Warning: Permanently added '[localhost]:21930' (ECDSA) to the list of known hosts. 2026/01/13 09:26:33 fuzzer started 2026/01/13 09:26:33 dialing manager at localhost:38155 syzkaller login: [ 56.007548] cgroup: Unknown subsys name 'net' [ 56.084968] cgroup: Unknown subsys name 'cpuset' [ 56.100410] cgroup: Unknown subsys name 'rlimit' 2026/01/13 09:26:42 syscalls: 2214 2026/01/13 09:26:42 code coverage: enabled 2026/01/13 09:26:42 comparison tracing: enabled 2026/01/13 09:26:42 extra coverage: enabled 2026/01/13 09:26:42 setuid sandbox: enabled 2026/01/13 09:26:42 namespace sandbox: enabled 2026/01/13 09:26:42 Android sandbox: enabled 2026/01/13 09:26:42 fault injection: enabled 2026/01/13 09:26:42 leak checking: enabled 2026/01/13 09:26:42 net packet injection: enabled 2026/01/13 09:26:42 net device setup: enabled 2026/01/13 09:26:42 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/13 09:26:42 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/13 09:26:42 USB emulation: enabled 2026/01/13 09:26:42 hci packet injection: enabled 2026/01/13 09:26:42 wifi device emulation: enabled 2026/01/13 09:26:42 802.15.4 emulation: enabled 2026/01/13 09:26:42 fetching corpus: 0, signal 0/2000 (executing program) 2026/01/13 09:26:42 fetching corpus: 42, signal 27082/30622 (executing program) 2026/01/13 09:26:42 fetching corpus: 86, signal 40747/45707 (executing program) 2026/01/13 09:26:42 fetching corpus: 135, signal 46986/53342 (executing program) 2026/01/13 09:26:43 fetching corpus: 185, signal 51745/59500 (executing program) 2026/01/13 09:26:43 fetching corpus: 235, signal 58681/67620 (executing program) 2026/01/13 09:26:43 fetching corpus: 285, signal 62505/72680 (executing program) 2026/01/13 09:26:43 fetching corpus: 335, signal 66376/77734 (executing program) 2026/01/13 09:26:43 fetching corpus: 385, signal 72809/85112 (executing program) 2026/01/13 09:26:43 fetching corpus: 435, signal 75500/88929 (executing program) 2026/01/13 09:26:43 fetching corpus: 485, signal 78054/92550 (executing program) 2026/01/13 09:26:43 fetching corpus: 534, signal 81867/97288 (executing program) 2026/01/13 09:26:43 fetching corpus: 584, signal 84583/101001 (executing program) 2026/01/13 09:26:43 fetching corpus: 633, signal 87228/104581 (executing program) 2026/01/13 09:26:44 fetching corpus: 682, signal 90823/108949 (executing program) 2026/01/13 09:26:44 fetching corpus: 732, signal 93113/112167 (executing program) 2026/01/13 09:26:44 fetching corpus: 782, signal 95016/115010 (executing program) 2026/01/13 09:26:44 fetching corpus: 832, signal 98327/118999 (executing program) 2026/01/13 09:26:44 fetching corpus: 881, signal 100660/122116 (executing program) 2026/01/13 09:26:44 fetching corpus: 931, signal 102742/125010 (executing program) 2026/01/13 09:26:44 fetching corpus: 981, signal 105565/128487 (executing program) 2026/01/13 09:26:44 fetching corpus: 1031, signal 107702/131297 (executing program) 2026/01/13 09:26:44 fetching corpus: 1081, signal 110070/134300 (executing program) 2026/01/13 09:26:44 fetching corpus: 1131, signal 111705/136684 (executing program) 2026/01/13 09:26:45 fetching corpus: 1181, signal 113356/139023 (executing program) 2026/01/13 09:26:45 fetching corpus: 1231, signal 114622/141024 (executing program) 2026/01/13 09:26:45 fetching corpus: 1281, signal 115967/143055 (executing program) 2026/01/13 09:26:45 fetching corpus: 1331, signal 118003/145607 (executing program) 2026/01/13 09:26:45 fetching corpus: 1381, signal 119736/147885 (executing program) 2026/01/13 09:26:45 fetching corpus: 1431, signal 121354/150034 (executing program) 2026/01/13 09:26:45 fetching corpus: 1481, signal 