[ OK ] Started OpenBSD Secure Shell server. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.57' (ECDSA) to the list of known hosts. 2021/10/12 22:26:39 fuzzer started 2021/10/12 22:26:39 dialing manager at 10.128.0.163:43145 2021/10/12 22:26:39 syscalls: 1981 2021/10/12 22:26:39 code coverage: enabled 2021/10/12 22:26:39 comparison tracing: enabled 2021/10/12 22:26:39 extra coverage: enabled 2021/10/12 22:26:39 setuid sandbox: enabled 2021/10/12 22:26:39 namespace sandbox: enabled 2021/10/12 22:26:39 Android sandbox: enabled 2021/10/12 22:26:39 fault injection: enabled 2021/10/12 22:26:39 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/10/12 22:26:39 net packet injection: /dev/net/tun does not exist 2021/10/12 22:26:39 net device setup: enabled 2021/10/12 22:26:39 concurrency sanitizer: enabled 2021/10/12 22:26:39 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/10/12 22:26:39 USB emulation: /dev/raw-gadget does not exist 2021/10/12 22:26:39 hci packet injection: /dev/vhci does not exist 2021/10/12 22:26:39 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 2021/10/12 22:26:39 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist syzkaller login: [ 15.374740][ T1109] cgroup: Unknown subsys name 'net' [ 15.376376][ T1109] cgroup: Unknown subsys name 'net_cls' [ 15.377512][ T1109] cgroup: Unknown subsys name 'net_prio' [ 15.379066][ T1109] cgroup: Unknown subsys name 'devices' [ 15.380010][ T1109] cgroup: Unknown subsys name 'blkio' [ 15.381475][ T1109] cgroup: Unknown subsys name 'perf_event' [ 15.382399][ T1109] cgroup: Unknown subsys name 'hugetlb' [ 15.383269][ T1109] cgroup: Unknown subsys name 'rlimit' 2021/10/12 22:26:40 suppressing KCSAN reports in functions: '__xa_clear_mark' 'alloc_pid' 'lookup_fast' 'dd_has_work' 'do_select' 'ext4_writepages' 'blk_mq_rq_ctx_init' 'do_sys_poll' '__find_get_block' 'ext4_mpage_readpages' 'ext4_mark_iloc_dirty' 'tick_nohz_next_event' 2021/10/12 22:26:40 fetching corpus: 0, signal 0/2000 (executing program) 2021/10/12 22:26:40 fetching corpus: 50, signal 10470/14178 (executing program) 2021/10/12 22:26:40 fetching corpus: 100, signal 19159/24302 (executing program) 2021/10/12 22:26:40 fetching corpus: 150, signal 22691/29364 (executing program) 2021/10/12 22:26:40 fetching corpus: 200, signal 25309/33437 (executing program) 2021/10/12 22:26:40 fetching corpus: 250, signal 28352/37826 (executing program) 2021/10/12 22:26:40 fetching corpus: 300, signal 30334/41188 (executing program) 2021/10/12 22:26:40 fetching corpus: 350, signal 33032/45093 (executing program) 2021/10/12 22:26:40 fetching corpus: 400, signal 36039/49207 (executing program) 2021/10/12 22:26:40 fetching corpus: 450, signal 37682/52093 (executing program) 2021/10/12 22:26:40 fetching corpus: 500, signal 39548/55119 (executing program) 2021/10/12 22:26:40 fetching corpus: 550, signal 40923/57642 (executing program) 2021/10/12 22:26:40 fetching corpus: 600, signal 43004/60719 (executing program) 2021/10/12 22:26:40 fetching corpus: 650, signal 44550/63256 (executing program) 2021/10/12 22:26:40 fetching corpus: 700, signal 46653/66238 (executing program) 2021/10/12 22:26:40 fetching corpus: 750, signal 48073/68638 (executing program) 2021/10/12 22:26:40 fetching corpus: 800, signal 49352/70814 (executing program) 2021/10/12 22:26:40 fetching corpus: 849, signal 50430/72879 (executing program) 2021/10/12 22:26:40 fetching corpus: 899, signal 51498/74860 (executing program) 2021/10/12 22:26:40 fetching corpus: 949, signal 52819/76980 (executing program) 2021/10/12 22:26:40 fetching corpus: 999, signal 53819/78886 (executing program) 2021/10/12 22:26:40 fetching corpus: 1049, signal 55905/81486 (executing program) 2021/10/12 22:26:40 fetching corpus: 1099, signal 57346/83581 (executing program) 2021/10/12 22:26:40 fetching corpus: 1149, signal 58088/85214 (executing program) 2021/10/12 22:26:41 fetching corpus: 1199, signal 59582/87231 (executing program) 2021/10/12 22:26:41 fetching corpus: 1249, signal 60998/89206 (executing program) 2021/10/12 22:26:41 fetching corpus: 1299, signal 61534/90582 (executing program) 2021/10/12 22:26:41 fetching corpus: 1349, signal 62474/92201 (executing program) 2021/10/12 22:26:41 fetching corpus: 1399, signal 63607/93927 (executing program) 2021/10/12 22:26:41 fetching corpus: 1449, signal 64542/95521 (executing program) 2021/10/12 22:26:41 fetching corpus: 1499, signal 65489/97044 (executing program) 2021/10/12 22:26:41 fetching corpus: 1549, signal 66115/98412 (executing program) 2021/10/12 22:26:41 fetching corpus: 1599, signal 66800/99757 (executing program) 2021/10/12 22:26:41 fetching corpus: 1649, signal 67570/101136 (executing program) 2021/10/12 22:26:41 fetching corpus: 1699, signal 68672/102666 (executing program) 2021/10/12 22:26:41 fetching corpus: 1749, signal 69479/103999 (executing program) 2021/10/12 22:26:41 fetching corpus: 1799, signal 70002/105194 (executing program) 2021/10/12 22:26:41 fetching corpus: 1849, signal 70844/106480 (executing program) 2021/10/12 22:26:41 fetching corpus: 1899, signal 71441/107666 (executing program) 2021/10/12 22:26:41 fetching corpus: 1949, signal 72174/108932 (executing program) 2021/10/12 22:26:41 fetching corpus: 1999, signal 73295/110283 (executing program) 2021/10/12 22:26:41 fetching corpus: 2049, signal 74054/111494 (executing program) 2021/10/12 22:26:41 fetching corpus: 2099, signal 74469/112500 (executing program) 2021/10/12 22:26:41 fetching corpus: 2149, signal 75007/113602 (executing program) 2021/10/12 22:26:41 fetching corpus: 2199, signal 75704/114669 (executing program) 2021/10/12 22:26:41 fetching corpus: 2249, signal 77371/115997 (executing program) 2021/10/12 22:26:41 fetching corpus: 2299, signal 77976/117034 (executing program) 2021/10/12 22:26:41 fetching corpus: 2349, signal 78565/118051 (executing program) 2021/10/12 22:26:41 fetching corpus: 2399, signal 79282/119071 (executing program) 2021/10/12 22:26:41 fetching corpus: 2449, signal 79673/120014 (executing program) 2021/10/12 22:26:41 fetching corpus: 2499, signal 80346/120995 (executing program) 2021/10/12 22:26:41 fetching corpus: 2549, signal 80794/121908 (executing program) 2021/10/12 22:26:41 fetching corpus: 2599, signal 81441/122830 (executing program) 2021/10/12 22:26:41 fetching corpus: 2649, signal 82064/123748 (executing program) 2021/10/12 22:26:41 fetching corpus: 2699, signal 82955/124683 (executing program) 2021/10/12 22:26:42 fetching corpus: 2749, signal 83464/125506 (executing program) 2021/10/12 22:26:42 fetching corpus: 2799, signal 83976/126299 (executing program) 2021/10/12 22:26:42 fetching corpus: 2849, signal 84547/127091 (executing program) 2021/10/12 22:26:42 fetching corpus: 2899, signal 85111/127839 (executing program) 2021/10/12 22:26:42 fetching corpus: 2949, signal 85656/128608 (executing program) 2021/10/12 22:26:42 fetching corpus: 2999, signal 86294/129391 (executing program) 2021/10/12 22:26:42 fetching corpus: 3049, signal 86686/130162 (executing program) 2021/10/12 22:26:42 fetching corpus: 3099, signal 87323/130914 (executing program) 2021/10/12 22:26:42 fetching corpus: 3149, signal 87922/131648 (executing program) 2021/10/12 22:26:42 fetching corpus: 3199, signal 88388/132379 (executing program) 2021/10/12 22:26:42 fetching corpus: 3249, signal 88966/133092 (executing program) 2021/10/12 22:26:42 fetching corpus: 3299, signal 89303/133484 (executing program) 2021/10/12 22:26:42 fetching corpus: 3349, signal 89718/133484 (executing program) 2021/10/12 22:26:42 fetching corpus: 3399, signal 90054/133484 (executing program) 2021/10/12 22:26:42 fetching corpus: 3449, signal 90480/133484 (executing program) 2021/10/12 22:26:42 fetching corpus: 3499, signal 91493/133485 (executing program) 2021/10/12 22:26:42 fetching corpus: 3547, signal 91822/133485 (executing program) 2021/10/12 22:26:42 fetching corpus: 3597, signal 92063/133485 (executing program) 2021/10/12 22:26:42 fetching corpus: 3647, signal 92769/133485 (executing program) 2021/10/12 22:26:42 fetching corpus: 3697, signal 93321/133485 (executing program) 2021/10/12 22:26:42 fetching corpus: 3747, signal 93947/133486 (executing program) 2021/10/12 22:26:42 fetching corpus: 3797, signal 94464/133489 (executing program) 2021/10/12 22:26:42 fetching corpus: 3847, signal 95231/133490 (executing program) 2021/10/12 22:26:42 fetching corpus: 3897, signal 95735/133499 (executing program) 2021/10/12 22:26:42 fetching corpus: 3947, signal 96256/133499 (executing program) 2021/10/12 22:26:42 fetching corpus: 3997, signal 96675/133500 (executing program) 2021/10/12 22:26:42 fetching corpus: 4047, signal 97150/133502 (executing program) 2021/10/12 22:26:42 fetching corpus: 4097, signal 97562/133573 (executing program) 2021/10/12 22:26:42 fetching corpus: 4147, signal 98155/133573 (executing program) 2021/10/12 22:26:42 fetching corpus: 4197, signal 98481/133573 (executing program) 2021/10/12 22:26:42 fetching corpus: 4247, signal 98888/133573 (executing program) 2021/10/12 22:26:42 fetching corpus: 4297, signal 99313/133573 (executing program) 2021/10/12 22:26:42 fetching corpus: 4347, signal 99832/133573 (executing program) 2021/10/12 22:26:42 fetching corpus: 4397, signal 100266/133573 (executing program) 2021/10/12 22:26:42 fetching corpus: 4447, signal 100765/133575 (executing program) 2021/10/12 22:26:43 fetching corpus: 4497, signal 101291/133575 (executing program) 2021/10/12 22:26:43 fetching corpus: 4547, signal 101607/133575 (executing program) 2021/10/12 22:26:43 fetching corpus: 4597, signal 102115/133575 (executing program) 