Warning: Permanently added '[localhost]:48017' (ECDSA) to the list of known hosts.
2021/11/08 13:38:40 fuzzer started
2021/11/08 13:38:40 dialing manager at localhost:43943
2021/11/08 13:38:53 syscalls: 2135
2021/11/08 13:38:53 code coverage: enabled
2021/11/08 13:38:53 comparison tracing: enabled
2021/11/08 13:38:53 extra coverage: enabled
2021/11/08 13:38:53 setuid sandbox: enabled
2021/11/08 13:38:53 namespace sandbox: enabled
2021/11/08 13:38:53 Android sandbox: enabled
2021/11/08 13:38:53 fault injection: enabled
2021/11/08 13:38:53 leak checking: enabled
2021/11/08 13:38:53 net packet injection: enabled
2021/11/08 13:38:53 net device setup: enabled
2021/11/08 13:38:53 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2021/11/08 13:38:53 devlink PCI setup: PCI device 0000:00:10.0 is not available
2021/11/08 13:38:53 USB emulation: enabled
2021/11/08 13:38:53 hci packet injection: enabled
2021/11/08 13:38:53 wifi device emulation: enabled
2021/11/08 13:38:53 802.15.4 emulation: enabled
2021/11/08 13:38:53 fetching corpus: 0, signal 0/2000 (executing program)
2021/11/08 13:38:53 fetching corpus: 31, signal 18960/22438 (executing program)
2021/11/08 13:38:53 fetching corpus: 80, signal 29938/34725 (executing program)
2021/11/08 13:38:53 fetching corpus: 130, signal 40043/45905 (executing program)
2021/11/08 13:38:53 fetching corpus: 180, signal 46630/53522 (executing program)
2021/11/08 13:38:53 fetching corpus: 230, signal 52157/59986 (executing program)
2021/11/08 13:38:53 fetching corpus: 280, signal 59826/68224 (executing program)
2021/11/08 13:38:54 fetching corpus: 329, signal 63134/72403 (executing program)
2021/11/08 13:38:54 fetching corpus: 379, signal 67895/77740 (executing program)
2021/11/08 13:38:54 fetching corpus: 429, signal 71898/82275 (executing program)
2021/11/08 13:38:54 fetching corpus: 479, signal 75240/86161 (executing program)
2021/11/08 13:38:54 fetching corpus: 529, signal 78036/89497 (executing program)
2021/11/08 13:38:54 fetching corpus: 578, signal 81929/93685 (executing program)
2021/11/08 13:38:54 fetching corpus: 628, signal 83960/96240 (executing program)
2021/11/08 13:38:54 fetching corpus: 678, signal 86593/99204 (executing program)
2021/11/08 13:38:55 fetching corpus: 728, signal 88753/101727 (executing program)
2021/11/08 13:38:55 fetching corpus: 776, signal 91050/104331 (executing program)
2021/11/08 13:38:55 fetching corpus: 826, signal 93033/106621 (executing program)
2021/11/08 13:38:55 fetching corpus: 876, signal 95240/109010 (executing program)
2021/11/08 13:38:55 fetching corpus: 926, signal 97046/111083 (executing program)
2021/11/08 13:38:55 fetching corpus: 976, signal 99043/113232 (executing program)
2021/11/08 13:38:56 fetching corpus: 1023, signal 101064/115408 (executing program)
2021/11/08 13:38:56 fetching corpus: 1072, signal 102140/116809 (executing program)
2021/11/08 13:38:56 fetching corpus: 1118, signal 103392/118300 (executing program)
2021/11/08 13:38:56 fetching corpus: 1168, signal 105001/119993 (executing program)
2021/11/08 13:38:56 fetching corpus: 1215, signal 106136/121358 (executing program)
2021/11/08 13:38:56 fetching corpus: 1265, signal 107705/122968 (executing program)
2021/11/08 13:38:56 fetching corpus: 1315, signal 108829/124247 (executing program)
2021/11/08 13:38:56 fetching corpus: 1365, signal 109857/125453 (executing program)
2021/11/08 13:38:56 fetching corpus: 1415, signal 110865/126602 (executing program)
2021/11/08 13:38:57 fetching corpus: 1465, signal 112111/127857 (executing program)
2021/11/08 13:38:57 fetching corpus: 1514, signal 113399/129098 (executing program)
2021/11/08 13:38:57 fetching corpus: 1564, signal 114392/130134 (executing program)
2021/11/08 13:38:57 fetching corpus: 1614, signal 115475/131239 (executing program)
2021/11/08 13:38:57 fetching corpus: 1664, signal 116961/132464 (executing program)
2021/11/08 13:38:57 fetching corpus: 1714, signal 118876/133883 (executing program)
2021/11/08 13:38:57 fetching corpus: 1761, signal 119707/134732 (executing program)
2021/11/08 13:38:57 fetching corpus: 1811, signal 120707/135620 (executing program)
2021/11/08 13:38:58 fetching corpus: 1861, signal 121758/136506 (executing program)
2021/11/08 13:38:58 fetching corpus: 1911, signal 122639/137314 (executing program)
2021/11/08 13:38:58 fetching corpus: 1961, signal 123323/137970 (executing program)
2021/11/08 13:38:58 fetching corpus: 2010, signal 124209/138691 (executing program)
2021/11/08 13:38:58 fetching corpus: 2060, signal 125253/139511 (executing program)
2021/11/08 13:38:58 fetching corpus: 2110, signal 126219/140234 (executing program)
2021/11/08 13:38:58 fetching corpus: 2160, signal 127840/141202 (executing program)
2021/11/08 13:38:59 fetching corpus: 2210, signal 128560/141810 (executing program)
2021/11/08 13:38:59 fetching corpus: 2259, signal 129149/142294 (executing program)
2021/11/08 13:38:59 fetching corpus: 2308, signal 129883/142819 (executing program)
2021/11/08 13:38:59 fetching corpus: 2358, signal 130426/143280 (executing program)
2021/11/08 13:38:59 fetching corpus: 2408, signal 131273/143862 (executing program)
2021/11/08 13:38:59 fetching corpus: 2458, signal 132088/144390 (executing program)
2021/11/08 13:38:59 fetching corpus: 2507, signal 132915/144898 (executing program)
2021/11/08 13:39:00 fetching corpus: 2556, signal 133780/145397 (executing program)
2021/11/08 13:39:00 fetching corpus: 2606, signal 134444/145797 (executing program)
2021/11/08 13:39:00 fetching corpus: 2655, signal 134957/146147 (executing program)
2021/11/08 13:39:00 fetching corpus: 2703, signal 135547/146533 (executing program)
2021/11/08 13:39:00 fetching corpus: 2753, signal 136201/146885 (executing program)
2021/11/08 13:39:00 fetching corpus: 2803, signal 136765/147207 (executing program)
2021/11/08 13:39:00 fetching corpus: 2852, signal 137776/147622 (executing program)
2021/11/08 13:39:00 fetching corpus: 2902, signal 138296/147902 (executing program)
2021/11/08 13:39:01 fetching corpus: 2952, signal 139176/148237 (executing program)
2021/11/08 13:39:01 fetching corpus: 3002, signal 140078/148588 (executing program)
2021/11/08 13:39:01 fetching corpus: 3052, signal 140631/148843 (executing program)
2021/11/08 13:39:01 fetching corpus: 3097, signal 141290/149056 (executing program)
2021/11/08 13:39:01 fetching corpus: 3147, signal 142343/149349 (executing program)
2021/11/08 13:39:01 fetching corpus: 3197, signal 143005/149533 (executing program)
2021/11/08 13:39:01 fetching corpus: 3246, signal 143478/149680 (executing program)
2021/11/08 13:39:02 fetching corpus: 3296, signal 144011/149846 (executing program)
2021/11/08 13:39:02 fetching corpus: 3344, signal 144439/149983 (executing program)
2021/11/08 13:39:02 fetching corpus: 3394, signal 144838/150094 (executing program)
2021/11/08 13:39:02 fetching corpus: 3443, signal 145192/150235 (executing program)
2021/11/08 13:39:02 fetching corpus: 3493, signal 145695/150327 (executing program)
2021/11/08 13:39:02 fetching corpus: 3543, signal 146372/150444 (executing program)
2021/11/08 13:39:02 fetching corpus: 3592, signal 147004/150541 (executing program)
2021/11/08 13:39:02 fetching corpus: 3640, signal 147424/150608 (executing program)
2021/11/08 13:39:03 fetching corpus: 3689, signal 147795/150657 (executing program)
2021/11/08 13:39:03 fetching corpus: 3739, signal 148250/150657 (executing program)
2021/11/08 13:39:03 fetching corpus: 3789, signal 148820/150657 (executing program)
2021/11/08 13:39:03 fetching corpus: 3838, signal 149373/150683 (executing program)
2021/11/08 13:39:03 fetching corpus: 3862, signal 149501/150683 (executing program)
2021/11/08 13:39:03 fetching corpus: 3862, signal 149501/150683 (executing program)
2021/11/08 13:39:05 starting 8 fuzzer processes
13:39:05 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCXONC(r0, 0x4b61, 0x2)

13:39:05 executing program 1:
prlimit64(0x0, 0x2, &(0x7f0000000040), 0x0)
mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2)

13:39:05 executing program 2:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x800001f, 0x0, 0x81})

syzkaller login: [   52.326546] audit: type=1400 audit(1636378745.893:6): avc:  denied  { execmem } for  pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
13:39:05 executing program 3:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000900)={'wpan3\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_MAX_BE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_MIN_BE={0x5}]}, 0x2c}}, 0x0)

13:39:05 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
dup2(r0, r0)

13:39:05 executing program 5:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f00000064c0)={0x0, 0x0, &(0x7f0000006480)={&(0x7f0000006440)={0x14}, 0x63}}, 0x0)

13:39:05 executing program 6:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000001740)={0x2, 0x4e21, @dev}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000001740)={0x2, 0x4e21, @empty}, 0x10)

13:39:05 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, 0x0, 0x0)