122754/152072 (executing program) 2026/01/13 09:26:45 fetching corpus: 1531, signal 123666/153653 (executing program) 2026/01/13 09:26:45 fetching corpus: 1581, signal 124715/155353 (executing program) 2026/01/13 09:26:46 fetching corpus: 1631, signal 125663/156967 (executing program) 2026/01/13 09:26:46 fetching corpus: 1681, signal 126704/158606 (executing program) 2026/01/13 09:26:46 fetching corpus: 1731, signal 127551/160130 (executing program) 2026/01/13 09:26:46 fetching corpus: 1781, signal 128890/161960 (executing program) 2026/01/13 09:26:46 fetching corpus: 1830, signal 130354/163834 (executing program) 2026/01/13 09:26:46 fetching corpus: 1880, signal 131996/165840 (executing program) 2026/01/13 09:26:46 fetching corpus: 1930, signal 133095/167357 (executing program) 2026/01/13 09:26:46 fetching corpus: 1980, signal 134128/168843 (executing program) 2026/01/13 09:26:46 fetching corpus: 2029, signal 134993/170244 (executing program) 2026/01/13 09:26:47 fetching corpus: 2079, signal 135464/171350 (executing program) 2026/01/13 09:26:47 fetching corpus: 2129, signal 136207/172676 (executing program) 2026/01/13 09:26:47 fetching corpus: 2179, signal 137316/174172 (executing program) 2026/01/13 09:26:47 fetching corpus: 2229, signal 138642/175758 (executing program) 2026/01/13 09:26:47 fetching corpus: 2278, signal 139344/176999 (executing program) 2026/01/13 09:26:47 fetching corpus: 2327, signal 140306/178476 (executing program) 2026/01/13 09:26:47 fetching corpus: 2377, signal 141174/179800 (executing program) 2026/01/13 09:26:47 fetching corpus: 2427, signal 142337/181210 (executing program) 2026/01/13 09:26:48 fetching corpus: 2477, signal 143220/182460 (executing program) 2026/01/13 09:26:48 fetching corpus: 2527, signal 144401/183880 (executing program) 2026/01/13 09:26:48 fetching corpus: 2577, signal 145112/185003 (executing program) 2026/01/13 09:26:48 fetching corpus: 2627, signal 145763/186118 (executing program) 2026/01/13 09:26:48 fetching corpus: 2677, signal 146790/187377 (executing program) 2026/01/13 09:26:48 fetching corpus: 2727, signal 147608/188511 (executing program) 2026/01/13 09:26:48 fetching corpus: 2777, signal 148553/189728 (executing program) 2026/01/13 09:26:48 fetching corpus: 2827, signal 149440/190904 (executing program) 2026/01/13 09:26:49 fetching corpus: 2875, signal 150666/192198 (executing program) 2026/01/13 09:26:49 fetching corpus: 2925, signal 151453/193284 (executing program) 2026/01/13 09:26:49 fetching corpus: 2974, signal 152144/194320 (executing program) 2026/01/13 09:26:49 fetching corpus: 3024, signal 152778/195341 (executing program) 2026/01/13 09:26:49 fetching corpus: 3074, signal 153448/196322 (executing program) 2026/01/13 09:26:49 fetching corpus: 3124, signal 154212/197334 (executing program) 2026/01/13 09:26:49 fetching corpus: 3174, signal 154909/198335 (executing program) 2026/01/13 09:26:49 fetching corpus: 3224, signal 155629/199296 (executing program) 2026/01/13 09:26:49 fetching corpus: 3274, signal 156235/200262 (executing program) 2026/01/13 09:26:50 fetching corpus: 3324, signal 156789/201133 (executing program) 2026/01/13 09:26:50 fetching corpus: 3374, signal 157262/201956 (executing program) 2026/01/13 09:26:50 fetching corpus: 3424, signal 158072/202912 (executing program) 2026/01/13 09:26:50 fetching corpus: 3474, signal 158805/203819 (executing program) 2026/01/13 09:26:50 fetching corpus: 3524, signal 159524/204709 (executing program) 2026/01/13 09:26:50 fetching corpus: 3574, signal 160668/205729 (executing program) 2026/01/13 09:26:50 fetching corpus: 3624, signal 161325/206633 (executing program) 2026/01/13 09:26:50 