2021/10/12 22:26:43 fetching corpus: 4647, signal 102534/133575 (executing program) 2021/10/12 22:26:43 fetching corpus: 4697, signal 102955/133587 (executing program) 2021/10/12 22:26:43 fetching corpus: 4747, signal 103369/133587 (executing program) 2021/10/12 22:26:43 fetching corpus: 4797, signal 103727/133587 (executing program) 2021/10/12 22:26:43 fetching corpus: 4847, signal 104146/133587 (executing program) 2021/10/12 22:26:43 fetching corpus: 4897, signal 104567/133587 (executing program) 2021/10/12 22:26:43 fetching corpus: 4947, signal 104867/133587 (executing program) 2021/10/12 22:26:43 fetching corpus: 4997, signal 105518/133587 (executing program) 2021/10/12 22:26:43 fetching corpus: 5047, signal 105778/133587 (executing program) 2021/10/12 22:26:43 fetching corpus: 5097, signal 106091/133587 (executing program) 2021/10/12 22:26:43 fetching corpus: 5147, signal 106473/133587 (executing program) 2021/10/12 22:26:43 fetching corpus: 5197, signal 106855/133587 (executing program) 2021/10/12 22:26:43 fetching corpus: 5247, signal 107130/133587 (executing program) 2021/10/12 22:26:43 fetching corpus: 5297, signal 107485/133593 (executing program) 2021/10/12 22:26:43 fetching corpus: 5347, signal 107863/133593 (executing program) 2021/10/12 22:26:43 fetching corpus: 5397, signal 108279/133593 (executing program) 2021/10/12 22:26:43 fetching corpus: 5447, signal 108614/133593 (executing program) 2021/10/12 22:26:43 fetching corpus: 5497, signal 108898/133593 (executing program) 2021/10/12 22:26:43 fetching corpus: 5547, signal 109281/133593 (executing program) 2021/10/12 22:26:43 fetching corpus: 5597, signal 109631/133593 (executing program) 2021/10/12 22:26:43 fetching corpus: 5647, signal 109929/133593 (executing program) 2021/10/12 22:26:43 fetching corpus: 5697, signal 110174/133593 (executing program) 2021/10/12 22:26:43 fetching corpus: 5747, signal 110545/133593 (executing program) 2021/10/12 22:26:43 fetching corpus: 5797, signal 110875/133593 (executing program) 2021/10/12 22:26:43 fetching corpus: 5847, signal 111125/133593 (executing program) 2021/10/12 22:26:43 fetching corpus: 5897, signal 111555/133593 (executing program) 2021/10/12 22:26:43 fetching corpus: 5947, signal 111947/133593 (executing program) 2021/10/12 22:26:43 fetching corpus: 5997, signal 112166/133593 (executing program) 2021/10/12 22:26:43 fetching corpus: 6047, signal 112459/133593 (executing program) 2021/10/12 22:26:44 fetching corpus: 6097, signal 112675/133593 (executing program) 2021/10/12 22:26:44 fetching corpus: 6147, signal 113063/133593 (executing program) 2021/10/12 22:26:44 fetching corpus: 6197, signal 113408/133595 (executing program) 2021/10/12 22:26:44 fetching corpus: 6247, signal 113706/133595 (executing program) 2021/10/12 22:26:44 fetching corpus: 6297, signal 114345/133595 (executing program) 2021/10/12 22:26:44 fetching corpus: 6347, signal 114574/133595 (executing program) 2021/10/12 22:26:44 fetching corpus: 6397, signal 114884/133595 (executing program) 2021/10/12 22:26:44 fetching corpus: 6447, signal 115897/133595 (executing program) 2021/10/12 22:26:44 fetching corpus: 6497, signal 116277/133604 (executing program) 2021/10/12 22:26:44 fetching corpus: 6547, signal 116526/133604 (executing program) 2021/10/12 22:26:44 fetching corpus: 6597, signal 116892/133604 (executing program) 2021/10/12 22:26:44 fetching corpus: 6647, signal 117152/133604 (executing program) 2021/10/12 22:26:44 fetching corpus: 6697, signal 117358/133604 (executing program) 2021/10/12 22:26:44 fetching corpus: 6747, signal 117600/133606 (executing program) 2021/10/12 22:26:44 fetching corpus: 6797, signal 118138/133606 (executing program) 2021/10/12 22:26:44 fetching corpus: 6847, signal 118603/133607 (executing program) 2021/10/12 22:26:44 fetching corpus: 6897, signal 118964/133607 (executing program) 2021/10/12 22:26:44 fetching corpus: 6947, signal 119314/133607 (executing program) 2021/10/12 22:26:44 fetching corpus: 6997, signal 119512/133607 (executing program) 2021/10/12 22:26:44 fetching corpus: 7047, signal 120317/133607 (executing program) 2021/10/12 22:26:44 fetching corpus: 7097, signal 120581/133616 (executing program) 2021/10/12 22:26:44 fetching corpus: 7147, signal 120825/133616 (executing program) 2021/10/12 22:26:44 fetching corpus: 7197, signal 121238/133616 (executing program) 2021/10/12 22:26:44 fetching corpus: 7247, signal 121782/133617 (executing program) 2021/10/12 22:26:44 fetching corpus: 7297, signal 122067/133617 (executing program) 2021/10/12 22:26:44 fetching corpus: 7347, signal 122452/133617 (executing program) 2021/10/12 22:26:44 fetching corpus: 7397, signal 122642/133620 (executing program) 2021/10/12 22:26:44 fetching corpus: 7447, signal 123163/133620 (executing program) 2021/10/12 22:26:44 fetching corpus: 7497, signal 123730/133620 (executing program) 2021/10/12 22:26:44 fetching corpus: 7547, signal 123952/133623 (executing program) 2021/10/12 22:26:44 fetching corpus: 7597, signal 124403/133623 (executing program) 2021/10/12 22:26:44 fetching corpus: 7647, signal 124667/133623 (executing program) 2021/10/12 22:26:44 fetching corpus: 7697, signal 124903/133623 (executing program) 2021/10/12 22:26:44 fetching corpus: 7747, signal 125118/133632 (executing program) 2021/10/12 22:26:45 fetching corpus: 7797, signal 125357/133632 (executing program) 2021/10/12 22:26:45 fetching corpus: 7847, signal 125559/133632 (executing program) 2021/10/12 22:26:45 fetching corpus: 7897, signal 126071/133632 (executing program) 2021/10/12 22:26:45 fetching corpus: 7947, signal 126256/133632 (executing program) 2021/10/12 22:26:45 fetching corpus: 7997, signal 126515/133632 (executing program) 2021/10/12 22:26:45 fetching corpus: 8047, signal 126786/133632 (executing program) 2021/10/12 22:26:45 fetching corpus: 8097, signal 126940/133632 (executing program) 2021/10/12 22:26:45 fetching corpus: 8147, signal 127190/133632 (executing program) 2021/10/12 22:26:45 fetching corpus: 8197, signal 127429/133632 (executing program) 2021/10/12 22:26:45 fetching corpus: 8247, signal 127601/133636 (executing program) 2021/10/12 22:26:45 fetching corpus: 8297, signal 127871/133636 (executing program) 2021/10/12 22:26:45 fetching corpus: 8347, signal 128244/133636 (executing program) 2021/10/12 22:26:45 fetching corpus: 8397, signal 128530/133636 (executing program) 2021/10/12 22:26:45 fetching corpus: 8447, signal 128682/133636 (executing program) 2021/10/12 22:26:45 fetching corpus: 8497, signal 129006/133636 (executing program) 2021/10/12 22:26:45 fetching corpus: 8545, signal 129225/133636 (executing program) 2021/10/12 22:26:45 fetching corpus: 8594, signal 129463/133636 (executing program) 2021/10/12 22:26:45 fetching corpus: 8644, signal 129736/133636 (executing program) 2021/10/12 22:26:45 fetching corpus: 8694, signal 130323/133638 (executing program) 2021/10/12 22:26:45 fetching corpus: 8744, signal 130535/133638 (executing program) 2021/10/12 22:26:45 fetching corpus: 8794, signal 130919/133638 (executing program) 2021/10/12 22:26:45 fetching corpus: 8844, signal 131123/133638 (executing program) 2021/10/12 22:26:45 fetching corpus: 8894, signal 131407/133638 (executing program) 2021/10/12 22:26:45 fetching corpus: 8944, signal 131669/133638 (executing program) 2021/10/12 22:26:45 fetching corpus: 8994, signal 131917/133638 (executing program) 2021/10/12 22:26:45 fetching corpus: 9012, signal 132010/133642 (executing program) 2021/10/12 22:26:45 fetching corpus: 9012, signal 132010/133642 (executing program) 2021/10/12 22:26:47 starting 6 fuzzer processes 22:26:47 executing program 0: r0 = io_uring_setup(0x4783, &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x8000000) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) 22:26:47 executing program 1: io_setup(0x3, &(0x7f0000000000)) io_setup(0x7b, &(0x7f00000007c0)=0x0) io_destroy(r0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) io_submit(r0, 0x0, 0x0) 22:26:47 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000400)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@tmpl={0x44, 0x5, [{{@in=@multicast1, 0x0, 0x6c}, 0x0, @in6=@mcast1}]}]}, 0xfc}}, 0x0) 22:26:47 executing program 2: syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 22:26:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000480)="390000001300110468fe0700000000000000ff3f020000003b0a0001000000000e002b000a00020014a4ee", 0x2b}, {&(0x7f0000000400)="16fab5f277968322a0219da7208e", 0xe}], 0x2) 22:26:47 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) write(r0, &(0x7f00000004c0)='/', 0x1) sendfile(r0, r0, &(0x7f0000000200), 0x87) sendfile(r0, r0, &(0x7f0000000480), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') [ 22.788771][ T22] audit: type=1400 audit(1634077607.183:8): avc: denied { execmem } for pid=1116 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:26:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000480)="390000001300110468fe0700000000000000ff3f020000003b0a0001000000000e002b000a00020014a4ee", 0x2b}, {&(0x7f0000000400)="16fab5f277968322a0219da7208e", 0xe}], 0x2) [ 26.876989][ T3789] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 26.890107][ T3789] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:26:51 executing program 0: r0 = io_uring_setup(0x4783, &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x8000000) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) 22:26:51 executing program 0: r0 = io_uring_setup(0x4783, &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x8000000) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) 