[   52.561507] cgroup: Unknown subsys name 'perf_event'
[   52.564196] cgroup: Unknown subsys name 'perf_event'
[   52.571798] cgroup: Unknown subsys name 'net_cls'
[   52.571865] cgroup: Unknown subsys name 'net_cls'
[   52.578909] cgroup: Unknown subsys name 'perf_event'
[   52.585905] cgroup: Unknown subsys name 'net_cls'
[   52.595634] cgroup: Unknown subsys name 'perf_event'
[   52.597855] cgroup: Unknown subsys name 'net_cls'
[   52.613000] cgroup: Unknown subsys name 'perf_event'
[   52.614882] cgroup: Unknown subsys name 'net_cls'
[   52.630519] cgroup: Unknown subsys name 'perf_event'
[   52.632839] cgroup: Unknown subsys name 'net_cls'
[   52.637450] cgroup: Unknown subsys name 'perf_event'
[   52.639651] cgroup: Unknown subsys name 'net_cls'
[   52.641800] cgroup: Unknown subsys name 'perf_event'
[   52.644061] cgroup: Unknown subsys name 'net_cls'
[   55.741562] Bluetooth: hci4: command 0x0409 tx timeout
[   55.742181] Bluetooth: hci0: command 0x0409 tx timeout
[   55.805149] Bluetooth: hci6: command 0x0409 tx timeout
[   55.805196] Bluetooth: hci7: command 0x0409 tx timeout
[   55.806556] Bluetooth: hci5: command 0x0409 tx timeout
[   55.807983] Bluetooth: hci2: command 0x0409 tx timeout
[   55.808579] Bluetooth: hci1: command 0x0409 tx timeout
[   55.809022] Bluetooth: hci3: command 0x0409 tx timeout
[   57.789423] Bluetooth: hci0: command 0x041b tx timeout
[   57.790660] Bluetooth: hci4: command 0x041b tx timeout
[   57.853137] Bluetooth: hci3: command 0x041b tx timeout
[   57.853152] Bluetooth: hci2: command 0x041b tx timeout
[   57.853758] Bluetooth: hci1: command 0x041b tx timeout
[   57.854649] Bluetooth: hci5: command 0x041b tx timeout
[   57.855745] Bluetooth: hci7: command 0x041b tx timeout
[   57.856557] Bluetooth: hci6: command 0x041b tx timeout
[   59.837146] Bluetooth: hci4: command 0x040f tx timeout
[   59.838238] Bluetooth: hci0: command 0x040f tx timeout
[   59.901189] Bluetooth: hci6: command 0x040f tx timeout
[   59.901867] Bluetooth: hci7: command 0x040f tx timeout
[   59.902148] Bluetooth: hci1: command 0x040f tx timeout
[   59.902503] Bluetooth: hci5: command 0x040f tx timeout
[   59.904502] Bluetooth: hci3: command 0x040f tx timeout
[   59.904605] Bluetooth: hci2: command 0x040f tx timeout
[   61.885188] Bluetooth: hci4: command 0x0419 tx timeout
[   61.886170] Bluetooth: hci0: command 0x0419 tx timeout
[   61.949159] Bluetooth: hci2: command 0x0419 tx timeout
[   61.950093] Bluetooth: hci3: command 0x0419 tx timeout
[   61.951004] Bluetooth: hci5: command 0x0419 tx timeout
[   61.953210] Bluetooth: hci1: command 0x0419 tx timeout
[   61.953768] Bluetooth: hci7: command 0x0419 tx timeout
[   61.954845] Bluetooth: hci6: command 0x0419 tx timeout
[   68.560571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.561778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.569360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.598318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.599223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.601254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.654729] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.656061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.658031] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.715422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.716405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.718869] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.733271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.734079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.737114] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.762872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.763794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.765220] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.778311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.779204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.780637] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.791820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.792746] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.794221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.838188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.839020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.841766] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.859210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.860001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.862348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.898506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.899440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.901802] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.934914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.935815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.936999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.937825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.943011] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.944496] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.959547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.960425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.962685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.091046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.091978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.093997] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
13:39:22 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
dup2(r0, r0)

[   69.138762] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.139631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.141025] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.145031] mmap: syz-executor.1 (3913): VmData 37388288 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
13:39:22 executing program 3:
syz_mount_image$vfat(&(0x7f00000059c0), &(0x7f0000005a00)='./file0\x00', 0x0, 0x0, &(0x7f0000005d00), 0x0, &(0x7f0000005d80))

13:39:22 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
dup2(r0, r0)

13:39:22 executing program 1:
prlimit64(0x0, 0x2, &(0x7f0000000040), 0x0)
mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2)

[   69.248304] FAT-fs (loop3): bogus number of reserved sectors
[   69.249064] FAT-fs (loop3): Can't find a valid FAT filesystem
[   69.263985] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=262 sclass=netlink_audit_socket pid=3928 comm=syz-executor.5
[   69.284474] FAT-fs (loop3): bogus number of reserved sectors
[   69.285394] FAT-fs (loop3): Can't find a valid FAT filesystem
13:39:22 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)
dup2(r0, r0)

[   69.347396] audit: type=1400 audit(1636378762.924:7): avc:  denied  { open } for  pid=3939 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[   69.354487] audit: type=1400 audit(1636378762.924:8): avc:  denied  { kernel } for  pid=3939 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
13:39:23 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCXONC(r0, 0x4b61, 0x2)

13:39:23 executing program 5:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f00000064c0)={0x0, 0x0, &(0x7f0000006480)={&(0x7f0000006440)={0x14}, 0x63}}, 0x0)

13:39:23 executing program 1:
prlimit64(0x0, 0x2, &(0x7f0000000040), 0x0)
mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2)

13:39:23 executing program 3:
syz_mount_image$vfat(&(0x7f00000059c0), &(0x7f0000005a00)='./file0\x00', 0x0, 0x0, &(0x7f0000005d00), 0x0, &(0x7f0000005d80))

13:39:23 executing program 4:
mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0xffffffffffffffff, r1, 0x0)
ioctl$BLKTRACETEARDOWN(r0, 0x1262, 0x0)

13:39:23 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, 0x0, 0x0)

13:39:23 executing program 6:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000001740)={0x2, 0x4e21, @dev}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000001740)={0x2, 0x4e21, @empty}, 0x10)

13:39:23 executing program 2:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x800001f, 0x0, 0x81})

[   69.532664] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=262 sclass=netlink_audit_socket pid=3959 comm=syz-executor.5
13:39:23 executing program 5:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f00000064c0)={0x0, 0x0, &(0x7f0000006480)={&(0x7f0000006440)={0x14}, 0x63}}, 0x0)

[   69.590525] FAT-fs (loop3): bogus number of reserved sectors
[   69.591248] FAT-fs (loop3): Can't find a valid FAT filesystem
13:39:23 executing program 1:
prlimit64(0x0, 0x2, &(0x7f0000000040), 0x0)
mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2)

13:39:23 executing program 1:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x1})
unlink(&(0x7f0000000100)='./file0\x00')

13:39:23 executing program 2:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x800001f, 0x0, 0x81})

13:39:23 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCXONC(r0, 0x4b61, 0x2)

13:39:23 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, 0x0, 0x0)

13:39:23 executing program 6:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000001740)={0x2, 0x4e21, @dev}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000001740)={0x2, 0x4e21, @empty}, 0x10)

[   69.653873] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=262 sclass=netlink_audit_socket pid=3973 comm=syz-executor.5
13:39:23 executing program 1:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x1})
unlink(&(0x7f0000000100)='./file0\x00')

13:39:23 executing program 4:
mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0xffffffffffffffff, r1, 0x0)
ioctl$BLKTRACETEARDOWN(r0, 0x1262, 0x0)

13:39:23 executing program 7:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, 0x0, 0x0)

13:39:23 executing program 3:
syz_mount_image$vfat(&(0x7f00000059c0), &(0x7f0000005a00)='./file0\x00', 0x0, 0x0, &(0x7f0000005d00), 0x0, &(0x7f0000005d80))

13:39:23 executing program 5:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f00000064c0)={0x0, 0x0, &(0x7f0000006480)={&(0x7f0000006440)={0x14}, 0x63}}, 0x0)

13:39:23 executing program 4:
mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0xffffffffffffffff, r1, 0x0)
ioctl$BLKTRACETEARDOWN(r0, 0x1262, 0x0)

13:39:23 executing program 6:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000001740)={0x2, 0x4e21, @dev}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000001740)={0x2, 0x4e21, @empty}, 0x10)

13:39:23 executing program 1:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x1})
unlink(&(0x7f0000000100)='./file0\x00')

13:39:23 executing program 2:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x800001f, 0x0, 0x81})

13:39:23 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCXONC(r0, 0x4b61, 0x2)

13:39:23 executing program 7:
mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0xffffffffffffffff, r1, 0x0)
ioctl$BLKTRACETEARDOWN(r0, 0x1262, 0x0)

[   69.815271] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=262 sclass=netlink_audit_socket pid=4000 comm=syz-executor.5
13:39:23 executing program 4:
mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0xffffffffffffffff, r1, 0x0)
ioctl$BLKTRACETEARDOWN(r0, 0x1262, 0x0)

13:39:23 executing program 0:
timer_create(0x3, 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_gettime(0x0, &(0x7f0000000140))

[   69.861805] FAT-fs (loop3): bogus number of reserved sectors
[   69.862523] FAT-fs (loop3): Can't find a valid FAT filesystem
13:39:23 executing program 2:
syz_open_dev$hidraw(&(0x7f0000000c00), 0x0, 0x418200)

13:39:23 executing program 7:
mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0xffffffffffffffff, r1, 0x0)
ioctl$BLKTRACETEARDOWN(r0, 0x1262, 0x0)

13:39:23 executing program 3:
syz_mount_image$vfat(&(0x7f00000059c0), &(0x7f0000005a00)='./file0\x00', 0x0, 0x0, &(0x7f0000005d00), 0x0, &(0x7f0000005d80))

13:39:23 executing program 6:
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r0, 0x107, 0xf, 0x0, &(0x7f0000000080))

[   69.987512] FAT-fs (loop3): bogus number of reserved sectors
[   69.988274] FAT-fs (loop3): Can't find a valid FAT filesystem
13:39:23 executing program 1:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x1})
unlink(&(0x7f0000000100)='./file0\x00')

13:39:23 executing program 7:
mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0xffffffffffffffff, r1, 0x0)
ioctl$BLKTRACETEARDOWN(r0, 0x1262, 0x0)

13:39:23 executing program 4:
epoll_create1(0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)

13:39:23 executing program 6:
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r0, 0x107, 0xf, 0x0, &(0x7f0000000080))

13:39:23 executing program 0:
timer_create(0x3, 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_gettime(0x0, &(0x7f0000000140))

13:39:23 executing program 2:
timer_create(0x3, 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_gettime(0x0, &(0x7f0000000140))