fetching corpus: 3673, signal 161853/207433 (executing program) 2026/01/13 09:26:50 fetching corpus: 3723, signal 162626/208304 (executing program) 2026/01/13 09:26:51 fetching corpus: 3772, signal 163228/209082 (executing program) 2026/01/13 09:26:51 fetching corpus: 3821, signal 163916/209897 (executing program) 2026/01/13 09:26:51 fetching corpus: 3871, signal 164382/210624 (executing program) 2026/01/13 09:26:51 fetching corpus: 3921, signal 164997/211413 (executing program) 2026/01/13 09:26:51 fetching corpus: 3971, signal 165667/212190 (executing program) 2026/01/13 09:26:51 fetching corpus: 4021, signal 166207/212946 (executing program) 2026/01/13 09:26:51 fetching corpus: 4071, signal 167059/213752 (executing program) 2026/01/13 09:26:51 fetching corpus: 4121, signal 167726/214521 (executing program) 2026/01/13 09:26:51 fetching corpus: 4171, signal 168195/215148 (executing program) 2026/01/13 09:26:52 fetching corpus: 4220, signal 168759/215858 (executing program) 2026/01/13 09:26:52 fetching corpus: 4270, signal 169337/216567 (executing program) 2026/01/13 09:26:52 fetching corpus: 4320, signal 169770/217212 (executing program) 2026/01/13 09:26:52 fetching corpus: 4370, signal 170337/217885 (executing program) 2026/01/13 09:26:52 fetching corpus: 4420, signal 170811/218535 (executing program) 2026/01/13 09:26:52 fetching corpus: 4470, signal 171313/219179 (executing program) 2026/01/13 09:26:52 fetching corpus: 4520, signal 172017/219855 (executing program) 2026/01/13 09:26:52 fetching corpus: 4570, signal 172367/220415 (executing program) 2026/01/13 09:26:52 fetching corpus: 4620, signal 172916/221038 (executing program) 2026/01/13 09:26:53 fetching corpus: 4670, signal 173297/221636 (executing program) 2026/01/13 09:26:53 fetching corpus: 4720, signal 173829/222254 (executing program) 2026/01/13 09:26:53 fetching corpus: 4770, signal 174472/222883 (executing program) 2026/01/13 09:26:53 fetching corpus: 4819, signal 174975/223448 (executing program) 2026/01/13 09:26:53 fetching corpus: 4869, signal 175508/224004 (executing program) 2026/01/13 09:26:53 fetching corpus: 4919, signal 175953/224577 (executing program) 2026/01/13 09:26:53 fetching corpus: 4969, signal 176421/225112 (executing program) 2026/01/13 09:26:53 fetching corpus: 5018, signal 176911/225651 (executing program) 2026/01/13 09:26:54 fetching corpus: 5068, signal 177189/226155 (executing program) 2026/01/13 09:26:54 fetching corpus: 5118, signal 177817/226661 (executing program) 2026/01/13 09:26:54 fetching corpus: 5167, signal 178453/227213 (executing program) 2026/01/13 09:26:54 fetching corpus: 5217, signal 178956/227723 (executing program) 2026/01/13 09:26:54 fetching corpus: 5267, signal 179493/228241 (executing program) 2026/01/13 09:26:54 fetching corpus: 5317, signal 179902/228710 (executing program) 2026/01/13 09:26:54 fetching corpus: 5367, signal 181303/229233 (executing program) 2026/01/13 09:26:54 fetching corpus: 5417, signal 181689/229683 (executing program) 2026/01/13 09:26:54 fetching corpus: 5467, signal 182092/230134 (executing program) 2026/01/13 09:26:55 fetching corpus: 5517, signal 182712/230571 (executing program) 2026/01/13 09:26:55 fetching corpus: 5566, signal 183373/230991 (executing program) 2026/01/13 09:26:55 fetching corpus: 5615, signal 183736/231436 (executing program) 2026/01/13 09:26:55 fetching corpus: 5665, signal 184159/231871 (executing program) 2026/01/13 09:26:55 fetching corpus: 5715, signal 184492/231941 (executing program) 2026/01/13 09:26:55 fetching corpus: 5765, signal 184877/231946 (executing program) 2026/01/13 09:26:55 fetching corpus: 5814, signal 185254/231946 (executing program) 2026/01/13 09:26:55 fetching corpus: 5862, signal 185567/231946 (executing program) 2026/01/13 09:26:55 fetching corpus: 5912, signal 185989/231946 (executing program) 2026/01/13 09:26:56 fetching corpus: 5962, signal 186372/231946 (executing program) 2026/01/13 09:26:56 fetching corpus: 6012, signal 186747/231946 (executing program) 2026/01/13 09:26:56 fetching corpus: 6061, signal 187087/231946 (executing program) 2026/01/13 09:26:56 fetching corpus: 6111, signal 187463/231949 (executing program) 2026/01/13 09:26:56 fetching corpus: 6160, signal 187866/231949 (executing program) 2026/01/13 09:26:56 fetching corpus: 6210, signal 188167/231953 (executing program) 2026/01/13 09:26:56 fetching corpus: 6260, signal 188649/231954 (executing program) 2026/01/13 09:26:56 fetching corpus: 6310, signal 189024/231955 (executing program) 2026/01/13 09:26:56 fetching corpus: 6360, signal 189541/231955 (executing program) 2026/01/13 09:26:56 fetching corpus: 6410, signal 189860/231958 (executing program) 2026/01/13 09:26:56 fetching corpus: 6459, signal 190106/231958 (executing program) 2026/01/13 09:26:57 fetching corpus: 6509, signal 190411/231958 (executing program) 2026/01/13 09:26:57 fetching corpus: 6559, signal 190939/231959 (executing program) 2026/01/13 09:26:57 fetching corpus: 6608, signal 191239/231960 (executing program) 2026/01/13 09:26:57 fetching corpus: 6658, signal 191677/231969 (executing program) 2026/01/13 09:26:57 fetching corpus: 6708, signal 192013/231970 (executing program) 2026/01/13 09:26:57 fetching corpus: 6758, signal 192323/231987 (executing program) 2026/01/13 09:26:57 fetching corpus: 6808, signal 192747/231987 (executing program) 2026/01/13 09:26:57 fetching corpus: 6857, signal 193103/231989 (executing program) 2026/01/13 09:26:57 fetching corpus: 6907, signal 193403/231989 (executing program) 2026/01/13 09:26:57 fetching corpus: 6957, signal 193733/231989 (executing program) 2026/01/13 09:26:57 fetching corpus: 7007, signal 194004/231989 (executing program) 2026/01/13 09:26:58 fetching corpus: 7057, signal 194282/231989 (executing program) 2026/01/13 09:26:58 fetching corpus: 7107, signal 194593/231993 (executing program) 2026/01/13 09:26:58 fetching corpus: 7157, signal 195001/231997 (executing program) 2026/01/13 09:26:58 fetching corpus: 7207, signal 195578/231997 (executing program) 2026/01/13 09:26:58 fetching corpus: 7257, signal 195796/231997 (executing program) 2026/01/13 09:26:58 fetching corpus: 7307, signal 196118/231997 (executing program) 2026/01/13 09:26:58 fetching corpus: 7357, signal 196808/232012 (executing program) 2026/01/13 09:26:58 fetching corpus: 7407, signal 197105/232012 (executing program) 2026/01/13 09:26:58 fetching corpus: 7457, signal 197294/232012 (executing program) 2026/01/13 09:26:59 fetching corpus: 7506, signal 197628/232014 (executing program) 2026/01/13 09:26:59 fetching corpus: 7555, signal 197880/232016 (executing program) 2026/01/13 09:26:59 fetching corpus: 7603, signal 198426/232016 (executing program) 2026/01/13 09:26:59 fetching corpus: 7653, signal 198691/232016 (executing program) 2026/01/13 09:26:59 fetching corpus: 7703, signal 198986/232017 (executing program) 2026/01/13 09:26:59 fetching corpus: 7753, signal 199320/232017 (executing program) 2026/01/13 09:26:59 fetching corpus: 7803, signal 199564/232022 (executing program) 2026/01/13 09:26:59 fetching corpus: 7852, signal 199833/232022 (executing program) 2026/01/13 09:26:59 fetching corpus: 7902, signal 200144/232027 (executing program) 2026/01/13 09:26:59 fetching corpus: 7952, signal 200365/232027 (executing program) 2026/01/13 09:27:00 fetching corpus: 