0x3, 0x40]}, [0x7, 0x20, 0x7, 0x496, 0xc4, 0x0, 0x5847, 0x9, 0x1, 0x0, 0x3f, 0x2, 0x9, 0x0, 0x8, 0x89db, 0x4, 0x3, 0x2, 0x2, 0x4d8, 0x5, 0xa88, 0x0, 0x7, 0x7, 0xffffffffffffffc1, 0x3, 0x200, 0x9, 0x1b, 0x7417e126, 0x40, 0x7, 0x3f, 0x200, 0x228, 0x5, 0x3, 0xffff, 0x9, 0xd58, 0x7, 0x6c8e, 0x400, 0x80000000, 0x4, 0x3, 0xfffffffffffffcc7, 0x7, 0xffff, 0x1, 0x7, 0x2, 0x5, 0x65773ef5, 0x2e7db773, 0x80000000, 0xf07b, 0x1f, 0xfffffffffffffffe, 0xbae, 0x86, 0x7]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x4, 0x2a) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x8}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000680)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in=@private}, @in=@loopback, {@in6=@local, @in=@private}, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x134}}, 0x0) 11:28:53 executing program 1: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9) 11:28:53 executing program 4: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9) 11:28:53 executing program 1: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9) 11:28:53 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x118c008, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@seclabel}, {@dont_appraise}, {@uid_gt}]}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000001940)={{0x1, 0x1, 0x18, r0, {0x8}}, './file1\x00'}) socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x300) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001580)='/proc/vmstat\x00', 0x0, 0x0) readv(r3, &(0x7f00000017c0)=[{&(0x7f00000015c0)=""/211, 0xd3}], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @initdev}, &(0x7f0000000000)=0x8a) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f00000009c0)={0x2, 0x8, @status={[0x8, 0x6, 0x9, 0x436, 0x3, 0x40]}, [0x7, 0x20, 0x7, 0x496, 0xc4, 0x0, 0x5847, 0x9, 0x1, 0x0, 0x3f, 0x2, 0x9, 0x0, 0x8, 0x89db, 0x4, 0x3, 0x2, 0x2, 0x4d8, 0x5, 0xa88, 0x0, 0x7, 0x7, 0xffffffffffffffc1, 0x3, 0x200, 0x9, 0x1b, 0x7417e126, 0x40, 0x7, 0x3f, 0x200, 0x228, 0x5, 0x3, 0xffff, 0x9, 0xd58, 0x7, 0x6c8e, 0x400, 0x80000000, 0x4, 0x3, 0xfffffffffffffcc7, 0x7, 0xffff, 0x1, 0x7, 0x2, 0x5, 0x65773ef5, 0x2e7db773, 0x80000000, 0xf07b, 0x1f, 0xfffffffffffffffe, 0xbae, 0x86, 0x7]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x4, 0x2a) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x8}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000680)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in=@private}, @in=@loopback, {@in6=@local, @in=@private}, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x134}}, 0x0) 11:28:53 executing program 5: syz_mount_image$vfat(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0xfe2c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 11:28:53 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) write(r0, &(0x7f0000000200)='E', 0x100000) creat(&(0x7f0000000080)='./file1\x00', 0x0) 11:28:53 executing program 4: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9) 11:28:53 executing program 0: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9) 11:28:53 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00\x85\x01\x00\x00\x00\xa4T\x1d];\xbd\xa8B\xf6[$\xb5c\x10h\xb3\xcb\xe6\xb7', 0x0) io_setup(0x5985, &(0x7f0000000080)=0x0) io_submit(r1, 0x2, &(0x7f0000000400)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffefff1f00000000}]) 11:28:53 executing program 3: syz_mount_image$vfat(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0xfe2c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 11:28:53 executing program 4: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9) 11:28:53 executing program 1: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9) 11:28:53 executing program 0: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9) 11:28:53 executing program 5: syz_mount_image$vfat(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0xfe2c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 11:28:53 executing program 2: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9) 11:28:53 executing program 3: syz_mount_image$vfat(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0xfe2c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 11:28:53 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = epoll_create(0x8000) dup2(r0, r1) 11:28:53 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2, 0x2, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), &(0x7f0000000800)=0x0) syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x3, 0x309}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x4efe, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x8, 0x1, 0x2, 0x5, 0x0, 0x5659, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x6, 0x101}, 0x8, 0x8, 0x7, 0x8, 0x2, 0x7, 0x7, 0x0, 0x3ff, 0x0, 0x20}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x9) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0}}, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x220100, 0x1aa) syz_io_uring_submit(r1, r0, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r4, 0x0, &(0x7f0000000140)='./file0\x00', 0x100, 0x80000, 0x23456}, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) 11:28:53 executing program 5: syz_mount_image$vfat(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0xfe2c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 11:28:53 executing program 2: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9) 11:28:54 executing program 4: epoll_pwait(0xffffffffffffffff, &(0x7f0000000540)=[{}], 0x1, 0x1000, &(0x7f0000000580), 0x8) 