13:39:23 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./file0\x00', 0x20002, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, 0x0, 0x0)

13:39:23 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)

13:39:23 executing program 0:
timer_create(0x3, 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_gettime(0x0, &(0x7f0000000140))

13:39:23 executing program 4:
epoll_create1(0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)

13:39:23 executing program 6:
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r0, 0x107, 0xf, 0x0, &(0x7f0000000080))

13:39:23 executing program 2:
timer_create(0x3, 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_gettime(0x0, &(0x7f0000000140))

13:39:23 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f80100200040000000000000000000800029561eadf153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8fffffff0ffffffffffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8fffffff0ffffffffffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="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", 0x120, 0x600}, {&(0x7f0000010500)="2e2020202020202020202010007deb70325132510000eb7032510300000000002e2e20202020202020202010007deb70325132510000eb70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202020007deb70325132510000eb70325104001a040000", 0x80, 0x11400}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x21400}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x31400}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x51400}], 0x0, &(0x7f0000010d00))

13:39:23 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)

13:39:23 executing program 3:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x6000003)

13:39:23 executing program 7:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@getsa={0x28, 0x12, 0x1, 0x0, 0x0, {@in=@dev, 0x0, 0x0, 0x6c}}, 0x28}}, 0x0)

13:39:23 executing program 0:
timer_create(0x3, 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_gettime(0x0, &(0x7f0000000140))

13:39:23 executing program 4:
epoll_create1(0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)

13:39:23 executing program 6:
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r0, 0x107, 0xf, 0x0, &(0x7f0000000080))

13:39:23 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)

[   70.261929] audit: type=1400 audit(1636378763.840:9): avc:  denied  { watch_reads } for  pid=4048 comm="syz-executor.3" path="/syzkaller-testdir537176705/syzkaller.BPG3Eq/6" dev="sda" ino=15981 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1
13:39:23 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)

13:39:23 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f80100200040000000000000000000800029561eadf153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8fffffff0ffffffffffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8fffffff0ffffffffffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202010007deb70325132510000eb70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c453120202020202020007deb70325132510000eb70325105000a00000041660069006c00650032000f00140000ffffffffffffffffffff0000ffffffff46494c453220202020202020007deb70325132510000eb70325106002823000041660069006c0065002e000f00d263006f006c0064000000ffff0000ffffffff46494c457e312020434f4c20007deb70325132510000eb703251070064000000", 0x120, 0x600}, {&(0x7f0000010500)="2e2020202020202020202010007deb70325132510000eb7032510300000000002e2e20202020202020202010007deb70325132510000eb70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202020007deb70325132510000eb70325104001a040000", 0x80, 0x11400}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x21400}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x31400}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x51400}], 0x0, &(0x7f0000010d00))

13:39:23 executing program 0:
write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x7)
pipe2$9p(&(0x7f00000001c0), 0x0)

13:39:23 executing program 2:
timer_create(0x3, 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_gettime(0x0, &(0x7f0000000140))

13:39:23 executing program 4:
epoll_create1(0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)

13:39:23 executing program 7:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@getsa={0x28, 0x12, 0x1, 0x0, 0x0, {@in=@dev, 0x0, 0x0, 0x6c}}, 0x28}}, 0x0)

13:39:23 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
read(r0, &(0x7f0000000100)=""/222, 0xde)

13:39:23 executing program 6:
clone3(&(0x7f00000000c0)={0x1240100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
socketpair(0xa, 0x3, 0x0, &(0x7f0000000200))

13:39:23 executing program 5:
request_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='syz', 0x0)

13:39:23 executing program 6:
clone3(&(0x7f00000000c0)={0x1240100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
socketpair(0xa, 0x3, 0x0, &(0x7f0000000200))

13:39:24 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f80100200040000000000000000000800029561eadf153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8fffffff0ffffffffffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8fffffff0ffffffffffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202010007deb70325132510000eb70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c453120202020202020007deb70325132510000eb70325105000a00000041660069006c00650032000f00140000ffffffffffffffffffff0000ffffffff46494c453220202020202020007deb70325132510000eb70325106002823000041660069006c0065002e000f00d263006f006c0064000000ffff0000ffffffff46494c457e312020434f4c20007deb70325132510000eb703251070064000000", 0x120, 0x600}, {&(0x7f0000010500)="2e2020202020202020202010007deb70325132510000eb7032510300000000002e2e20202020202020202010007deb70325132510000eb70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202020007deb70325132510000eb70325104001a040000", 0x80, 0x11400}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x21400}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x31400}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x51400}], 0x0, &(0x7f0000010d00))

[   70.450938] audit: type=1400 audit(1636378764.029:10): avc:  denied  { read } for  pid=4079 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
13:39:24 executing program 6:
clone3(&(0x7f00000000c0)={0x1240100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
socketpair(0xa, 0x3, 0x0, &(0x7f0000000200))

13:39:24 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
read(r0, &(0x7f0000000100)=""/222, 0xde)

13:39:24 executing program 0:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
read(r0, &(0x7f0000000100)=""/222, 0xde)

13:39:24 executing program 4:
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000100)='$', 0x1}, {&(0x7f00000001c0)='(', 0x1}], 0x0, 0x0)

13:39:24 executing program 7:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@getsa={0x28, 0x12, 0x1, 0x0, 0x0, {@in=@dev, 0x0, 0x0, 0x6c}}, 0x28}}, 0x0)

13:39:24 executing program 2:
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0xca27659306642c3d, 0xffffffffffffffff, 0x8000000)

13:39:24 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f80100200040000000000000000000800029561eadf153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8fffffff0ffffffffffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8fffffff0ffffffffffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="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", 0x120, 0x600}, {&(0x7f0000010500)="2e2020202020202020202010007deb70325132510000eb7032510300000000002e2e20202020202020202010007deb70325132510000eb70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202020007deb70325132510000eb70325104001a040000", 0x80, 0x11400}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x21400}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x31400}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x51400}], 0x0, &(0x7f0000010d00))

13:39:24 executing program 6:
clone3(&(0x7f00000000c0)={0x1240100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
socketpair(0xa, 0x3, 0x0, &(0x7f0000000200))

13:39:24 executing program 6:
r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello')

[   70.597030] udc-core: couldn't find an available UDC or it's busy
[   70.597798] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
13:39:24 executing program 5:
write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0)
write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/softnet_stat\x00')
write$P9_RWALK(r0, &(0x7f0000000100)={0x23, 0x6f, 0x2, {0x2, [{0x4}, {0x0, 0x0, 0x6}]}}, 0x23)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000140)={0x2f, 0x37, 0x1, {0x0, 0x0, 0x0, 0x0, 0x11, 'net/softnet_stat\x00'}}, 0x2f)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4000)
io_uring_setup(0x434f, &(0x7f00000003c0)={0x0, 0x0, 0x4, 0x0, 0x3d5})
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_LEAVE_OCB(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000780)={&(0x7f0000000680), 0xc, &(0x7f0000000740)={0x0}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x8004)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, 0x0, 0x0, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)

13:39:24 executing program 2:
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0xca27659306642c3d, 0xffffffffffffffff, 0x8000000)

13:39:24 executing program 0:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
read(r0, &(0x7f0000000100)=""/222, 0xde)

[   71.116854] udc-core: couldn't find an available UDC or it's busy
[   71.120600] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
13:39:24 executing program 7:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@getsa={0x28, 0x12, 0x1, 0x0, 0x0, {@in=@dev, 0x0, 0x0, 0x6c}}, 0x28}}, 0x0)

13:39:24 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000780)=[{0x0}], 0x10018c6, &(0x7f0000000200)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001840)=[{0x0, 0x0, 0xd183}], 0x0, 0x0)
dup2(r1, r0)
sendfile(r1, r0, 0x0, 0x7ffffff9)

13:39:24 executing program 5:
write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0)
write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/softnet_stat\x00')
write$P9_RWALK(r0, &(0x7f0000000100)={0x23, 0x6f, 0x2, {0x2, [{0x4}, {0x0, 0x0, 0x6}]}}, 0x23)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000140)={0x2f, 0x37, 0x1, {0x0, 0x0, 0x0, 0x0, 0x11, 'net/softnet_stat\x00'}}, 0x2f)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4000)
io_uring_setup(0x434f, &(0x7f00000003c0)={0x0, 0x0, 0x4, 0x0, 0x3d5})
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_LEAVE_OCB(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000780)={&(0x7f0000000680), 0xc, &(0x7f0000000740)={0x0}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x8004)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, 0x0, 0x0, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)

13:39:24 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
read(r0, &(0x7f0000000100)=""/222, 0xde)

13:39:24 executing program 0:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
read(r0, &(0x7f0000000100)=""/222, 0xde)

13:39:24 executing program 2:
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0xca27659306642c3d, 0xffffffffffffffff, 0x8000000)

13:39:24 executing program 6:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x8400)

13:39:24 executing program 1:
write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0)
write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/softnet_stat\x00')
write$P9_RWALK(r0, &(0x7f0000000100)={0x23, 0x6f, 0x2, {0x2, [{0x4}, {0x0, 0x0, 0x6}]}}, 0x23)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000140)={0x2f, 0x37, 0x1, {0x0, 0x0, 0x0, 0x0, 0x11, 'net/softnet_stat\x00'}}, 0x2f)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4000)
io_uring_setup(0x434f, &(0x7f00000003c0)={0x0, 0x0, 0x4, 0x0, 0x3d5})
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_LEAVE_OCB(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000780)={&(0x7f0000000680), 0xc, &(0x7f0000000740)={0x0}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x8004)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, 0x0, 0x0, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)

13:39:24 executing program 1:
write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0)
write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/softnet_stat\x00')
write$P9_RWALK(r0, &(0x7f0000000100)={0x23, 0x6f, 0x2, {0x2, [{0x4}, {0x0, 0x0, 0x6}]}}, 0x23)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000140)={0x2f, 0x37, 0x1, {0x0, 0x0, 0x0, 0x0, 0x11, 'net/softnet_stat\x00'}}, 0x2f)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4000)
io_uring_setup(0x434f, &(0x7f00000003c0)={0x0, 0x0, 0x4, 0x0, 0x3d5})
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_LEAVE_OCB(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000780)={&(0x7f0000000680), 0xc, &(0x7f0000000740)={0x0}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x8004)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, 0x0, 0x0, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)

13:39:24 executing program 3:
r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
read(r0, &(0x7f0000000100)=""/222, 0xde)