8002, signal 200609/232032 (executing program) 2026/01/13 09:27:00 fetching corpus: 8051, signal 200908/232033 (executing program) 2026/01/13 09:27:00 fetching corpus: 8100, signal 201206/232033 (executing program) 2026/01/13 09:27:00 fetching corpus: 8150, signal 201468/232033 (executing program) 2026/01/13 09:27:00 fetching corpus: 8200, signal 201756/232033 (executing program) 2026/01/13 09:27:00 fetching corpus: 8250, signal 202050/232033 (executing program) 2026/01/13 09:27:00 fetching corpus: 8300, signal 202339/232033 (executing program) 2026/01/13 09:27:00 fetching corpus: 8350, signal 202719/232034 (executing program) 2026/01/13 09:27:00 fetching corpus: 8400, signal 203120/232034 (executing program) 2026/01/13 09:27:01 fetching corpus: 8450, signal 203753/232034 (executing program) 2026/01/13 09:27:01 fetching corpus: 8500, signal 203969/232034 (executing program) 2026/01/13 09:27:01 fetching corpus: 8550, signal 204303/232037 (executing program) 2026/01/13 09:27:01 fetching corpus: 8600, signal 204586/232037 (executing program) 2026/01/13 09:27:01 fetching corpus: 8650, signal 204845/232037 (executing program) 2026/01/13 09:27:01 fetching corpus: 8700, signal 205097/232037 (executing program) 2026/01/13 09:27:01 fetching corpus: 8749, signal 205363/232041 (executing program) 2026/01/13 09:27:01 fetching corpus: 8797, signal 205645/232045 (executing program) 2026/01/13 09:27:01 fetching corpus: 8847, signal 205972/232045 (executing program) 2026/01/13 09:27:02 fetching corpus: 8896, signal 206380/232047 (executing program) 2026/01/13 09:27:02 fetching corpus: 8946, signal 206653/232047 (executing program) 2026/01/13 09:27:02 fetching corpus: 8996, signal 206918/232047 (executing program) 2026/01/13 09:27:02 fetching corpus: 9046, signal 207425/232048 (executing program) 2026/01/13 09:27:02 fetching corpus: 9095, signal 207649/232055 (executing program) 2026/01/13 09:27:02 fetching corpus: 9145, signal 207854/232055 (executing program) 2026/01/13 09:27:02 fetching corpus: 9195, signal 208145/232055 (executing program) 2026/01/13 09:27:02 fetching corpus: 9245, signal 208430/232056 (executing program) 2026/01/13 09:27:02 fetching corpus: 9294, signal 208642/232058 (executing program) 2026/01/13 09:27:02 fetching corpus: 9343, signal 208922/232060 (executing program) 2026/01/13 09:27:03 fetching corpus: 9392, signal 209187/232060 (executing program) 2026/01/13 09:27:03 fetching corpus: 9442, signal 209570/232060 (executing program) 2026/01/13 09:27:03 fetching corpus: 9491, signal 209944/232061 (executing program) 2026/01/13 09:27:03 fetching corpus: 9541, signal 210359/232061 (executing program) 2026/01/13 09:27:03 fetching corpus: 9590, signal 210599/232067 (executing program) 2026/01/13 09:27:03 fetching corpus: 9640, signal 210884/232067 (executing program) 2026/01/13 09:27:03 fetching corpus: 9689, signal 211096/232067 (executing program) 2026/01/13 09:27:03 fetching corpus: 9738, signal 211273/232067 (executing program) 2026/01/13 09:27:03 fetching corpus: 9788, signal 211582/232079 (executing program) 2026/01/13 09:27:03 fetching corpus: 9838, signal 211773/232079 (executing program) 2026/01/13 09:27:04 fetching corpus: 9887, signal 212018/232079 (executing program) 2026/01/13 09:27:04 fetching corpus: 9937, signal 212282/232083 (executing program) 2026/01/13 09:27:04 fetching corpus: 9987, signal 212459/232085 (executing program) 2026/01/13 09:27:04 fetching corpus: 10036, signal 212750/232090 (executing program) 2026/01/13 09:27:04 fetching corpus: 10086, signal 212987/232093 (executing program) 2026/01/13 09:27:04 fetching corpus: 10136, signal 213271/232093 (executing program) 