22:26:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000480)="390000001300110468fe0700000000000000ff3f020000003b0a0001000000000e002b000a00020014a4ee", 0x2b}, {&(0x7f0000000400)="16fab5f277968322a0219da7208e", 0xe}], 0x2) [ 26.952937][ T3822] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 26.962173][ T3822] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:26:51 executing program 0: r0 = io_uring_setup(0x4783, &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x8000000) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) [ 27.029734][ T3850] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 27.038994][ T3850] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:26:51 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000146000/0x3000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1800) 22:26:51 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) write(r0, &(0x7f00000004c0)='/', 0x1) sendfile(r0, r0, &(0x7f0000000200), 0x87) sendfile(r0, r0, &(0x7f0000000480), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') [ 27.180659][ C0] hrtimer: interrupt took 38695 ns 22:26:51 executing program 1: r0 = getpid() perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 22:26:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000480)="390000001300110468fe0700000000000000ff3f020000003b0a0001000000000e002b000a00020014a4ee", 0x2b}, {&(0x7f0000000400)="16fab5f277968322a0219da7208e", 0xe}], 0x2) [ 27.351280][ T3902] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 27.360517][ T3902] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 22:26:51 executing program 2: syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 22:26:51 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000146000/0x3000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1800) 22:26:51 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) write(r0, &(0x7f00000004c0)='/', 0x1) sendfile(r0, r0, &(0x7f0000000200), 0x87) sendfile(r0, r0, &(0x7f0000000480), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') 22:26:51 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000400)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@tmpl={0x44, 0x5, [{{@in=@multicast1, 0x0, 0x6c}, 0x0, @in6=@mcast1}]}]}, 0xfc}}, 0x0) 22:26:51 executing program 3: unshare(0x40000000) r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="240000002d0007031dfffd946fa201000100000001000000000000e50c1be3a2f7fffe7e", 0x24}], 0x1}, 0x0) 22:26:51 executing program 1: r0 = getpid() perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 22:26:51 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000400)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@tmpl={0x44, 0x5, [{{@in=@multicast1, 0x0, 0x6c}, 0x0, @in6=@mcast1}]}]}, 0xfc}}, 0x0) 22:26:51 executing program 1: r0 = getpid() perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 22:26:51 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000146000/0x3000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1800) 22:26:51 executing program 1: r0 = getpid() perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 22:26:51 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) write(r0, &(0x7f00000004c0)='/', 0x1) sendfile(r0, r0, &(0x7f0000000200), 0x87) sendfile(r0, r0, &(0x7f0000000480), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') 22:26:51 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000400)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@tmpl={0x44, 0x5, [{{@in=@multicast1, 0x0, 0x6c}, 0x0, @in6=@mcast1}]}]}, 0xfc}}, 0x0) 22:26:52 executing program 2: syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 22:26:52 executing program 3: unshare(0x40000000) r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="240000002d0007031dfffd946fa201000100000001000000000000e50c1be3a2f7fffe7e", 0x24}], 0x1}, 0x0) 22:26:52 executing program 1: r0 = getpid() perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 22:26:52 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) inotify_add_watch(r0, 0x0, 0xf100028d) 22:26:52 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000146000/0x3000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x1c) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @empty}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1800) 22:26:52 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.upper\x00', &(0x7f0000000100)=""/1, 0x1) 22:26:52 executing program 1: r0 = getpid() perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 22:26:52 executing program 0: sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) 22:26:52 executing program 3: unshare(0x40000000) r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="240000002d0007031dfffd946fa201000100000001000000000000e50c1be3a2f7fffe7e", 0x24}], 0x1}, 0x0) 22:26:52 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) inotify_add_watch(r0, 0x0, 0xf100028d) 22:26:52 executing program 1: r0 = getpid() perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 22:26:52 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0, 0x0) 22:26:52 executing program 2: syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 22:26:52 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) inotify_add_watch(r0, 0x0, 0xf100028d) 22:26:52 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000000)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e) r1 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="24000000190003041dfffd946f610500020c000a1f05fe060c10080008000f00ff00c00e", 0x24}], 0x1}, 0x0) 22:26:52 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0, 0x0) 22:26:52 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000180)) 22:26:52 executing program 3: unshare(0x40000000) r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="240000002d0007031dfffd946fa201000100000001000000000000e50c1be3a2f7fffe7e", 0x24}], 0x1}, 0x0) 22:26:52 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) inotify_add_watch(r0, 0x0, 0xf100028d) 22:26:52 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000000)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e) r1 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="24000000190003041dfffd946f610500020c000a1f05fe060c10080008000f00ff00c00e", 0x24}], 0x1}, 0x0) 22:26:52 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0, 0x0) 22:26:52 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000180)) 22:26:52 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000600)={0x1, &(0x7f00000005c0)=[{0xffff}]}) 22:26:52 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000000)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e) r1 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="24000000190003041dfffd946f610500020c000a1f05fe060c10080008000f00ff00c00e", 0x24}], 0x1}, 0x0) 22:26:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x3d}, {0x5c}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 22:26:53 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000180)) 22:26:53 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0, 0x0) 22:26:53 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000600)={0x1, &(0x7f00000005c0)=[{0xffff}]}) 22:26:53 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000000)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2e) r1 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="24000000190003041dfffd946f610500020c000a1f05fe060c10080008000f00ff00c00e", 0x24}], 0x1}, 0x0) 22:26:53 executing program 2: setitimer(0x0, &(0x7f0000000700)={{}, {0xc600000000000000}}, 0x0) 22:26:53 executing program 2: setitimer(0x0, &(0x7f0000000700)={{}, {0xc600000000000000}}, 0x0) 22:26:53 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000600)={0x1, &(0x7f00000005c0)=[{0xffff}]}) 22:26:53 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 22:26:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x3d}, {0x5c}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 22:26:53 executing program 2: setitimer(0x0, &(0x7f0000000700)={{}, {0xc600000000000000}}, 0x0) 22:26:53 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000180)) 22:26:53 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000240)=0x7, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) connect$unix(r0, &(0x7f0000000040)=@abs={0x1}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 22:26:53 executing program 2: setitimer(0x0, &(0x7f0000000700)={{}, {0xc600000000000000}}, 0x0) 22:26:53 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000600)={0x1, &(0x7f00000005c0)=[{0xffff}]}) 22:26:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x3d}, {0x5c}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 22:26:53 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 22:26:53 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f00000001c0)="53000000fcffffff02040020000000002000002000000040e1972192570855007a1bbf8aebef7a082ecab50cfb531e871dbe7ae8b1d703b46a2d3e5dec194e4d6efb07849901c1abe961f54e8657b5ddb39ca6e7cbf638b8", 0x58}], 0x2) 22:26:53 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000240)=0x7, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) connect$unix(r0, &(0x7f0000000040)=@abs={0x1}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 22:26:53 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000240)=0x7, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) connect$unix(r0, &(0x7f0000000040)=@abs={0x1}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 22:26:53 executing program 2: unshare(0x40000400) setresuid(0xffffffffffffffff, 0xee01, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) 22:26:53 