13:39:24 executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

[   71.238810] ======================================================
[   71.238810] WARNING: the mand mount option is being deprecated and
[   71.238810]          will be removed in v5.15!
[   71.238810] ======================================================
13:39:24 executing program 1:
write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0)
write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/softnet_stat\x00')
write$P9_RWALK(r0, &(0x7f0000000100)={0x23, 0x6f, 0x2, {0x2, [{0x4}, {0x0, 0x0, 0x6}]}}, 0x23)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000140)={0x2f, 0x37, 0x1, {0x0, 0x0, 0x0, 0x0, 0x11, 'net/softnet_stat\x00'}}, 0x2f)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4000)
io_uring_setup(0x434f, &(0x7f00000003c0)={0x0, 0x0, 0x4, 0x0, 0x3d5})
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_LEAVE_OCB(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000780)={&(0x7f0000000680), 0xc, &(0x7f0000000740)={0x0}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x8004)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, 0x0, 0x0, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)

13:39:24 executing program 6:
syz_genetlink_get_family_id$team(&(0x7f0000000740), 0xffffffffffffffff)

13:39:24 executing program 3:
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280), 0x28000, 0x0)

13:39:24 executing program 2:
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0xca27659306642c3d, 0xffffffffffffffff, 0x8000000)

13:39:24 executing program 7:
syz_open_dev$mouse(&(0x7f0000000100), 0x0, 0x40)

13:39:24 executing program 5:
write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0)
write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/softnet_stat\x00')
write$P9_RWALK(r0, &(0x7f0000000100)={0x23, 0x6f, 0x2, {0x2, [{0x4}, {0x0, 0x0, 0x6}]}}, 0x23)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000140)={0x2f, 0x37, 0x1, {0x0, 0x0, 0x0, 0x0, 0x11, 'net/softnet_stat\x00'}}, 0x2f)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4000)
io_uring_setup(0x434f, &(0x7f00000003c0)={0x0, 0x0, 0x4, 0x0, 0x3d5})
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_LEAVE_OCB(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000780)={&(0x7f0000000680), 0xc, &(0x7f0000000740)={0x0}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x8004)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, 0x0, 0x0, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)

13:39:24 executing program 0:
pipe(0x0)
clone3(&(0x7f0000000840)={0x12000000, 0x0, 0x0, 0x0, {0x3b}, &(0x7f0000000600)=""/234, 0xea, &(0x7f0000000700)=""/247, 0x0}, 0x58)

13:39:24 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000780)=[{0x0}], 0x10018c6, &(0x7f0000000200)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001840)=[{0x0, 0x0, 0xd183}], 0x0, 0x0)
dup2(r1, r0)
sendfile(r1, r0, 0x0, 0x7ffffff9)

13:39:25 executing program 3:
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280), 0x28000, 0x0)

13:39:25 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000780)=[{0x0}], 0x10018c6, &(0x7f0000000200)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001840)=[{0x0, 0x0, 0xd183}], 0x0, 0x0)
dup2(r1, r0)
sendfile(r1, r0, 0x0, 0x7ffffff9)

13:39:25 executing program 0:
pipe(0x0)
clone3(&(0x7f0000000840)={0x12000000, 0x0, 0x0, 0x0, {0x3b}, &(0x7f0000000600)=""/234, 0xea, &(0x7f0000000700)=""/247, 0x0}, 0x58)

13:39:25 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000780)=[{0x0}], 0x10018c6, &(0x7f0000000200)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001840)=[{0x0, 0x0, 0xd183}], 0x0, 0x0)
dup2(r1, r0)
sendfile(r1, r0, 0x0, 0x7ffffff9)

13:39:25 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000780)=[{0x0}], 0x10018c6, &(0x7f0000000200)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001840)=[{0x0, 0x0, 0xd183}], 0x0, 0x0)
dup2(r1, r0)
sendfile(r1, r0, 0x0, 0x7ffffff9)

13:39:25 executing program 5:
write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0)
write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/softnet_stat\x00')
write$P9_RWALK(r0, &(0x7f0000000100)={0x23, 0x6f, 0x2, {0x2, [{0x4}, {0x0, 0x0, 0x6}]}}, 0x23)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000140)={0x2f, 0x37, 0x1, {0x0, 0x0, 0x0, 0x0, 0x11, 'net/softnet_stat\x00'}}, 0x2f)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4000)
io_uring_setup(0x434f, &(0x7f00000003c0)={0x0, 0x0, 0x4, 0x0, 0x3d5})
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_LEAVE_OCB(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000780)={&(0x7f0000000680), 0xc, &(0x7f0000000740)={0x0}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x8004)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, 0x0, 0x0, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)

13:39:25 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed, 0x10c2}, 0xe)

13:39:25 executing program 3:
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280), 0x28000, 0x0)

13:39:25 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_opts(r0, 0x11, 0x0, 0x0, 0x1000000)

13:39:25 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000780)=[{0x0}], 0x10018c6, &(0x7f0000000200)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001840)=[{0x0, 0x0, 0xd183}], 0x0, 0x0)
dup2(r1, r0)
sendfile(r1, r0, 0x0, 0x7ffffff9)

13:39:25 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000780)=[{0x0}], 0x10018c6, &(0x7f0000000200)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001840)=[{0x0, 0x0, 0xd183}], 0x0, 0x0)
dup2(r1, r0)
sendfile(r1, r0, 0x0, 0x7ffffff9)

13:39:25 executing program 3:
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280), 0x28000, 0x0)

13:39:25 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000780)=[{0x0}], 0x10018c6, &(0x7f0000000200)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001840)=[{0x0, 0x0, 0xd183}], 0x0, 0x0)
dup2(r1, r0)
sendfile(r1, r0, 0x0, 0x7ffffff9)

13:39:25 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_opts(r0, 0x11, 0x0, 0x0, 0x1000000)

13:39:26 executing program 4:
mremap(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil)

13:39:26 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_opts(r0, 0x11, 0x0, 0x0, 0x1000000)

13:39:26 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000780)=[{0x0}], 0x10018c6, &(0x7f0000000200)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001840)=[{0x0, 0x0, 0xd183}], 0x0, 0x0)
dup2(r1, r0)
sendfile(r1, r0, 0x0, 0x7ffffff9)

13:39:26 executing program 0:
pipe(0x0)
clone3(&(0x7f0000000840)={0x12000000, 0x0, 0x0, 0x0, {0x3b}, &(0x7f0000000600)=""/234, 0xea, &(0x7f0000000700)=""/247, 0x0}, 0x58)

13:39:26 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x1, &(0x7f0000000780)=[{0x0}], 0x10018c6, &(0x7f0000000200)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001840)=[{0x0, 0x0, 0xd183}], 0x0, 0x0)
dup2(r1, r0)
sendfile(r1, r0, 0x0, 0x7ffffff9)

13:39:26 executing program 3:
clock_nanosleep(0xb, 0x0, &(0x7f0000000100), 0x0)

13:39:26 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed, 0x10c2}, 0xe)

13:39:26 executing program 5:
syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff)

13:39:26 executing program 3:
clock_nanosleep(0xb, 0x0, &(0x7f0000000100), 0x0)

13:39:26 executing program 4:
mremap(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil)

13:39:26 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_opts(r0, 0x11, 0x0, 0x0, 0x1000000)

13:39:26 executing program 5:
r0 = gettid()
process_vm_writev(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/132, 0x84}, {&(0x7f00000011c0)=""/230, 0xe6}], 0x2, 0x0)

13:39:26 executing program 0:
pipe(0x0)
clone3(&(0x7f0000000840)={0x12000000, 0x0, 0x0, 0x0, {0x3b}, &(0x7f0000000600)=""/234, 0xea, &(0x7f0000000700)=""/247, 0x0}, 0x58)

13:39:26 executing program 2:
syz_genetlink_get_family_id$batadv(&(0x7f0000001740), 0xffffffffffffffff)

13:39:26 executing program 7:
io_setup(0x0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001500), 0x100008, &(0x7f0000001780))

13:39:26 executing program 3:
clock_nanosleep(0xb, 0x0, &(0x7f0000000100), 0x0)

13:39:26 executing program 4:
mremap(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil)

13:39:26 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed, 0x10c2}, 0xe)

13:39:26 executing program 6:
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)

13:39:27 executing program 3:
clock_nanosleep(0xb, 0x0, &(0x7f0000000100), 0x0)

13:39:27 executing program 5:
r0 = gettid()
process_vm_writev(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/132, 0x84}, {&(0x7f00000011c0)=""/230, 0xe6}], 0x2, 0x0)

13:39:27 executing program 4:
mremap(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil)

13:39:27 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000700)=[{0x6, 0x0, 0x0, 0x7ffffff7}]})
pkey_alloc(0x0, 0x0)

13:39:27 executing program 2:
syz_genetlink_get_family_id$batadv(&(0x7f0000001740), 0xffffffffffffffff)

[   73.661344] Bluetooth: hci6: command 0x0405 tx timeout
13:39:27 executing program 0:
pipe2$9p(&(0x7f0000000340)={<r0=>0xffffffffffffffff}, 0x0)
write$binfmt_aout(r0, 0x0, 0x0)

13:39:27 executing program 6:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x541b, 0x0)

13:39:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000000800)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x35, 0x5, "24bbb189e5d53b2657ae75bc84e96b9e278c4b48923192e75ae2a04b9a7bf485cb92e2a3047161ea79328078b985d52e09"}]}, @ETHTOOL_A_FEATURES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0xe1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xe0d, 0x4, "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"}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0xec4}}, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)

13:39:27 executing program 5:
r0 = gettid()
process_vm_writev(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/132, 0x84}, {&(0x7f00000011c0)=""/230, 0xe6}], 0x2, 0x0)

13:39:27 executing program 4:
creat(&(0x7f0000000000)='./file2\x00', 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00')
pread64(r0, &(0x7f0000000540)=""/36, 0x24, 0x10000)

13:39:27 executing program 7:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCFLSH(r0, 0x540b, 0x2)

13:39:27 executing program 6:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x541b, 0x0)

13:39:27 executing program 0:
pipe2$9p(&(0x7f0000000340)={<r0=>0xffffffffffffffff}, 0x0)
write$binfmt_aout(r0, 0x0, 0x0)

13:39:27 executing program 3:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100523853ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000076a34e3f63e54dbc8955dd45888f6106010040", 0x1f, 0x4e0}, {&(0x7f0000000040)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd4f4655fd4f4655f000000000000040040", 0x1d, 0x2100}], 0x0, &(0x7f0000000000))