11:28:54 executing program 0: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9) 11:28:54 executing program 7: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x8) 11:28:54 executing program 3: syz_mount_image$vfat(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0xfe2c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 11:28:54 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100), 0x0, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) 11:28:54 executing program 4: epoll_pwait(0xffffffffffffffff, &(0x7f0000000540)=[{}], 0x1, 0x1000, &(0x7f0000000580), 0x8) 11:28:54 executing program 7: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x8) 11:28:54 executing program 1: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000940), 0x82801, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5326, 0x0) 11:28:54 executing program 2: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9) 11:28:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x20000, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736602106c00080120000200004000f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000010100)='RRaA\x00'/32, 0x20, 0x800}, {&(0x7f0000010200)="0000000072724161140000000b000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010300)="601c6d6b646f736602106c00080120000200004000f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f0700000008000000090000000a000000ffffff0fffffff0f00"/64, 0x40, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f0700000008000000090000000a000000ffffff0fffffff0f00"/64, 0x40, 0x10800}, {&(0x7f0000010600)="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", 0x120, 0x11000}, {&(0x7f0000010800)="2e20202020202020202020100079e970325132510000e97032510300000000002e2e202020202020202020100079e970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200079e970325132510000e970325104001a040000", 0x80, 0x11800}, {&(0x7f0000010900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x12000}, {&(0x7f0000010e00)='syzkallers\x00'/32, 0x20, 0x12800}, {&(0x7f0000010f00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x15800}], 0x0, &(0x7f0000011000)) 11:28:54 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2, 0x2, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), &(0x7f0000000800)=0x0) syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x3, 0x309}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x4efe, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x8, 0x1, 0x2, 0x5, 0x0, 0x5659, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x6, 0x101}, 0x8, 0x8, 0x7, 0x8, 0x2, 0x7, 0x7, 0x0, 0x3ff, 0x0, 0x20}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x9) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0}}, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x220100, 0x1aa) syz_io_uring_submit(r1, r0, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r4, 0x0, &(0x7f0000000140)='./file0\x00', 0x100, 0x80000, 0x23456}, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) 11:28:54 executing program 7: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x8) 11:28:54 executing program 4: epoll_pwait(0xffffffffffffffff, &(0x7f0000000540)=[{}], 0x1, 0x1000, &(0x7f0000000580), 0x8) 11:28:54 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7c}, {0x6, 0x0, 0x0, 0x7fffffff}]}) syz_io_uring_setup(0x6d1c, &(0x7f0000001400)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001480), &(0x7f00000014c0)) 11:28:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x20000, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736602106c00080120000200004000f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000010100)='RRaA\x00'/32, 0x20, 0x800}, {&(0x7f0000010200)="0000000072724161140000000b000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010300)="601c6d6b646f736602106c00080120000200004000f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f0700000008000000090000000a000000ffffff0fffffff0f00"/64, 0x40, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f0700000008000000090000000a000000ffffff0fffffff0f00"/64, 0x40, 0x10800}, {&(0x7f0000010600)="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", 0x120, 0x11000}, {&(0x7f0000010800)="2e20202020202020202020100079e970325132510000e97032510300000000002e2e202020202020202020100079e970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200079e970325132510000e970325104001a040000", 0x80, 0x11800}, {&(0x7f0000010900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x12000}, {&(0x7f0000010e00)='syzkallers\x00'/32, 0x20, 0x12800}, {&(0x7f0000010f00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x15800}], 0x0, &(0x7f0000011000)) 11:28:54 executing program 1: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000940), 0x82801, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5326, 0x0) 11:28:54 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280)) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2}) sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) 11:28:54 executing program 7: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x8) 11:28:54 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000011300)) 11:28:54 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7c}, {0x6, 0x0, 0x0, 0x7fffffff}]}) syz_io_uring_setup(0x6d1c, &(0x7f0000001400)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001480), &(0x7f00000014c0)) 11:28:54 executing program 4: epoll_pwait(0xffffffffffffffff, &(0x7f0000000540)=[{}], 0x1, 0x1000, &(0x7f0000000580), 0x8) 