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 22:26:53 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000240)=0x7, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) connect$unix(r0, &(0x7f0000000040)=@abs={0x1}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 22:26:53 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f00000001c0)="53000000fcffffff02040020000000002000002000000040e1972192570855007a1bbf8aebef7a082ecab50cfb531e871dbe7ae8b1d703b46a2d3e5dec194e4d6efb07849901c1abe961f54e8657b5ddb39ca6e7cbf638b8", 0x58}], 0x2) 22:26:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x3d}, {0x5c}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 22:26:53 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000240)=0x7, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) connect$unix(r0, &(0x7f0000000040)=@abs={0x1}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 22:26:53 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x54216}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) pselect6(0x7000000, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) timer_settime(r2, 0x1, 0x0, &(0x7f0000000240)) 22:26:53 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000240)=0x7, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) connect$unix(r0, &(0x7f0000000040)=@abs={0x1}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 22:26:53 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 22:26:53 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f00000001c0)="53000000fcffffff02040020000000002000002000000040e1972192570855007a1bbf8aebef7a082ecab50cfb531e871dbe7ae8b1d703b46a2d3e5dec194e4d6efb07849901c1abe961f54e8657b5ddb39ca6e7cbf638b8", 0x58}], 0x2) 22:26:53 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000240)=0x7, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) connect$unix(r0, &(0x7f0000000040)=@abs={0x1}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 22:26:53 executing program 2: unshare(0x40000400) setresuid(0xffffffffffffffff, 0xee01, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) 22:26:53 executing program 0: unshare(0x40000400) setresuid(0xffffffffffffffff, 0xee01, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) 22:26:53 executing program 4: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x41000106) mknod(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 22:26:53 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x5) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="ae88bff8240200005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f00000001c0)="53000000fcffffff02040020000000002000002000000040e1972192570855007a1bbf8aebef7a082ecab50cfb531e871dbe7ae8b1d703b46a2d3e5dec194e4d6efb07849901c1abe961f54e8657b5ddb39ca6e7cbf638b8", 0x58}], 0x2) 22:26:53 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x8101, 0x0) pwrite64(r0, &(0x7f0000000000)='\\', 0x1, 0x0) 22:26:53 executing program 4: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x41000106) mknod(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 22:26:53 executing program 2: unshare(0x40000400) setresuid(0xffffffffffffffff, 0xee01, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) 22:26:54 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x54216}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) pselect6(0x7000000, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) timer_settime(r2, 0x1, 0x0, &(0x7f0000000240)) 22:26:54 executing program 0: unshare(0x40000400) setresuid(0xffffffffffffffff, 0xee01, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) 22:26:54 executing program 1: open(&(0x7f00000000c0)='./file0\x00', 0xb9ff, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x202, 0x0) fcntl$setlease(r0, 0x400, 0x1) 22:26:54 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x8101, 0x0) pwrite64(r0, &(0x7f0000000000)='\\', 0x1, 0x0) 22:26:54 executing program 4: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x41000106) mknod(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 22:26:54 executing program 2: unshare(0x40000400) setresuid(0xffffffffffffffff, 0xee01, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) 22:26:54 executing program 0: unshare(0x40000400) setresuid(0xffffffffffffffff, 0xee01, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) 22:26:54 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x8101, 0x0) pwrite64(r0, &(0x7f0000000000)='\\', 0x1, 0x0) 22:26:54 executing program 2: r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1) 22:26:54 executing program 1: open(&(0x7f00000000c0)='./file0\x00', 0xb9ff, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x202, 0x0) fcntl$setlease(r0, 0x400, 0x1) 22:26:54 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x8101, 0x0) pwrite64(r0, &(0x7f0000000000)='\\', 0x1, 0x0) 22:26:54 executing program 4: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x41000106) mknod(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 22:26:54 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x54216}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) pselect6(0x7000000, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) timer_settime(r2, 0x1, 0x0, &(0x7f0000000240)) 22:26:54 executing program 2: r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1) 22:26:54 executing program 1: open(&(0x7f00000000c0)='./file0\x00', 0xb9ff, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x202, 0x0) fcntl$setlease(r0, 0x400, 0x1) 22:26:54 executing program 0: open(&(0x7f00000000c0)='./file0\x00', 0xb9ff, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x202, 0x0) fcntl$setlease(r0, 0x400, 0x1) 22:26:54 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x43c7, 0x0, "d7312e7aaffc4a33"}) 22:26:54 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000280)) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/95, 0x5f}], 0x1, 0x8000, 0x0) 22:26:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000), 0x8) getsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, &(0x7f0000000080)) 22:26:55 executing program 1: open(&(0x7f00000000c0)='./file0\x00', 0xb9ff, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x202, 0x0) fcntl$setlease(r0, 0x400, 0x1) 22:26:55 executing program 2: r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1) 22:26:55 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000280)) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/95, 0x5f}], 0x1, 0x8000, 0x0) 22:26:55 executing program 0: open(&(0x7f00000000c0)='./file0\x00', 0xb9ff, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x202, 0x0) fcntl$setlease(r0, 0x400, 0x1) 22:26:55 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000280)) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/95, 0x5f}], 0x1, 0x8000, 0x0) 22:26:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000), 0x8) getsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, &(0x7f0000000080)) 22:26:55 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x54216}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000200)) pselect6(0x7000000, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x4, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) timer_settime(r2, 0x1, 0x0, &(0x7f0000000240)) 22:26:55 executing program 2: r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x45) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1) 22:26:55 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000280)) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/95, 0x5f}], 0x1, 0x8000, 0x0) 22:26:55 executing program 0: open(&(0x7f00000000c0)='./file0\x00', 0xb9ff, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x202, 0x0) fcntl$setlease(r0, 0x400, 0x1) 22:26:55 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000280)) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/95, 0x5f}], 0x1, 0x8000, 0x0) 22:26:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000), 0x8) getsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, &(0x7f0000000080)) 22:26:55 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000280)) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/95, 0x5f}], 0x1, 0x8000, 0x0) 22:26:55 executing program 2: r0 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x0) setreuid(0x0, 0xee00) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 22:26:55 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000280)) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/95, 0x5f}], 0x1, 0x8000, 0x0) 22:26:55 executing program 0: socket$inet6(0x11, 0x80e, 0x0) 22:26:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000), 0x8) getsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, &(0x7f0000000080)) 22:26:56 executing program 0: socket$inet6(0x11, 0x80e, 0x0) 22:26:56 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000e40)=ANY=[], 0x1378) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r3, 0x2, &(0x7f0000000100)=[&(0x7f0000001680)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000140)='\x00', 0x1}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x7, 0x0, r2, 0x0}]) 22:26:56 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr\x00') getdents64(r0, &(0x7f0000000080)=""/60, 0x65) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) getdents(r0, &(0x7f0000000100)=""/80, 0x50) 22:26:56 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) close(r0) socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) shutdown(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)={0x77540947ad9a168d}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) 22:26:56 executing program 0: socket$inet6(0x11, 0x80e, 0x0) 