[   73.936277] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
13:39:27 executing program 2:
syz_genetlink_get_family_id$batadv(&(0x7f0000001740), 0xffffffffffffffff)

13:39:27 executing program 4:
creat(&(0x7f0000000000)='./file2\x00', 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00')
pread64(r0, &(0x7f0000000540)=""/36, 0x24, 0x10000)

13:39:27 executing program 7:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCFLSH(r0, 0x540b, 0x2)

13:39:27 executing program 6:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x541b, 0x0)

13:39:27 executing program 0:
pipe2$9p(&(0x7f0000000340)={<r0=>0xffffffffffffffff}, 0x0)
write$binfmt_aout(r0, 0x0, 0x0)

13:39:27 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed, 0x10c2}, 0xe)

13:39:27 executing program 3:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100523853ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000076a34e3f63e54dbc8955dd45888f6106010040", 0x1f, 0x4e0}, {&(0x7f0000000040)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd4f4655fd4f4655f000000000000040040", 0x1d, 0x2100}], 0x0, &(0x7f0000000000))

13:39:27 executing program 5:
r0 = gettid()
process_vm_writev(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/132, 0x84}, {&(0x7f00000011c0)=""/230, 0xe6}], 0x2, 0x0)

13:39:27 executing program 6:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x541b, 0x0)

13:39:27 executing program 0:
pipe2$9p(&(0x7f0000000340)={<r0=>0xffffffffffffffff}, 0x0)
write$binfmt_aout(r0, 0x0, 0x0)

[   74.427704] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
13:39:28 executing program 7:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCFLSH(r0, 0x540b, 0x2)

13:39:28 executing program 4:
creat(&(0x7f0000000000)='./file2\x00', 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00')
pread64(r0, &(0x7f0000000540)=""/36, 0x24, 0x10000)

13:39:28 executing program 5:
ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@local, @in6=@private2}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in6=@initdev}}, 0x0)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e21, @dev}, {}, 0x0, {0x2, 0x4e20, @rand_addr=0x64010102}, 'lo\x00'})
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, 0x0, 0x0)
sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x4000)
socketpair(0x25, 0x40006, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x7, 0x4, 0x418, 0x220, 0x0, 0x220, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@arp={@private=0x3ff, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, {@empty, {[0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 'macsec0\x00', 'rose0\x00', {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @loopback}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468)
socketpair(0x25, 0x0, 0x0, &(0x7f0000001140))

13:39:28 executing program 4:
creat(&(0x7f0000000000)='./file2\x00', 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00')
pread64(r0, &(0x7f0000000540)=""/36, 0x24, 0x10000)

13:39:28 executing program 2:
syz_genetlink_get_family_id$batadv(&(0x7f0000001740), 0xffffffffffffffff)

13:39:28 executing program 3:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100523853ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000076a34e3f63e54dbc8955dd45888f6106010040", 0x1f, 0x4e0}, {&(0x7f0000000040)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd4f4655fd4f4655f000000000000040040", 0x1d, 0x2100}], 0x0, &(0x7f0000000000))

13:39:28 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff)
futex(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0)

13:39:28 executing program 6:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$SNAPSHOT_FREE(r0, 0x3305)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180))

13:39:28 executing program 7:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCFLSH(r0, 0x540b, 0x2)

13:39:28 executing program 5:
setresuid(0xee00, 0xee00, 0xee01)
setresgid(0xee00, 0x0, 0x0)

13:39:28 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
close(r0)
socket$nl_xfrm(0x10, 0x3, 0x6)
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setstatus(r2, 0x4, 0x42800)
write(r2, &(0x7f0000000080)="1f", 0x1)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
splice(r1, 0x0, r0, 0x0, 0xfdef, 0x0)

13:39:28 executing program 2:
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @random="fdc179fd6092", @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "34da97", 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty}}}}, 0x0)

13:39:28 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
poll(&(0x7f0000000040)=[{r0}], 0x1, 0x3)

[   75.466006] Restarting kernel threads ... done.
[   75.469781] Restarting kernel threads ... done.
13:39:29 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010100)="000000d07642da921f", 0x9, 0x4e0}, {0x0, 0x0, 0xfffffffffffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@errors_remount}, {@noacl}]})

13:39:29 executing program 7:
r0 = clone3(&(0x7f0000000180)={0x41000000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), 0x0, {0x2e}, &(0x7f00000000c0)=""/45, 0x2d, &(0x7f0000000100)=""/36, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58)
pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x402000, 0x0)
ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000240))
r3 = pidfd_open(r0, 0x0)
pidfd_getfd(r3, r1, 0x0)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x109680, 0x0)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f00000008c0))
syz_genetlink_get_family_id$mptcp(&(0x7f00000009c0), 0xffffffffffffffff)

[   75.621638] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[   75.624920] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5
13:39:29 executing program 5:
setresuid(0xee00, 0xee00, 0xee01)
setresgid(0xee00, 0x0, 0x0)

[   75.624920] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[   75.624920] 
13:39:29 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff)
futex(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0)

[   75.641257] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz-executor.2: bad orphan inode 31
[   75.643501] EXT4-fs (loop2): Remounting filesystem read-only
[   75.644709] ext4_test_bit(bit=30, block=3) = 0
[   75.646049] EXT4-fs (loop2): mounted filesystem without journal. Opts: nomblk_io_submit,errors=remount-ro,noacl,
[   75.675053] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
13:39:29 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
poll(&(0x7f0000000040)=[{r0}], 0x1, 0x3)

13:39:29 executing program 6:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$SNAPSHOT_FREE(r0, 0x3305)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180))

13:39:29 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010100)="000000d07642da921f", 0x9, 0x4e0}, {0x0, 0x0, 0xfffffffffffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@errors_remount}, {@noacl}]})

13:39:29 executing program 3:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x4, &(0x7f0000000200)=[{&(0x7f0000000140)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100523853ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000076a34e3f63e54dbc8955dd45888f6106010040", 0x1f, 0x4e0}, {&(0x7f0000000040)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d3f4655fd4f4655fd4f4655f000000000000040040", 0x1d, 0x2100}], 0x0, &(0x7f0000000000))

13:39:29 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff)
futex(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0)

13:39:29 executing program 5:
setresuid(0xee00, 0xee00, 0xee01)
setresgid(0xee00, 0x0, 0x0)

13:39:29 executing program 7:
r0 = clone3(&(0x7f0000000180)={0x41000000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), 0x0, {0x2e}, &(0x7f00000000c0)=""/45, 0x2d, &(0x7f0000000100)=""/36, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58)
pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x402000, 0x0)
ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000240))
r3 = pidfd_open(r0, 0x0)
pidfd_getfd(r3, r1, 0x0)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x109680, 0x0)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f00000008c0))
syz_genetlink_get_family_id$mptcp(&(0x7f00000009c0), 0xffffffffffffffff)

13:39:29 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
close(r0)
socket$nl_xfrm(0x10, 0x3, 0x6)
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setstatus(r2, 0x4, 0x42800)
write(r2, &(0x7f0000000080)="1f", 0x1)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
splice(r1, 0x0, r0, 0x0, 0xfdef, 0x0)

[   76.102612] Restarting kernel threads ... done.
13:39:29 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
poll(&(0x7f0000000040)=[{r0}], 0x1, 0x3)

[   76.153954] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   76.157949] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[   76.158839] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5
[   76.158839] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[   76.158839] 
13:39:29 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
close(r0)
socket$nl_xfrm(0x10, 0x3, 0x6)
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setstatus(r2, 0x4, 0x42800)
write(r2, &(0x7f0000000080)="1f", 0x1)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
splice(r1, 0x0, r0, 0x0, 0xfdef, 0x0)

[   76.199115] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz-executor.2: bad orphan inode 31
13:39:29 executing program 6:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$SNAPSHOT_FREE(r0, 0x3305)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180))

13:39:29 executing program 5:
setresuid(0xee00, 0xee00, 0xee01)
setresgid(0xee00, 0x0, 0x0)

[   76.273513] EXT4-fs (loop2): Remounting filesystem read-only
[   76.274846] ext4_test_bit(bit=30, block=3) = 0
[   76.275842] EXT4-fs (loop2): mounted filesystem without journal. Opts: nomblk_io_submit,errors=remount-ro,noacl,
13:39:29 executing program 0:
syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff)
futex(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0)

13:39:29 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
poll(&(0x7f0000000040)=[{r0}], 0x1, 0x3)

13:39:29 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010100)="000000d07642da921f", 0x9, 0x4e0}, {0x0, 0x0, 0xfffffffffffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@errors_remount}, {@noacl}]})

13:39:30 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
close(r0)
socket$nl_xfrm(0x10, 0x3, 0x6)
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setstatus(r2, 0x4, 0x42800)
write(r2, &(0x7f0000000080)="1f", 0x1)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
splice(r1, 0x0, r0, 0x0, 0xfdef, 0x0)

13:39:30 executing program 7:
r0 = clone3(&(0x7f0000000180)={0x41000000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), 0x0, {0x2e}, &(0x7f00000000c0)=""/45, 0x2d, &(0x7f0000000100)=""/36, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58)
pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x402000, 0x0)
ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000240))
r3 = pidfd_open(r0, 0x0)
pidfd_getfd(r3, r1, 0x0)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x109680, 0x0)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f00000008c0))
syz_genetlink_get_family_id$mptcp(&(0x7f00000009c0), 0xffffffffffffffff)

[   76.538297] Restarting kernel threads ... done.
[   76.633840] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[   76.635054] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5
[   76.635054] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[   76.635054] 
[   76.706482] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz-executor.2: bad orphan inode 31
[   76.761906] EXT4-fs (loop2): Remounting filesystem read-only
[   76.762941] ext4_test_bit(bit=30, block=3) = 0
[   76.763752] EXT4-fs (loop2): mounted filesystem without journal. Opts: nomblk_io_submit,errors=remount-ro,noacl,
13:39:30 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010100)="000000d07642da921f", 0x9, 0x4e0}, {0x0, 0x0, 0xfffffffffffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@errors_remount}, {@noacl}]})

13:39:30 executing program 6:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$SNAPSHOT_FREE(r0, 0x3305)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180))

13:39:30 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
close(r0)
socket$nl_xfrm(0x10, 0x3, 0x6)
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setstatus(r2, 0x4, 0x42800)
write(r2, &(0x7f0000000080)="1f", 0x1)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
splice(r1, 0x0, r0, 0x0, 0xfdef, 0x0)