11:28:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x20000, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736602106c00080120000200004000f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000010100)='RRaA\x00'/32, 0x20, 0x800}, {&(0x7f0000010200)="0000000072724161140000000b000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010300)="601c6d6b646f736602106c00080120000200004000f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f0700000008000000090000000a000000ffffff0fffffff0f00"/64, 0x40, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f0700000008000000090000000a000000ffffff0fffffff0f00"/64, 0x40, 0x10800}, {&(0x7f0000010600)="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", 0x120, 0x11000}, {&(0x7f0000010800)="2e20202020202020202020100079e970325132510000e97032510300000000002e2e202020202020202020100079e970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200079e970325132510000e970325104001a040000", 0x80, 0x11800}, {&(0x7f0000010900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x12000}, {&(0x7f0000010e00)='syzkallers\x00'/32, 0x20, 0x12800}, {&(0x7f0000010f00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x15800}], 0x0, &(0x7f0000011000)) 11:28:54 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7c}, {0x6, 0x0, 0x0, 0x7fffffff}]}) syz_io_uring_setup(0x6d1c, &(0x7f0000001400)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001480), &(0x7f00000014c0)) 11:28:54 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7c}, {0x6, 0x0, 0x0, 0x7fffffff}]}) syz_io_uring_setup(0x6d1c, &(0x7f0000001400)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001480), &(0x7f00000014c0)) 11:28:54 executing program 1: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000940), 0x82801, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5326, 0x0) 11:28:54 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2, 0x2, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), &(0x7f0000000800)=0x0) syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x3, 0x309}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x4efe, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x8, 0x1, 0x2, 0x5, 0x0, 0x5659, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x6, 0x101}, 0x8, 0x8, 0x7, 0x8, 0x2, 0x7, 0x7, 0x0, 0x3ff, 0x0, 0x20}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x9) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0}}, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x220100, 0x1aa) syz_io_uring_submit(r1, r0, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r4, 0x0, &(0x7f0000000140)='./file0\x00', 0x100, 0x80000, 0x23456}, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) 11:28:54 executing program 7: r0 = syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 11:28:54 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280)) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2}) sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) 11:28:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280)) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2}) sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) 11:28:54 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7c}, {0x6, 0x0, 0x0, 0x7fffffff}]}) syz_io_uring_setup(0x6d1c, &(0x7f0000001400)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001480), &(0x7f00000014c0)) 11:28:54 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280)) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2}) sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) 11:28:54 executing program 1: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000940), 0x82801, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5326, 0x0) 11:28:54 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7c}, {0x6, 0x0, 0x0, 0x7fffffff}]}) syz_io_uring_setup(0x6d1c, &(0x7f0000001400)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001480), &(0x7f00000014c0)) 11:28:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x20000, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736602106c00080120000200004000f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000010100)='RRaA\x00'/32, 0x20, 0x800}, {&(0x7f0000010200)="0000000072724161140000000b000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010300)="601c6d6b646f736602106c00080120000200004000f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f0700000008000000090000000a000000ffffff0fffffff0f00"/64, 0x40, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f0700000008000000090000000a000000ffffff0fffffff0f00"/64, 0x40, 0x10800}, {&(0x7f0000010600)="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", 0x120, 0x11000}, {&(0x7f0000010800)="2e20202020202020202020100079e970325132510000e97032510300000000002e2e202020202020202020100079e970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200079e970325132510000e970325104001a040000", 0x80, 0x11800}, {&(0x7f0000010900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x12000}, {&(0x7f0000010e00)='syzkallers\x00'/32, 0x20, 0x12800}, {&(0x7f0000010f00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x15800}], 0x0, &(0x7f0000011000)) 11:28:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280)) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2}) sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) 11:28:54 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7c}, {0x6, 0x0, 0x0, 0x7fffffff}]}) syz_io_uring_setup(0x6d1c, &(0x7f0000001400)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001480), &(0x7f00000014c0)) 11:28:54 