22:26:56 executing program 2: r0 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x0) setreuid(0x0, 0xee00) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 22:26:56 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x44}, {0x3c}, {0x6}]}) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 22:26:57 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr\x00') getdents64(r0, &(0x7f0000000080)=""/60, 0x65) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) getdents(r0, &(0x7f0000000100)=""/80, 0x50) 22:26:57 executing program 0: socket$inet6(0x11, 0x80e, 0x0) [ 32.593534][ T22] audit: type=1326 audit(1634077616.996:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=4372 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f360abc9a79 code=0x0 22:26:57 executing program 2: r0 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x0) setreuid(0x0, 0xee00) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 22:26:57 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr\x00') getdents64(r0, &(0x7f0000000080)=""/60, 0x65) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) getdents(r0, &(0x7f0000000100)=""/80, 0x50) 22:26:57 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TEE, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x3f79, 0x0, 0x0, 0x0, 0x0) 22:26:57 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000e40)=ANY=[], 0x1378) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r3, 0x2, &(0x7f0000000100)=[&(0x7f0000001680)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000140)='\x00', 0x1}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x7, 0x0, r2, 0x0}]) 22:26:57 executing program 2: r0 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x0) setreuid(0x0, 0xee00) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) [ 32.702964][ T22] audit: type=1400 audit(1634077617.026:10): avc: denied { block_suspend } for pid=4370 comm="syz-executor.4" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 22:26:57 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) close(r0) socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) shutdown(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)={0x77540947ad9a168d}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) 22:26:57 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TEE, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x3f79, 0x0, 0x0, 0x0, 0x0) 22:26:57 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x10034) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, &(0x7f0000000240), 0x0, 0x0) 22:26:57 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr\x00') getdents64(r0, &(0x7f0000000080)=""/60, 0x65) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) getdents(r0, &(0x7f0000000100)=""/80, 0x50) [ 33.415566][ T22] audit: type=1326 audit(1634077617.817:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=4372 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f360abc9a79 code=0x0 22:26:57 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x44}, {0x3c}, {0x6}]}) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 22:26:57 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000e40)=ANY=[], 0x1378) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r3, 0x2, &(0x7f0000000100)=[&(0x7f0000001680)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000140)='\x00', 0x1}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x7, 0x0, r2, 0x0}]) 22:26:57 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) close(r0) socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) shutdown(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)={0x77540947ad9a168d}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) 22:26:57 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x10034) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, &(0x7f0000000240), 0x0, 0x0) 22:26:57 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TEE, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x3f79, 0x0, 0x0, 0x0, 0x0) 22:26:57 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x10034) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, &(0x7f0000000240), 0x0, 0x0) [ 33.508190][ T22] audit: type=1326 audit(1634077617.907:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=4440 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f360abc9a79 code=0x0 22:26:57 executing program 0: r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TEE, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x3f79, 0x0, 0x0, 0x0, 0x0) 22:26:57 executing program 2: unshare(0x8000400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x10034) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, &(0x7f0000000240), 0x0, 0x0) 22:26:58 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) close(r0) socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) shutdown(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)={0x77540947ad9a168d}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) 22:26:58 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000002c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130005470fbb65e1c3e4ffff06006000020000005600000025000000190004000400000007fd17e5ff8e060604", 0x31}], 0x1) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000040)=""/3, 0x3}], 0x3, 0x0, 0xe0, 0x0) tkill(r0, 0x3c) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xf7, &(0x7f0000000300)="f41870da7cfeb6d40dd54103666c6a09000000000000005fa727fce7c4dee12f4b9c88ef6e01cf152c88e9d45bf59de8018e21f6ffffff7fda33e9355355ee04c36f5f232b322da5130db35fb21c8e4ce790a89635571192ba259aaf41d0bd04ab1b732f639f3f7892c9a4551efa467c965937c82b26708c2dd6c641bb820df1cf00e0d86544daec9adb79461e72d1b10572c652fc6a3703f438244cedad46cd80a4511b2afc0d195ab0e0c642ead215f9565b9ee9a3e3237a80eb0662994ab263339fb096b3534cababb2da4faca6a10456d0ca113d43750992ec53f382f7c5cb53af9d6760a01d39d72087f7dc9e75d5f665b1c37924"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:26:58 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000e40)=ANY=[], 0x1378) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r3, 0x2, &(0x7f0000000100)=[&(0x7f0000001680)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000140)='\x00', 0x1}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x7, 0x0, r2, 0x0}]) 22:26:58 executing program 2: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = getpgid(0x0) pidfd_open(r0, 0x0) 22:26:58 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x44}, {0x3c}, {0x6}]}) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 22:26:58 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) close(r0) socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) shutdown(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)={0x77540947ad9a168d}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) 22:26:58 executing program 2: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = getpgid(0x0) pidfd_open(r0, 0x0) 22:26:58 executing program 2: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = getpgid(0x0) pidfd_open(r0, 0x0) [ 34.360423][ T22] audit: type=1326 audit(1634077618.767:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=4501 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f360abc9a79 code=0x0 22:26:58 executing program 2: prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) r0 = getpgid(0x0) pidfd_open(r0, 0x0) 22:26:58 executing program 2: r0 = syz_io_uring_setup(0x6926, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x6000, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 22:26:58 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x1) creat(&(0x7f0000000140)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) close(r0) 22:26:58 executing program 2: r0 = syz_io_uring_setup(0x6926, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x6000, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 22:26:59 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) close(r0) socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) shutdown(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)={0x77540947ad9a168d}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) 22:27:01 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000002c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130005470fbb65e1c3e4ffff06006000020000005600000025000000190004000400000007fd17e5ff8e060604", 0x31}], 0x1) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000040)=""/3, 0x3}], 0x3, 0x0, 0xe0, 0x0) tkill(r0, 0x3c) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xf7, &(0x7f0000000300)="f41870da7cfeb6d40dd54103666c6a09000000000000005fa727fce7c4dee12f4b9c88ef6e01cf152c88e9d45bf59de8018e21f6ffffff7fda33e9355355ee04c36f5f232b322da5130db35fb21c8e4ce790a89635571192ba259aaf41d0bd04ab1b732f639f3f7892c9a4551efa467c965937c82b26708c2dd6c641bb820df1cf00e0d86544daec9adb79461e72d1b10572c652fc6a3703f438244cedad46cd80a4511b2afc0d195ab0e0c642ead215f9565b9ee9a3e3237a80eb0662994ab263339fb096b3534cababb2da4faca6a10456d0ca113d43750992ec53f382f7c5cb53af9d6760a01d39d72087f7dc9e75d5f665b1c37924"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:27:01 executing program 2: r0 = syz_io_uring_setup(0x6926, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x6000, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 22:27:01 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x44}, {0x3c}, {0x6}]}) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 22:27:01 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) close(r0) socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) shutdown(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)={0x77540947ad9a168d}) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) 