13:39:30 executing program 0:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$SNAPSHOT_FREE(r0, 0x3305)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180))

13:39:30 executing program 1:
openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000cc0)={0x2, &(0x7f0000000c80)=[{0x0, 0x0, 0x0, 0x3}, {0x6, 0x0, 0x7, 0x8}]})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000d00)={0x0, 0x0, 0xffffffffffffffff, 0x100})

13:39:30 executing program 4:
syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='mqueue\x00', 0x0, &(0x7f0000000180)='=static')

13:39:30 executing program 7:
r0 = clone3(&(0x7f0000000180)={0x41000000, &(0x7f0000000000)=<r1=>0xffffffffffffffff, &(0x7f0000000040), 0x0, {0x2e}, &(0x7f00000000c0)=""/45, 0x2d, &(0x7f0000000100)=""/36, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58)
pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x402000, 0x0)
ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000240))
r3 = pidfd_open(r0, 0x0)
pidfd_getfd(r3, r1, 0x0)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x109680, 0x0)
ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f00000008c0))
syz_genetlink_get_family_id$mptcp(&(0x7f00000009c0), 0xffffffffffffffff)

13:39:30 executing program 5:
r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
shmctl$IPC_RMID(r0, 0x0)

[   76.861914] audit: type=1326 audit(1636378770.440:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4434 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466609 code=0x0
[   76.882365] Restarting kernel threads ... done.
[   76.892367] Restarting kernel threads ... done.
13:39:30 executing program 6:
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000003, 0x151, 0xffffffffffffffff, 0x10000000)
r0 = syz_io_uring_complete(0x0)
r1 = syz_io_uring_setup(0x3770, &(0x7f0000000780)={0x0, 0x1ea9, 0x10, 0x1, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000800), &(0x7f0000000840))
io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000c80), 0xffffffffffffffff)
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000dc0))
epoll_create1(0x0)
syz_io_uring_setup(0x209d, &(0x7f0000001f80)={0x0, 0x8f89, 0x2, 0x1, 0x102}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000002000), 0xfffffffffffffffc)

13:39:30 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
close(r0)
socket$nl_xfrm(0x10, 0x3, 0x6)
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setstatus(r2, 0x4, 0x42800)
write(r2, &(0x7f0000000080)="1f", 0x1)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
splice(r1, 0x0, r0, 0x0, 0xfdef, 0x0)

13:39:30 executing program 5:
r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
shmctl$IPC_RMID(r0, 0x0)

13:39:30 executing program 4:
syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='mqueue\x00', 0x0, &(0x7f0000000180)='=static')

[   77.035970] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[   77.036983] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5
[   77.036983] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[   77.036983] 
13:39:30 executing program 0:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$SNAPSHOT_FREE(r0, 0x3305)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180))

[   77.090382] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz-executor.2: bad orphan inode 31
[   77.091909] Restarting kernel threads ... 
[   77.092539] EXT4-fs (loop2): Remounting filesystem read-only
[   77.093848] ext4_test_bit(bit=30, block=3) = 0
[   77.094526] EXT4-fs (loop2): mounted filesystem without journal. Opts: nomblk_io_submit,errors=remount-ro,noacl,
[   77.103438] done.
13:39:30 executing program 7:
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x3, 0xb, 0x0)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)

[   77.689221] audit: type=1326 audit(1636378771.267:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4434 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466609 code=0x0
13:39:31 executing program 5:
r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
shmctl$IPC_RMID(r0, 0x0)

13:39:31 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
close(r0)
socket$nl_xfrm(0x10, 0x3, 0x6)
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setstatus(r2, 0x4, 0x42800)
write(r2, &(0x7f0000000080)="1f", 0x1)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
splice(r1, 0x0, r0, 0x0, 0xfdef, 0x0)

13:39:31 executing program 7:
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x3, 0xb, 0x0)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)

13:39:31 executing program 0:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$SNAPSHOT_FREE(r0, 0x3305)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180))

13:39:31 executing program 4:
syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='mqueue\x00', 0x0, &(0x7f0000000180)='=static')

13:39:31 executing program 6:
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000003, 0x151, 0xffffffffffffffff, 0x10000000)
r0 = syz_io_uring_complete(0x0)
r1 = syz_io_uring_setup(0x3770, &(0x7f0000000780)={0x0, 0x1ea9, 0x10, 0x1, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000800), &(0x7f0000000840))
io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000c80), 0xffffffffffffffff)
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000dc0))
epoll_create1(0x0)
syz_io_uring_setup(0x209d, &(0x7f0000001f80)={0x0, 0x8f89, 0x2, 0x1, 0x102}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000002000), 0xfffffffffffffffc)

13:39:31 executing program 1:
perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa202}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

13:39:31 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='\x00!9\x91\xfd\x00\xe4\x12\xfc\xd1\x19\x13\"\x97\xe3\xae\xf3\bU:\x02\xe4\xf4\xe3d\xb1\xf4\x8a\x01\xd9qE\n\nQP\xb2\xbb\xcd`\x00\x00', 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
ftruncate(r0, 0x8)
fcntl$addseals(r0, 0x409, 0xc)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x8, 0x0, 0x41, 0x0, 0x80000000000000, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x18}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
fstat(r0, &(0x7f0000000140))
ioctl$TCGETA(r1, 0x5405, 0xffffffffffffffff)
pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0)
clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
finit_module(r0, 0x0, 0x0)
fork()

[   77.721356] audit: type=1400 audit(1636378771.300:13): avc:  denied  { module_load } for  pid=4483 comm="syz-executor.2" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=19 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=system permissive=1
[   77.738541] Restarting kernel threads ... done.
[   77.762578] Module has invalid ELF structures
13:39:31 executing program 5:
r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
shmctl$IPC_RMID(r0, 0x0)

13:39:31 executing program 1:
perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa202}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

13:39:31 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
close_range(r0, r0, 0x2)
execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0)

13:39:31 executing program 7:
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x3, 0xb, 0x0)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)

13:39:31 executing program 4:
syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='mqueue\x00', 0x0, &(0x7f0000000180)='=static')

13:39:31 executing program 3:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = semget$private(0x0, 0x6, 0x0)
semop(r0, &(0x7f0000000000)=[{}], 0x1)
semtimedop(0x0, 0x0, 0x0, 0x0)

13:39:31 executing program 5:
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000f00)={0x0, 0x74}, 0x18)

13:39:31 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
close_range(r0, r0, 0x2)
execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0)

13:39:31 executing program 1:
perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa202}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[   77.886838] Module has invalid ELF structures
13:39:31 executing program 7:
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x3, 0xb, 0x0)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0)

13:39:31 executing program 6:
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000003, 0x151, 0xffffffffffffffff, 0x10000000)
r0 = syz_io_uring_complete(0x0)
r1 = syz_io_uring_setup(0x3770, &(0x7f0000000780)={0x0, 0x1ea9, 0x10, 0x1, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000800), &(0x7f0000000840))
io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000c80), 0xffffffffffffffff)
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000dc0))
epoll_create1(0x0)
syz_io_uring_setup(0x209d, &(0x7f0000001f80)={0x0, 0x8f89, 0x2, 0x1, 0x102}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000002000), 0xfffffffffffffffc)

13:39:31 executing program 7:
r0 = memfd_create(&(0x7f00000001c0)='\x00!9\x91\xfd\x00\xe4\x12\xfc\xd1\x19\x13\"\x97\xe3\xae\xf3\bU:\x02\xe4\xf4\xe3d\xb1\xf4\x8a\x01\xd9qE\n\nQP\xb2\xbb\xcd`\x00\x00', 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
ftruncate(r0, 0x8)
fcntl$addseals(r0, 0x409, 0xc)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x8, 0x0, 0x41, 0x0, 0x80000000000000, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x18}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
fstat(r0, &(0x7f0000000140))
ioctl$TCGETA(r1, 0x5405, 0xffffffffffffffff)
pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0)
clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
finit_module(r0, 0x0, 0x0)
fork()

13:39:31 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
close_range(r0, r0, 0x2)
execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0)

13:39:31 executing program 5:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x209000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x84e00, 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0xffffffffffffffff, r1, 0x0)
ioctl$SG_SET_TIMEOUT(r0, 0x31e, 0x0)

13:39:31 executing program 3:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = semget$private(0x0, 0x6, 0x0)
semop(r0, &(0x7f0000000000)=[{}], 0x1)
semtimedop(0x0, 0x0, 0x0, 0x0)

13:39:31 executing program 1:
perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa202}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

13:39:31 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='\x00!9\x91\xfd\x00\xe4\x12\xfc\xd1\x19\x13\"\x97\xe3\xae\xf3\bU:\x02\xe4\xf4\xe3d\xb1\xf4\x8a\x01\xd9qE\n\nQP\xb2\xbb\xcd`\x00\x00', 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
ftruncate(r0, 0x8)
fcntl$addseals(r0, 0x409, 0xc)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x8, 0x0, 0x41, 0x0, 0x80000000000000, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x18}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
fstat(r0, &(0x7f0000000140))
ioctl$TCGETA(r1, 0x5405, 0xffffffffffffffff)
pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0)
clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
finit_module(r0, 0x0, 0x0)
fork()

13:39:31 executing program 6:
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000003, 0x151, 0xffffffffffffffff, 0x10000000)
r0 = syz_io_uring_complete(0x0)
r1 = syz_io_uring_setup(0x3770, &(0x7f0000000780)={0x0, 0x1ea9, 0x10, 0x1, 0x252, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000800), &(0x7f0000000840))
io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000c80), 0xffffffffffffffff)
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000dc0))
epoll_create1(0x0)
syz_io_uring_setup(0x209d, &(0x7f0000001f80)={0x0, 0x8f89, 0x2, 0x1, 0x102}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000002000), 0xfffffffffffffffc)

13:39:31 executing program 4:
r0 = memfd_create(&(0x7f00000001c0)='\x00!9\x91\xfd\x00\xe4\x12\xfc\xd1\x19\x13\"\x97\xe3\xae\xf3\bU:\x02\xe4\xf4\xe3d\xb1\xf4\x8a\x01\xd9qE\n\nQP\xb2\xbb\xcd`\x00\x00', 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
ftruncate(r0, 0x8)
fcntl$addseals(r0, 0x409, 0xc)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x8, 0x0, 0x41, 0x0, 0x80000000000000, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x18}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
fstat(r0, &(0x7f0000000140))
ioctl$TCGETA(r1, 0x5405, 0xffffffffffffffff)
pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0)
clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
finit_module(r0, 0x0, 0x0)
fork()