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280)) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2}) sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) 11:28:55 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280)) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2}) sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) 11:28:56 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280)) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2}) sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) 11:28:56 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280)) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2}) sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) 11:28:56 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280)) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2}) sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) 11:28:56 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0xcc80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2c86, &(0x7f0000000600)={0x0, 0x0, 0x2, 0x2, 0x213}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000680), &(0x7f0000000800)=0x0) syz_io_uring_setup(0x3740, &(0x7f0000000700)={0x0, 0x573c, 0x4, 0x3, 0x309}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000340)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x20, 0x0, 0x0, 0x8}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x4efe, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x8, 0x1, 0x2, 0x5, 0x0, 0x5659, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x6, 0x101}, 0x8, 0x8, 0x7, 0x8, 0x2, 0x7, 0x7, 0x0, 0x3ff, 0x0, 0x20}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x9) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0}}, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x220100, 0x1aa) syz_io_uring_submit(r1, r0, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r4, 0x0, &(0x7f0000000140)='./file0\x00', 0x100, 0x80000, 0x23456}, 0x4) openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) 11:28:56 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280)) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2}) sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) 11:28:56 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280)) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2}) sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) 11:28:56 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280)) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2}) sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) 11:28:56 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280)) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2}) sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) 11:28:56 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000007c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @private}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0x77}, @generic={0x82, 0x2}]}}}], 0x38}}], 0x2, 0x0) 11:28:57 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000007c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @private}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0x77}, @generic={0x82, 0x2}]}}}], 0x38}}], 0x2, 0x0) 11:28:57 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280)) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2}) sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) 11:28:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280)) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2}) sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) 11:28:57 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280)) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2}) sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) 11:28:57 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280)) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2}) sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) 11:28:57 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280)) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2}) sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) 11:28:57 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000002cc0), 0xffffffffffffffff) 11:28:57 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) 11:28:57 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0x7fffffff, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x47, 0x4) 11:28:57 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000007c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @private}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0x77}, @generic={0x82, 0x2}]}}}], 0x38}}], 0x2, 0x0) 11:28:57 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @none}, 0xe) 11:28:57 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280)) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2}) sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) 11:28:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280)) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2}) sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) 11:28:57 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0x7fffffff, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x47, 0x4) 11:28:57 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0x7fffffff, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x47, 0x4) 11:28:57 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x200f, &(0x7f0000001200)={0x0, 0x9c8c, 0x0, 0x0, 0x32d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000001280)) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_enter(r0, 