22:27:01 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x1) creat(&(0x7f0000000140)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) close(r0) 22:27:01 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x13, 0x1f, 0x0) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xd, 0x0, {{}, 0x4}}, 0x18) sigaltstack(&(0x7f0000000000/0x4000)=nil, 0x0) sigaltstack(&(0x7f0000000000/0x4000)=nil, &(0x7f0000000040)) 22:27:01 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x13, 0x1f, 0x0) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xd, 0x0, {{}, 0x4}}, 0x18) sigaltstack(&(0x7f0000000000/0x4000)=nil, 0x0) sigaltstack(&(0x7f0000000000/0x4000)=nil, &(0x7f0000000040)) 22:27:01 executing program 2: r0 = syz_io_uring_setup(0x6926, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x6000, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 22:27:01 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x13, 0x1f, 0x0) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xd, 0x0, {{}, 0x4}}, 0x18) sigaltstack(&(0x7f0000000000/0x4000)=nil, 0x0) sigaltstack(&(0x7f0000000000/0x4000)=nil, &(0x7f0000000040)) [ 37.360322][ T22] audit: type=1326 audit(1634077621.768:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=4569 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f360abc9a79 code=0x0 22:27:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x541b, &(0x7f0000000100)=""/192) 22:27:01 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x13, 0x1f, 0x0) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xd, 0x0, {{}, 0x4}}, 0x18) sigaltstack(&(0x7f0000000000/0x4000)=nil, 0x0) sigaltstack(&(0x7f0000000000/0x4000)=nil, &(0x7f0000000040)) 22:27:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x541b, &(0x7f0000000100)=""/192) 22:27:04 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000002c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130005470fbb65e1c3e4ffff06006000020000005600000025000000190004000400000007fd17e5ff8e060604", 0x31}], 0x1) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000040)=""/3, 0x3}], 0x3, 0x0, 0xe0, 0x0) tkill(r0, 0x3c) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xf7, &(0x7f0000000300)="f41870da7cfeb6d40dd54103666c6a09000000000000005fa727fce7c4dee12f4b9c88ef6e01cf152c88e9d45bf59de8018e21f6ffffff7fda33e9355355ee04c36f5f232b322da5130db35fb21c8e4ce790a89635571192ba259aaf41d0bd04ab1b732f639f3f7892c9a4551efa467c965937c82b26708c2dd6c641bb820df1cf00e0d86544daec9adb79461e72d1b10572c652fc6a3703f438244cedad46cd80a4511b2afc0d195ab0e0c642ead215f9565b9ee9a3e3237a80eb0662994ab263339fb096b3534cababb2da4faca6a10456d0ca113d43750992ec53f382f7c5cb53af9d6760a01d39d72087f7dc9e75d5f665b1c37924"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:27:04 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4}, {0x14}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) creat(&(0x7f0000000080)='./file0\x00', 0x0) 22:27:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x541b, &(0x7f0000000100)=""/192) 22:27:04 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x1) creat(&(0x7f0000000140)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) close(r0) 22:27:04 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)) 22:27:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x4}, {0x5}, {0x6, 0x0, 0x0, 0xffffff9b}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 22:27:04 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4}, {0x14}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) creat(&(0x7f0000000080)='./file0\x00', 0x0) 22:27:04 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)) 22:27:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x541b, &(0x7f0000000100)=""/192) 22:27:04 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)) 22:27:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x4}, {0x5}, {0x6, 0x0, 0x0, 0xffffff9b}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 22:27:04 executing program 2: set_mempolicy(0x3, &(0x7f0000000040)=0x10001, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') read$eventfd(r0, &(0x7f0000000080), 0xcc) 22:27:07 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000002c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130005470fbb65e1c3e4ffff06006000020000005600000025000000190004000400000007fd17e5ff8e060604", 0x31}], 0x1) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000040)=""/3, 0x3}], 0x3, 0x0, 0xe0, 0x0) tkill(r0, 0x3c) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xf7, &(0x7f0000000300)="f41870da7cfeb6d40dd54103666c6a09000000000000005fa727fce7c4dee12f4b9c88ef6e01cf152c88e9d45bf59de8018e21f6ffffff7fda33e9355355ee04c36f5f232b322da5130db35fb21c8e4ce790a89635571192ba259aaf41d0bd04ab1b732f639f3f7892c9a4551efa467c965937c82b26708c2dd6c641bb820df1cf00e0d86544daec9adb79461e72d1b10572c652fc6a3703f438244cedad46cd80a4511b2afc0d195ab0e0c642ead215f9565b9ee9a3e3237a80eb0662994ab263339fb096b3534cababb2da4faca6a10456d0ca113d43750992ec53f382f7c5cb53af9d6760a01d39d72087f7dc9e75d5f665b1c37924"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 22:27:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x4}, {0x5}, {0x6, 0x0, 0x0, 0xffffff9b}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 22:27:07 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4}, {0x14}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) creat(&(0x7f0000000080)='./file0\x00', 0x0) 22:27:07 executing program 2: set_mempolicy(0x3, &(0x7f0000000040)=0x10001, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') read$eventfd(r0, &(0x7f0000000080), 0xcc) 22:27:07 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)) 22:27:07 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x1) creat(&(0x7f0000000140)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) close(r0) 22:27:07 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4}, {0x14}, {0x6, 0x0, 0x0, 0x7ffffdbf}]}) creat(&(0x7f0000000080)='./file0\x00', 0x0) 22:27:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x30, r2, 0x11, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x30}}, 0x0) 22:27:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x4}, {0x5}, {0x6, 0x0, 0x0, 0xffffff9b}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 22:27:07 executing program 2: set_mempolicy(0x3, &(0x7f0000000040)=0x10001, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') read$eventfd(r0, &(0x7f0000000080), 0xcc) 22:27:07 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x30, r2, 0x11, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x30}}, 0x0) 22:27:07 executing program 4: capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)) r0 = getpgrp(0x0) ioprio_set$pid(0x1, r0, 0x0) 22:27:10 executing program 3: pipe(&(0x7f0000000240)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) 22:27:10 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x6e) listen(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) shutdown(r2, 0x0) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 22:27:10 executing program 2: set_mempolicy(0x3, &(0x7f0000000040)=0x10001, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') read$eventfd(r0, &(0x7f0000000080), 0xcc) 22:27:10 executing program 4: capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)) r0 = getpgrp(0x0) ioprio_set$pid(0x1, r0, 0x0) 22:27:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x30, r2, 0x11, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x30}}, 0x0) 22:27:10 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x808a40, 0x0) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) 22:27:10 executing program 3: pipe(&(0x7f0000000240)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) 22:27:10 executing program 4: capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)) r0 = getpgrp(0x0) ioprio_set$pid(0x1, r0, 0x0) 22:27:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1027, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) 22:27:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x30, r2, 0x11, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x30}}, 0x0) 22:27:10 executing program 3: pipe(&(0x7f0000000240)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) 22:27:10 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x6e) listen(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) shutdown(r2, 0x0) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 22:27:10 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x808a40, 0x0) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) 22:27:10 executing program 4: capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)) r0 = getpgrp(0x0) ioprio_set$pid(0x1, r0, 0x0) 22:27:10 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x6e) listen(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) shutdown(r2, 0x0) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 22:27:10 executing program 3: pipe(&(0x7f0000000240)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) 22:27:10 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x28, r1, 0x5, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x28}}, 0x0) 22:27:11 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x808a40, 0x0) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) 22:27:11 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$tcp_mem(r0, &(0x7f0000000080), 0x48) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000003200)) 22:27:11 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1044042, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = fcntl$dupfd(r0, 0x0, r3) r5 = fcntl$dupfd(r4, 0x0, r2) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r1}}) 