13:39:31 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
clone3(&(0x7f0000000040)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
close_range(r0, r0, 0x2)
execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0)

[   78.116716] Module has invalid ELF structures
13:39:31 executing program 3:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = semget$private(0x0, 0x6, 0x0)
semop(r0, &(0x7f0000000000)=[{}], 0x1)
semtimedop(0x0, 0x0, 0x0, 0x0)

13:39:31 executing program 1:
r0 = memfd_create(&(0x7f00000001c0)='\x00!9\x91\xfd\x00\xe4\x12\xfc\xd1\x19\x13\"\x97\xe3\xae\xf3\bU:\x02\xe4\xf4\xe3d\xb1\xf4\x8a\x01\xd9qE\n\nQP\xb2\xbb\xcd`\x00\x00', 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
ftruncate(r0, 0x8)
fcntl$addseals(r0, 0x409, 0xc)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x8, 0x0, 0x41, 0x0, 0x80000000000000, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x18}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
fstat(r0, &(0x7f0000000140))
ioctl$TCGETA(r1, 0x5405, 0xffffffffffffffff)
pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0)
clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
finit_module(r0, 0x0, 0x0)
fork()

[   78.137561] Module has invalid ELF structures
13:39:31 executing program 7:
r0 = memfd_create(&(0x7f00000001c0)='\x00!9\x91\xfd\x00\xe4\x12\xfc\xd1\x19\x13\"\x97\xe3\xae\xf3\bU:\x02\xe4\xf4\xe3d\xb1\xf4\x8a\x01\xd9qE\n\nQP\xb2\xbb\xcd`\x00\x00', 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
ftruncate(r0, 0x8)
fcntl$addseals(r0, 0x409, 0xc)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x8, 0x0, 0x41, 0x0, 0x80000000000000, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x18}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
fstat(r0, &(0x7f0000000140))
ioctl$TCGETA(r1, 0x5405, 0xffffffffffffffff)
pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0)
clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
finit_module(r0, 0x0, 0x0)
fork()

13:39:31 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='\x00!9\x91\xfd\x00\xe4\x12\xfc\xd1\x19\x13\"\x97\xe3\xae\xf3\bU:\x02\xe4\xf4\xe3d\xb1\xf4\x8a\x01\xd9qE\n\nQP\xb2\xbb\xcd`\x00\x00', 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
ftruncate(r0, 0x8)
fcntl$addseals(r0, 0x409, 0xc)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x8, 0x0, 0x41, 0x0, 0x80000000000000, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x18}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
fstat(r0, &(0x7f0000000140))
ioctl$TCGETA(r1, 0x5405, 0xffffffffffffffff)
pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0)
clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
finit_module(r0, 0x0, 0x0)
fork()

13:39:31 executing program 5:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x209000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x84e00, 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0xffffffffffffffff, r1, 0x0)
ioctl$SG_SET_TIMEOUT(r0, 0x31e, 0x0)

13:39:31 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = semget$private(0x0, 0x6, 0x0)
semop(r0, &(0x7f0000000000)=[{}], 0x1)
semtimedop(0x0, 0x0, 0x0, 0x0)

[   78.176123] Module has invalid ELF structures
13:39:31 executing program 4:
r0 = memfd_create(&(0x7f00000001c0)='\x00!9\x91\xfd\x00\xe4\x12\xfc\xd1\x19\x13\"\x97\xe3\xae\xf3\bU:\x02\xe4\xf4\xe3d\xb1\xf4\x8a\x01\xd9qE\n\nQP\xb2\xbb\xcd`\x00\x00', 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
ftruncate(r0, 0x8)
fcntl$addseals(r0, 0x409, 0xc)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x8, 0x0, 0x41, 0x0, 0x80000000000000, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x18}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
fstat(r0, &(0x7f0000000140))
ioctl$TCGETA(r1, 0x5405, 0xffffffffffffffff)
pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0)
clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
finit_module(r0, 0x0, 0x0)
fork()

[   78.215408] Module has invalid ELF structures
13:39:31 executing program 5:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x209000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x84e00, 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0xffffffffffffffff, r1, 0x0)
ioctl$SG_SET_TIMEOUT(r0, 0x31e, 0x0)

[   78.269748] Module has invalid ELF structures
[   78.302471] Module has invalid ELF structures
[   78.311763] Module has invalid ELF structures
13:39:31 executing program 3:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = semget$private(0x0, 0x6, 0x0)
semop(r0, &(0x7f0000000000)=[{}], 0x1)
semtimedop(0x0, 0x0, 0x0, 0x0)

13:39:31 executing program 1:
r0 = memfd_create(&(0x7f00000001c0)='\x00!9\x91\xfd\x00\xe4\x12\xfc\xd1\x19\x13\"\x97\xe3\xae\xf3\bU:\x02\xe4\xf4\xe3d\xb1\xf4\x8a\x01\xd9qE\n\nQP\xb2\xbb\xcd`\x00\x00', 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
ftruncate(r0, 0x8)
fcntl$addseals(r0, 0x409, 0xc)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x8, 0x0, 0x41, 0x0, 0x80000000000000, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x18}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
fstat(r0, &(0x7f0000000140))
ioctl$TCGETA(r1, 0x5405, 0xffffffffffffffff)
pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0)
clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
finit_module(r0, 0x0, 0x0)
fork()

13:39:31 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = semget$private(0x0, 0x6, 0x0)
semop(r0, &(0x7f0000000000)=[{}], 0x1)
semtimedop(0x0, 0x0, 0x0, 0x0)

13:39:31 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = semget$private(0x0, 0x6, 0x0)
semop(r0, &(0x7f0000000000)=[{}], 0x1)
semtimedop(0x0, 0x0, 0x0, 0x0)

13:39:31 executing program 2:
r0 = memfd_create(&(0x7f00000001c0)='\x00!9\x91\xfd\x00\xe4\x12\xfc\xd1\x19\x13\"\x97\xe3\xae\xf3\bU:\x02\xe4\xf4\xe3d\xb1\xf4\x8a\x01\xd9qE\n\nQP\xb2\xbb\xcd`\x00\x00', 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
ftruncate(r0, 0x8)
fcntl$addseals(r0, 0x409, 0xc)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x8, 0x0, 0x41, 0x0, 0x80000000000000, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x18}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
fstat(r0, &(0x7f0000000140))
ioctl$TCGETA(r1, 0x5405, 0xffffffffffffffff)
pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0)
clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
finit_module(r0, 0x0, 0x0)
fork()

13:39:31 executing program 5:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x209000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x84e00, 0x0)
stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0xffffffffffffffff, r1, 0x0)
ioctl$SG_SET_TIMEOUT(r0, 0x31e, 0x0)

13:39:31 executing program 4:
r0 = memfd_create(&(0x7f00000001c0)='\x00!9\x91\xfd\x00\xe4\x12\xfc\xd1\x19\x13\"\x97\xe3\xae\xf3\bU:\x02\xe4\xf4\xe3d\xb1\xf4\x8a\x01\xd9qE\n\nQP\xb2\xbb\xcd`\x00\x00', 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
ftruncate(r0, 0x8)
fcntl$addseals(r0, 0x409, 0xc)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x8, 0x0, 0x41, 0x0, 0x80000000000000, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x18}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
fstat(r0, &(0x7f0000000140))
ioctl$TCGETA(r1, 0x5405, 0xffffffffffffffff)
pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0)
clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
finit_module(r0, 0x0, 0x0)
fork()

13:39:31 executing program 7:
r0 = memfd_create(&(0x7f00000001c0)='\x00!9\x91\xfd\x00\xe4\x12\xfc\xd1\x19\x13\"\x97\xe3\xae\xf3\bU:\x02\xe4\xf4\xe3d\xb1\xf4\x8a\x01\xd9qE\n\nQP\xb2\xbb\xcd`\x00\x00', 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
ftruncate(r0, 0x8)
fcntl$addseals(r0, 0x409, 0xc)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x8, 0x0, 0x41, 0x0, 0x80000000000000, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x18}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
fstat(r0, &(0x7f0000000140))
ioctl$TCGETA(r1, 0x5405, 0xffffffffffffffff)
pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0)
clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
finit_module(r0, 0x0, 0x0)
fork()

13:39:31 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = semget$private(0x0, 0x6, 0x0)
semop(r0, &(0x7f0000000000)=[{}], 0x1)
semtimedop(0x0, 0x0, 0x0, 0x0)

13:39:31 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = semget$private(0x0, 0x6, 0x0)
semop(r0, &(0x7f0000000000)=[{}], 0x1)
semtimedop(0x0, 0x0, 0x0, 0x0)

13:39:31 executing program 5:
ioprio_get$pid(0x1, 0xffffffffffffffff)

13:39:31 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x2)

[   78.424065] Module has invalid ELF structures
[   78.424121] Module has invalid ELF structures
13:39:32 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0)
write$P9_RREADLINK(r1, &(0x7f0000000440)=ANY=[], 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xa)
syz_open_dev$sg(0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0x7ffffffc)

13:39:32 executing program 5:
ioprio_get$pid(0x1, 0xffffffffffffffff)

[   78.443886] Module has invalid ELF structures
13:39:32 executing program 2:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0)
mknod$loop(&(0x7f0000000000)='./mnt/file0\x00', 0x6000, 0x1)

[   78.544257] Module has invalid ELF structures
[   78.943093] syz-executor.7 (4636) used greatest stack depth: 23656 bytes left
[   78.951904] syz-executor.7 (4643) used greatest stack depth: 23608 bytes left
13:39:32 executing program 6:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = semget$private(0x0, 0x6, 0x0)
semop(r0, &(0x7f0000000000)=[{}], 0x1)
semtimedop(0x0, 0x0, 0x0, 0x0)

13:39:32 executing program 4:
clone3(&(0x7f0000003c40)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000003b40)=""/111, 0x6f, 0x0, 0x0}, 0x58)

13:39:32 executing program 5:
ioprio_get$pid(0x1, 0xffffffffffffffff)

13:39:32 executing program 2:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0)
mknod$loop(&(0x7f0000000000)='./mnt/file0\x00', 0x6000, 0x1)