0xb21, 0xb770, 0x0, &(0x7f0000000000)={[0xfff]}, 0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x792a, &(0x7f0000000100)={0x0, 0x610b, 0x4, 0x2, 0x145, 0x0, r2}) sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@newae={0x50, 0x1e, 0x801, 0x0, 0x0, {{@in=@loopback}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, [@replay_val={0x10}]}, 0x50}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) 11:28:57 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000007c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @private}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0x77}, @generic={0x82, 0x2}]}}}], 0x38}}], 0x2, 0x0) 11:28:57 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0x7fffffff, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x47, 0x4) 11:28:57 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0x7fffffff, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x47, 0x4) 11:28:57 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x22, 0x0, 0x90) 11:28:57 executing program 2: r0 = syz_open_dev$rtc(&(0x7f00000007c0), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40187013, &(0x7f0000000000)={0x0, 0xfffffffe}) 11:28:57 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0x7fffffff, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x47, 0x4) 11:28:57 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x22, 0x0, 0x90) 11:28:57 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0x7fffffff, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x47, 0x4) 11:28:57 executing program 2: r0 = syz_open_dev$rtc(&(0x7f00000007c0), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40187013, &(0x7f0000000000)={0x0, 0xfffffffe}) 11:28:58 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @none}, 0xe) 11:28:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x29, 0x0, &(0x7f0000000000)=0x28) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff985, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c0}) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000440)=0x1c) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000480)={0x6, 0x3}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc) setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000180)={@multicast2, @private=0xac141400}, 0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@dev, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000000540)=0xe8) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x43, @link_local}, 0x10) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000240)={@remote, @broadcast}, 0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000040)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000004c0)={0x0, @dev, @multicast1}, &(0x7f0000000500)=0xc) 11:28:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) 11:28:58 executing program 6: syslog(0x3, &(0x7f0000000300)=""/65, 0x7ffffffff000) 11:28:58 executing program 2: r0 = syz_open_dev$rtc(&(0x7f00000007c0), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40187013, &(0x7f0000000000)={0x0, 0xfffffffe}) 11:28:58 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x22, 0x0, 0x90) 11:28:58 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) openat(0xffffffffffffff9c, 0x0, 0x0, 0xa1) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0) 11:28:58 executing program 1: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mknodat$null(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) unlinkat(r1, &(0x7f0000000180)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r2, 0x0, 0x220) 11:28:58 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x22, 0x0, 0x90) 11:28:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) 11:28:58 executing program 6: syslog(0x3, &(0x7f0000000300)=""/65, 0x7ffffffff000) VM DIAGNOSIS: 11:28:48 Registers: info registers vcpu 0 RAX=0000000000000016 RBX=ffffc90000663818 RCX=0000000000000000 RDX=1ffff110017bb3c3 RSI=ffffffff82e5c3c4 RDI=ffff88800bdd9e2a RBP=0000000000000000 RSP=ffff88800f45f020 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000018 R13=0000000000000000 R14=ffff88800ea90000 R15=ffff888015bde150 RIP=ffffffff82e5c463 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fe9d6dc8900 00000000 00000000 GS =0000 ffff88806d000000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe4111d23000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe4111d21000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1bcf71f546 CR3=000000000e22c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=a5d388e78b48d34c22522eb2b26595d1 XMM02=e923b94e756ad2485446eacc2f2cd31a XMM03=6bc5f7df01fef87879b9e07a6eb85617 XMM04=0cc26c07c9da58176b33ec087862881b XMM05=b5f5b2005e90c684634d8901be73ab11 XMM06=000a3e758e334aee738114c288df5f0c XMM07=19c46288113bf579c626b9a911a7cb99 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82451091 RDI=ffffffff879a19e0 RBP=ffffffff879a19a0 RSP=ffff8880409ef4e0 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000036 R11=0000000000000001 R12=0000000000000036 R13=ffffffff879a19a0 R14=0000000000000010 R15=ffffffff82451080 RIP=ffffffff824510e9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc769b00700 00000000 00000000 GS =0000 ffff88806d100000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe24f988f000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe24f988d000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=ffffed100fffc000 CR3=000000003ef8c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000