22:27:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1027, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) 22:27:11 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x6e) listen(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) shutdown(r2, 0x0) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 22:27:11 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x28, r1, 0x5, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x28}}, 0x0) 22:27:11 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$tcp_mem(r0, &(0x7f0000000080), 0x48) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000003200)) 22:27:11 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x808a40, 0x0) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) 22:27:11 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1044042, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = fcntl$dupfd(r0, 0x0, r3) r5 = fcntl$dupfd(r4, 0x0, r2) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r1}}) 22:27:11 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1044042, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = fcntl$dupfd(r0, 0x0, r3) r5 = fcntl$dupfd(r4, 0x0, r2) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r1}}) 22:27:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1027, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) 22:27:11 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x28, r1, 0x5, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x28}}, 0x0) 22:27:11 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$tcp_mem(r0, &(0x7f0000000080), 0x48) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000003200)) 22:27:11 executing program 5: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) r0 = inotify_init1(0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/186, 0xba}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b) socket(0x0, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 22:27:11 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1044042, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = fcntl$dupfd(r0, 0x0, r3) r5 = fcntl$dupfd(r4, 0x0, r2) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r1}}) 22:27:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1027, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) 22:27:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x28, r1, 0x5, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x28}}, 0x0) 22:27:12 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$tcp_mem(r0, &(0x7f0000000080), 0x48) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000003200)) 22:27:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000280)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="75689d2db59d502e99c5d5c3caa87e479e83968fd1eefb4ba6d941a22fb928f2f1", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x10, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x600, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 22:27:12 executing program 4: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0120000000000000200000000000000000ed", 0x81, 0xe000}], 0x0, &(0x7f0000012200)) 22:27:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000bc0)={{{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x29}}, {{}, 0x0, @in6=@dev}}, 0xe8) 22:27:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1027, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) 22:27:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000bc0)={{{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x29}}, {{}, 0x0, @in6=@dev}}, 0xe8) [ 48.247970][ C1] sd 0:0:1:0: tag#8152 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 48.258024][ C1] sd 0:0:1:0: tag#8152 CDB: opcode=0x75 (reserved) [ 48.264520][ C1] sd 0:0:1:0: tag#8152 CDB[00]: 75 68 9d 2d b5 9d 50 2e 99 c5 d5 c3 ca a8 7e 47 [ 48.273594][ C1] sd 0:0:1:0: tag#8152 CDB[10]: 9e 83 96 8f d1 ee fb 4b a6 d9 41 a2 2f b9 28 f2 [ 48.282643][ C1] sd 0:0:1:0: tag#8152 CDB[20]: f1 [ 48.329990][ T4854] loop4: detected capacity change from 0 to 224 [ 48.340772][ C1] sd 0:0:1:0: tag#8153 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 48.350619][ C1] sd 0:0:1:0: tag#8153 CDB: opcode=0x75 (reserved) [ 48.357147][ C1] sd 0:0:1:0: tag#8153 CDB[00]: 75 68 9d 2d b5 9d 50 2e 99 c5 d5 c3 ca a8 7e 47 [ 48.366184][ C1] sd 0:0:1:0: tag#8153 CDB[10]: 9e 83 96 8f d1 ee fb 4b a6 d9 41 a2 2f b9 28 f2 [ 48.375223][ C1] sd 0:0:1:0: tag#8153 CDB[20]: f1 22:27:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000280)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="75689d2db59d502e99c5d5c3caa87e479e83968fd1eefb4ba6d941a22fb928f2f1", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x10, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x600, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 22:27:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000bc0)={{{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x29}}, {{}, 0x0, @in6=@dev}}, 0xe8) [ 48.410028][ C1] sd 0:0:1:0: tag#8154 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 48.419878][ C1] sd 0:0:1:0: tag#8154 CDB: opcode=0x75 (reserved) [ 48.426390][ C1] sd 0:0:1:0: tag#8154 CDB[00]: 75 68 9d 2d b5 9d 50 2e 99 c5 d5 c3 ca a8 7e 47 [ 48.435407][ C1] sd 0:0:1:0: tag#8154 CDB[10]: 9e 83 96 8f d1 ee fb 4b a6 d9 41 a2 2f b9 28 f2 [ 48.444435][ C1] sd 0:0:1:0: tag#8154 CDB[20]: f1 22:27:13 executing program 5: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) r0 = inotify_init1(0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/186, 0xba}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b) socket(0x0, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 22:27:13 executing program 4: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0120000000000000200000000000000000ed", 0x81, 0xe000}], 0x0, &(0x7f0000012200)) 22:27:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000bc0)={{{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x29}}, {{}, 0x0, @in6=@dev}}, 0xe8) 22:27:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000280)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="75689d2db59d502e99c5d5c3caa87e479e83968fd1eefb4ba6d941a22fb928f2f1", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x10, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x600, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 22:27:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1027, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) 22:27:13 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1027, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) 22:27:13 executing program 1: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) r0 = inotify_init1(0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/186, 0xba}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b) socket(0x0, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) [ 49.158047][ C0] sd 0:0:1:0: tag#47 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 49.167746][ C0] sd 0:0:1:0: tag#47 CDB: opcode=0x75 (reserved) [ 49.173521][ T4902] loop4: detected capacity change from 0 to 224 [ 49.174093][ C0] sd 0:0:1:0: tag#47 CDB[00]: 75 68 9d 2d b5 9d 50 2e 99 c5 d5 c3 ca a8 7e 47 [ 49.189151][ C0] sd 0:0:1:0: tag#47 CDB[10]: 9e 83 96 8f d1 ee fb 4b a6 d9 41 a2 2f b9 28 f2 [ 49.198022][ C0] sd 0:0:1:0: tag#47 CDB[20]: f1 22:27:13 executing program 4: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0120000000000000200000000000000000ed", 0x81, 0xe000}], 0x0, &(0x7f0000012200)) 22:27:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000280)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="75689d2db59d502e99c5d5c3caa87e479e83968fd1eefb4ba6d941a22fb928f2f1", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x10, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x600, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) [ 49.311916][ C1] sd 0:0:1:0: tag#8155 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 49.321818][ C1] sd 0:0:1:0: tag#8155 CDB: opcode=0x75 (reserved) [ 49.328342][ C1] sd 0:0:1:0: tag#8155 CDB[00]: 75 68 9d 2d b5 9d 50 2e 99 c5 d5 c3 ca a8 7e 47 [ 49.337383][ C1] sd 0:0:1:0: tag#8155 CDB[10]: 9e 83 96 8f d1 ee fb 4b a6 d9 41 a2 2f b9 28 f2 [ 49.343875][ T4930] loop4: detected capacity change from 0 to 224 [ 49.346415][ C1] sd 0:0:1:0: tag#8155 CDB[20]: f1 22:27:13 executing program 4: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0120000000000000200000000000000000ed", 0x81, 0xe000}], 0x0, &(0x7f0000012200)) 22:27:13 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="21cff5e2d8a10fae67f51a"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x30, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:27:13 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xb00, 0x10001}) [ 49.478330][ T4951] loop4: detected capacity change from 0 to 224 22:27:14 executing program 5: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) r0 = inotify_init1(0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/186, 0xba}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b) socket(0x0, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 22:27:14 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xb00, 0x10001}) 22:27:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f0000000040)) 22:27:14 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xb00, 0x10001}) 22:27:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f0000000040)) 22:27:14 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xb00, 0x10001}) 22:27:14 executing program 1: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) r0 = inotify_init1(0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/186, 0xba}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b) socket(0x0, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 22:27:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f0000000040)) 22:27:14 executing program 0: r0 = syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000103000/0x1000)=nil, &(0x7f000035d000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x11, r0, 0x10000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3, r0}}, 0x0) capset(&(0x7f0000000100)={0x19980330}, &(0x7f00000001c0)) io_uring_enter(r0, 0x393c, 0x0, 0x0, 0x0, 0x0) 22:27:14 executing program 4: rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) [ 50.129552][ T4992] capability: warning: `syz-executor.0' uses 32-bit capabilities (legacy support in use) [ 50.309286][ T5006] ================================================================== [ 50.317388][ T5006] BUG: KCSAN: data-race in generic_write_end / next_uptodate_page [ 50.325195][ T5006] [ 50.327506][ T5006] write to 0xffff888105f65368 of 8 bytes by task 5005 on cpu 1: [ 50.335120][ T5006] generic_write_end+0x96/0x180 [ 50.339961][ T5006] ext4_da_write_end+0x4cc/0x5e0 [ 50.344897][ T5006] generic_perform_write+0x251/0x3e0 [ 50.350164][ T5006] ext4_buffered_write_iter+0x305/0x400 [ 50.355686][ T5006] ext4_file_write_iter+0x2e7/0x11f0 [ 50.360953][ T5006] vfs_write+0x7bc/0x900 [ 50.365172][ T5006] ksys_write+0xd9/0x190 [ 50.369393][ T5006] __x64_sys_write+0x3e/0x50 [ 50.373965][ T5006] do_syscall_64+0x44/0xa0 [ 50.378377][ T5006] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 50.384257][ T5006] [ 50.386564][ T5006] read to 0xffff888105f65368 of 8 bytes by task 5006 on cpu 0: [ 50.394082][ T5006] next_uptodate_page+0x323/0x670 [ 50.399107][ T5006] filemap_map_pages+0x771/0x880 [ 50.404046][ T5006] handle_mm_fault+0xb08/0x1580 [ 50.408891][ T5006] __get_user_pages+0x381/0xc50 [ 50.413735][ T5006] __mm_populate+0x24d/0x370 [ 50.418320][ T5006] vm_mmap_pgoff+0x160/0x1f0 [ 50.422909][ T5006] ksys_mmap_pgoff+0x284/0x350 [ 50.427661][ T5006] do_syscall_64+0x44/0xa0 [ 50.432055][ T5006] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 50.437930][ T5006] [ 50.440228][ T5006] value changed: 0x0000000000d55000 -> 0x0000000000d56000 [ 50.447304][ T5006] [ 50.449651][ T5006] Reported by Kernel Concurrency Sanitizer on: [ 50.455782][ T5006] CPU: 0 PID: 5006 Comm: syz-executor.1 Not tainted 5.15.0-rc5-syzkaller #0 [ 50.464440][ T5006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.474470][ T5006] ================================================================== 22:27:16 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="21cff5e2d8a10fae67f51a"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x30, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:27:16 executing program 0: r0 = syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000103000/0x1000)=nil, &(0x7f000035d000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x11, r0, 0x10000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3, r0}}, 0x0) capset(&(0x7f0000000100)={0x19980330}, &(0x7f00000001c0)) io_uring_enter(r0, 0x393c, 0x0, 0x0, 0x0, 0x0) 22:27:16 executing program 4: rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 22:27:16 executing program 5: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) r0 = inotify_init1(0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/186, 0xba}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b) socket(0x0, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 22:27:16 executing program 1: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) r0 = inotify_init1(0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/186, 0xba}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(r1, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b) socket(0x0, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 22:27:16 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f0000000040)) 22:27:16 executing program 2: fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) getdents64(r0, 0xfffffffffffffffd, 0xffb8) 22:27:16 executing program 4: rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 22:27:16 executing program 0: r0 = syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000103000/0x1000)=nil, &(0x7f000035d000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x11, r0, 0x10000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3, r0}}, 0x0) capset(&(0x7f0000000100)={0x19980330}, &(0x7f00000001c0)) io_uring_enter(r0, 0x393c, 0x0, 0x0, 0x0, 0x0) 22:27:16 executing program 2: fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) getdents64(r0, 0xfffffffffffffffd, 0xffb8) 22:27:16 executing program 0: r0 = syz_io_uring_setup(0x1dda, &(0x7f0000000080), &(0x7f0000103000/0x1000)=nil, &(0x7f000035d000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x11, r0, 0x10000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3, r0}}, 0x0) capset(&(0x7f0000000100)={0x19980330}, &(0x7f00000001c0)) io_uring_enter(r0, 0x393c, 0x0, 0x0, 0x0, 0x0) 22:27:16 executing program 4: rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 22:27:19 executing program 0: r0 = memfd_create(&(0x7f00000016c0)='\xcb\x1eq\x90\th\xb3g\xe7 \x06\xdc\xcf\xefy\xfc\x0e\xfe\x9b\x9b\x98N\x8b\xbav\x1e^D8hL\xf5\b\x0f\xfe\x9f\xb9 |Q#7\x14T\x96\xc7\xa7\x98\xe3L\x15\x16\x01\xb8\xa9Fb\a\x1e\xda\xf5\x97\'\a\x19\x1d\"\xd7\xd2\xe2\xe6ls\x88q-;DxVp\xf2AC\x9cF!R\xc7]\x1f\x97\xe8\xedx%e\x8a\xab\xc8\xba\xa4\x7f\xa8\xe3\xae\xee\x7fI:\xb2\xcfp\xdc\xf3\xd3Q?\xf368N\x9f\x93\x8e\x93\xeb\x9c\xa4\xed\xd7\x89\x92\xb8\x04\xfbG\".,\xb0\x13\x8b3z>K\x84\x05\x00\x00\x00\x9c\x81\xed\xc2\x00', 0x6e93ebbbcc0884ee, 0x0, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/170, 0xaa}], 0x1, 0x0, 0x0) 22:27:20 executing program 2: fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) getdents64(r0, 0xfffffffffffffffd, 0xffb8) 22:27:20 executing program 0: r0 = memfd_create(&(0x7f00000016c0)='\xcb\x1eq\x90\th\xb3g\xe7 \x06\xdc\xcf\xefy\xfc\x0e\xfe\x9b\x9b\x98N\x8b\xbav\x1e^D8hL\xf5\b\x0f\xfe\x9f\xb9 |Q#7\x14T\x96\xc7\xa7\x98\xe3L\x15\x16\x01\xb8\xa9Fb\a\x1e\xda\xf5\x97\'\a\x19\x1d\"\xd7\xd2\xe2\xe6ls\x88q-;DxVp\xf2AC\x9cF!R\xc7]\x1f\x97\xe8\xedx%e\x8a\xab\xc8\xba\xa4\x7f\xa8\xe3\xae\xee\x7fI:\xb2\xcfp\xdc\xf3\xd3Q?\xf368N\x9f\x93\x8e\x93\xeb\x9c\xa4\xed\xd7\x89\x92\xb8\x04\xfbG\".,\xb0\x13\x8b3z>K\x84\x05\x00\x00\x00\x9c\x81\xed\xc2\x00', 0x6e93ebbbcc0884ee, 0x0, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/170, 0xaa}], 0x1, 0x0, 0x0) [ 56.238060][ T5093] Unable to find swap-space signature [ 56.251930][ T22] audit: type=1326 audit(1634077640.660:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5089 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f360abc9a79 code=0x0 22:27:22 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="21cff5e2d8a10fae67f51a"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x30, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x29}, {&(0x7f0000001880)=""/102388, 0xfff7}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:27:22 executing program 0: r0 = memfd_create(&(0x7f00000016c0)='\xcb\x1eq\x90\th\xb3g\xe7 \x06\xdc\xcf\xefy\xfc\x0e\xfe\x9b\x9b\x98N\x8b\xbav\x1e^D8hL\xf5\b\x0f\xfe\x9f\xb9 |Q#7\x14T\x96\xc7\xa7\x98\xe3L\x15\x16\x01\xb8\xa9Fb\a\x1e\xda\xf5\x97\'\a\x19\x1d\"\xd7\xd2\xe2\xe6ls\x88q-;DxVp\xf2AC\x9cF!R\xc7]\x1f\x97\xe8\xedx%e\x8a\xab\xc8\xba\xa4\x7f\xa8\xe3\xae\xee\x7fI:\xb2\xcfp\xdc\xf3\xd3Q?\xf368N\x9f\x93\x8e\x93\xeb\x9c\xa4\xed\xd7\x89\x92\xb8\x04\xfbG\".,\xb0\x13\x8b3z>K\x84\x05\x00\x00\x00\x9c\x81\xed\xc2\x00', 0x6e93ebbbcc0884ee, 0x0, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/170, 0xaa}], 0x1, 0x0, 0x0) 22:27:22 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000040)=[{0x15}, {0x20, 0x0, 0x0, 0x8}, {0x6}]}) 22:27:23 executing program 1: unshare(0x8000400) r0 = mq_open(&(0x7f0000000080)='m$\x00\xdc\xb7\xb8\xd0>,\xb0\x13\x8b3z>K\x84\x05\x00\x00\x00\x9c\x81\xed\xc2\x00', 0x6e93ebbbcc0884ee, 0x0, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/170, 0xaa}], 0x1, 0x0, 0x0) 22:27:23 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x200000, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 22:27:23 executing program 4: r0 = epoll_create(0x80) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x80000002}) epoll_wait(r0, &(0x7f00000001c0)=[{}], 0x1, 0x0) 22:27:23 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000040)=[{0x15}, {0x20, 0x0, 0x0, 0x8}, {0x6}]}) [ 58.533309][ T22] audit: type=1326 audit(1634077642.940:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5114 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f360abc9a79 code=0x0 [ 58.551688][ T5124] Unable to find swap-space signature 22:27:23 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="66530781000000000000e03de41c9314bee4d79030a200b097eaa769be6d28c41bd300000000ffffffffa2f963917b9316ca629cf9315cfb5a60c808fdaa189c3c39485af71cc68f72e44e260f82e8a9bfc92b1016a9347bc6237603e947e4df739526ecbb397d0578b1ead5a678216d5d3568dab9af7a4d5cc06f3eb349fd086c22e3fc4ad2b0cae5eac9376178420552064885259d717abee03b720ebae04008c1ba746a4075", 0xa7}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x69) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) 22:27:23 executing program 0: set_mempolicy(0x1, &(0x7f0000000040)=0x23, 0x7) semget$private(0x0, 0x4, 0x0) [ 58.618904][ T22] audit: type=1326 audit(1634077643.030:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=5134 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f360abc9a79 code=0x0 [ 58.664816][ T5143] Unable to find swap-space signature