13:39:32 executing program 1:
r0 = memfd_create(&(0x7f00000001c0)='\x00!9\x91\xfd\x00\xe4\x12\xfc\xd1\x19\x13\"\x97\xe3\xae\xf3\bU:\x02\xe4\xf4\xe3d\xb1\xf4\x8a\x01\xd9qE\n\nQP\xb2\xbb\xcd`\x00\x00', 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0)
ftruncate(r0, 0x8)
fcntl$addseals(r0, 0x409, 0xc)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x8, 0x0, 0x41, 0x0, 0x80000000000000, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x18}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
fstat(r0, &(0x7f0000000140))
ioctl$TCGETA(r1, 0x5405, 0xffffffffffffffff)
pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x400000, 0x0, 0x0)
clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
finit_module(r0, 0x0, 0x0)
fork()

13:39:32 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x0)

13:39:32 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0)
write$P9_RREADLINK(r1, &(0x7f0000000440)=ANY=[], 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xa)
syz_open_dev$sg(0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0x7ffffffc)

13:39:32 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x2)

13:39:32 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0)
write$P9_RREADLINK(r1, &(0x7f0000000440)=ANY=[], 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xa)
syz_open_dev$sg(0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0x7ffffffc)

13:39:32 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x2)

13:39:32 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x0)

13:39:32 executing program 2:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0)
mknod$loop(&(0x7f0000000000)='./mnt/file0\x00', 0x6000, 0x1)

13:39:32 executing program 5:
ioprio_get$pid(0x1, 0xffffffffffffffff)

[   79.110334] Module has invalid ELF structures
13:39:32 executing program 5:
openat$hpet(0xffffffffffffff9c, 0x0, 0x80002, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x38, &(0x7f0000000100)={@private0}, 0x14)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4)

13:39:33 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x2)

13:39:33 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x0)

13:39:33 executing program 2:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0)
mknod$loop(&(0x7f0000000000)='./mnt/file0\x00', 0x6000, 0x1)

13:39:33 executing program 4:
set_mempolicy(0x4, 0x0, 0x0)
r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0)
pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0)

13:39:33 executing program 1:
futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000040), 0xb2ffffff)

13:39:33 executing program 5:
openat$hpet(0xffffffffffffff9c, 0x0, 0x80002, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x38, &(0x7f0000000100)={@private0}, 0x14)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4)

13:39:33 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0)
write$P9_RREADLINK(r1, &(0x7f0000000440)=ANY=[], 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xa)
syz_open_dev$sg(0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0x7ffffffc)

13:39:33 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0)
write$P9_RREADLINK(r1, &(0x7f0000000440)=ANY=[], 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xa)
syz_open_dev$sg(0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0x7ffffffc)

[   79.509967] futex_wake_op: syz-executor.1 tries to shift op by -1; fix this program
[   79.521464] futex_wake_op: syz-executor.1 tries to shift op by -1; fix this program
13:39:33 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x0)

13:39:33 executing program 3:
openat$hpet(0xffffffffffffff9c, 0x0, 0x80002, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x38, &(0x7f0000000100)={@private0}, 0x14)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4)

13:39:33 executing program 2:
prctl$PR_SET_MM_MAP(0x23, 0x2, &(0x7f0000000780)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0}, 0x68)

13:39:33 executing program 5:
openat$hpet(0xffffffffffffff9c, 0x0, 0x80002, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x38, &(0x7f0000000100)={@private0}, 0x14)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4)

13:39:33 executing program 1:
futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000040), 0xb2ffffff)

13:39:33 executing program 2:
prctl$PR_SET_MM_MAP(0x23, 0x2, &(0x7f0000000780)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0}, 0x68)

13:39:33 executing program 3:
openat$hpet(0xffffffffffffff9c, 0x0, 0x80002, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x38, &(0x7f0000000100)={@private0}, 0x14)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4)

[   79.730289] futex_wake_op: syz-executor.1 tries to shift op by -1; fix this program
13:39:33 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x8c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_WANTED={0x6c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5d, 0x2, ' \xcak\xd8=\xab\xad\xd3\x80 ?x-bv\x19i\x89\x1a(;\x92\xccs\f\xdd56\x17\xf8\xdc%\xc0\xd5NS\xc7\xd0\xa7(=\xcaC\x18B\xff5_\xaf}a\xd2\xc4\xf9TB\\Q\xce\x0eM\x04\xc1\xaf\xaa\xac\v\xc2G\x10\nb\xe2\xda\v+\xee\x91B\xb5(\xfa\xf4\xa7\x9ak\xbck\xb3'}]}]}]}]}, 0x8c}}, 0x0)

13:39:34 executing program 5:
openat$hpet(0xffffffffffffff9c, 0x0, 0x80002, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x38, &(0x7f0000000100)={@private0}, 0x14)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4)

13:39:34 executing program 2:
prctl$PR_SET_MM_MAP(0x23, 0x2, &(0x7f0000000780)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0}, 0x68)

13:39:34 executing program 1:
futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000040), 0xb2ffffff)

13:39:34 executing program 3:
openat$hpet(0xffffffffffffff9c, 0x0, 0x80002, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x38, &(0x7f0000000100)={@private0}, 0x14)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4)

13:39:34 executing program 4:
set_mempolicy(0x4, 0x0, 0x0)
r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0)
pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0)

13:39:34 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0)
write$P9_RREADLINK(r1, &(0x7f0000000440)=ANY=[], 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xa)
syz_open_dev$sg(0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0x7ffffffc)

13:39:34 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0)
write$P9_RREADLINK(r1, &(0x7f0000000440)=ANY=[], 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xa)
syz_open_dev$sg(0x0, 0x0, 0x0)
sendfile(r3, r0, 0x0, 0x7ffffffc)

13:39:34 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x8c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_WANTED={0x6c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5d, 0x2, ' \xcak\xd8=\xab\xad\xd3\x80 ?x-bv\x19i\x89\x1a(;\x92\xccs\f\xdd56\x17\xf8\xdc%\xc0\xd5NS\xc7\xd0\xa7(=\xcaC\x18B\xff5_\xaf}a\xd2\xc4\xf9TB\\Q\xce\x0eM\x04\xc1\xaf\xaa\xac\v\xc2G\x10\nb\xe2\xda\v+\xee\x91B\xb5(\xfa\xf4\xa7\x9ak\xbck\xb3'}]}]}]}]}, 0x8c}}, 0x0)

[   80.752794] futex_wake_op: syz-executor.1 tries to shift op by -1; fix this program
13:39:34 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x8c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_WANTED={0x6c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5d, 0x2, ' \xcak\xd8=\xab\xad\xd3\x80 ?x-bv\x19i\x89\x1a(;\x92\xccs\f\xdd56\x17\xf8\xdc%\xc0\xd5NS\xc7\xd0\xa7(=\xcaC\x18B\xff5_\xaf}a\xd2\xc4\xf9TB\\Q\xce\x0eM\x04\xc1\xaf\xaa\xac\v\xc2G\x10\nb\xe2\xda\v+\xee\x91B\xb5(\xfa\xf4\xa7\x9ak\xbck\xb3'}]}]}]}]}, 0x8c}}, 0x0)

13:39:34 executing program 2:
prctl$PR_SET_MM_MAP(0x23, 0x2, &(0x7f0000000780)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0}, 0x68)

13:39:34 executing program 3:
set_mempolicy(0x4, 0x0, 0x0)
r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0)
pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0)

13:39:34 executing program 5:
set_mempolicy(0x4, 0x0, 0x0)
r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0)
pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0)

13:39:34 executing program 1:
futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000040), 0xb2ffffff)

[   80.969939] futex_wake_op: syz-executor.1 tries to shift op by -1; fix this program
13:39:34 executing program 0:
perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x8c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_WANTED={0x6c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5d, 0x2, ' \xcak\xd8=\xab\xad\xd3\x80 ?x-bv\x19i\x89\x1a(;\x92\xccs\f\xdd56\x17\xf8\xdc%\xc0\xd5NS\xc7\xd0\xa7(=\xcaC\x18B\xff5_\xaf}a\xd2\xc4\xf9TB\\Q\xce\x0eM\x04\xc1\xaf\xaa\xac\v\xc2G\x10\nb\xe2\xda\v+\xee\x91B\xb5(\xfa\xf4\xa7\x9ak\xbck\xb3'}]}]}]}]}, 0x8c}}, 0x0)

13:39:34 executing program 2:
mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1)
mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000)

13:39:34 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000340)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0)

13:39:34 executing program 0:
shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000012c0)=""/83)

13:39:34 executing program 2:
mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1)
mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000)


VM DIAGNOSIS:
13:39:25  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81fbb5ff RDX=0000000000000063
RSI=ffff8880154c4bc0 RDI=0000000000000001 RBP=ffffffff843ccba0 RSP=ffff8880181bfa00
R8 =0000000000000001 R9 =ffff8880157b0106 R10=0000000000000020 R11=0000000000000001
R12=0000000000000005 R13=1ffff11003037f48 R14=0000000000000063 R15=ffffffff842732ad
RIP=ffffffff813f5b7f RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f3938527900 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2d224000 CR3=000000000d2e2000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=1a0d70ec6278ebbde9417c0059ab3dea
XMM02=6b1e99b806172e3b00000000000aea08 XMM03=375afdebbf381c810000000000124238
XMM04=acc29db9b9ca464e000000000013bb30 XMM05=3f2db7e55324e806000000000013b9d8
XMM06=ee428c51b66286d1000000000013b928 XMM07=d3fdd5f48436fbd700000000000aeab0
XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000
XMM10=20000000000000002000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000002 RBX=fffffffffffffffe RCX=1ffff1100fffb8b3 RDX=0000000000000014
RSI=0000000000000001 RDI=ffff88807ffdc598 RBP=ffff88807ffdc540 RSP=ffff88801d26f608
R8 =0000000000000000 R9 =ffffea0000f5ad47 R10=0000000000000000 R11=0000000000000001
R12=0000000000037a70 R13=ffffea0000f5ad40 R14=dffffc0000000000 R15=0000000000000109
RIP=ffffffff8159b0c6 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000003e000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000003c000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4860a67000 CR3=0000000004c26000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=000000000000000000000000000000ff
XMM02=000000000000000000000000000000ff XMM03=3d3d3d3d3d3d205d3031383833322e31
XMM04=76655f667265703d7373616c63742030 XMM05=7379733a755f6d65747379733d747865
XMM06=6b3a725f6d65747379733a755f6d6574 XMM07=00000000000000000000000000000000
XMM08=3d7373616c63742030733a745f646500 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000