2026/01/13 09:27:04 fetching corpus: 10184, signal 213477/232094 (executing program) 2026/01/13 09:27:04 fetching corpus: 10233, signal 213673/232097 (executing program) 2026/01/13 09:27:04 fetching corpus: 10283, signal 213981/232097 (executing program) 2026/01/13 09:27:05 fetching corpus: 10332, signal 214250/232110 (executing program) 2026/01/13 09:27:05 fetching corpus: 10382, signal 214506/232110 (executing program) 2026/01/13 09:27:05 fetching corpus: 10432, signal 214811/232126 (executing program) 2026/01/13 09:27:05 fetching corpus: 10481, signal 214980/232130 (executing program) 2026/01/13 09:27:05 fetching corpus: 10531, signal 215188/232130 (executing program) 2026/01/13 09:27:05 fetching corpus: 10580, signal 215409/232137 (executing program) 2026/01/13 09:27:05 fetching corpus: 10630, signal 215649/232137 (executing program) 2026/01/13 09:27:05 fetching corpus: 10680, signal 215876/232137 (executing program) 2026/01/13 09:27:05 fetching corpus: 10730, signal 216085/232150 (executing program) 2026/01/13 09:27:05 fetching corpus: 10779, signal 216402/232153 (executing program) 2026/01/13 09:27:06 fetching corpus: 10828, signal 216744/232166 (executing program) 2026/01/13 09:27:06 fetching corpus: 10877, signal 217028/232166 (executing program) 2026/01/13 09:27:06 fetching corpus: 10926, signal 217269/232169 (executing program) 2026/01/13 09:27:06 fetching corpus: 10976, signal 217538/232180 (executing program) 2026/01/13 09:27:06 fetching corpus: 11026, signal 217853/232180 (executing program) 2026/01/13 09:27:06 fetching corpus: 11075, signal 218195/232181 (executing program) 2026/01/13 09:27:06 fetching corpus: 11124, signal 218455/232181 (executing program) 2026/01/13 09:27:06 fetching corpus: 11174, signal 218652/232183 (executing program) 2026/01/13 09:27:07 fetching corpus: 11224, signal 218890/232195 (executing program) 2026/01/13 09:27:07 fetching corpus: 11273, signal 219049/232195 (executing program) 2026/01/13 09:27:07 fetching corpus: 11323, signal 219381/232195 (executing program) 2026/01/13 09:27:07 fetching corpus: 11373, signal 219626/232195 (executing program) 2026/01/13 09:27:07 fetching corpus: 11423, signal 219869/232196 (executing program) 2026/01/13 09:27:07 fetching corpus: 11473, signal 220086/232196 (executing program) 2026/01/13 09:27:07 fetching corpus: 11523, signal 220352/232196 (executing program) 2026/01/13 09:27:07 fetching corpus: 11573, signal 220622/232201 (executing program) 2026/01/13 09:27:07 fetching corpus: 11622, signal 220773/232201 (executing program) 2026/01/13 09:27:07 fetching corpus: 11671, signal 220946/232208 (executing program) 2026/01/13 09:27:07 fetching corpus: 11721, signal 221139/232208 (executing program) 2026/01/13 09:27:08 fetching corpus: 11771, signal 221578/232208 (executing program) 2026/01/13 09:27:08 fetching corpus: 11820, signal 221813/232208 (executing program) 2026/01/13 09:27:08 fetching corpus: 11870, signal 221991/232208 (executing program) 2026/01/13 09:27:08 fetching corpus: 11920, signal 222181/232208 (executing program) 2026/01/13 09:27:08 fetching corpus: 11970, signal 222348/232209 (executing program) 2026/01/13 09:27:08 fetching corpus: 12020, signal 222574/232209 (executing program) 2026/01/13 09:27:08 fetching corpus: 12069, signal 222900/232210 (executing program) 2026/01/13 09:27:08 fetching corpus: 12119, signal 223279/232210 (executing program) 2026/01/13 09:27:09 fetching corpus: 12168, signal 223470/232212 (executing program) 2026/01/13 09:27:09 fetching corpus: 12218, signal 223711/232212 (executing program) 2026/01/13 09:27:09 fetching corpus: 12268, signal 223937/232222 (executing program) 2026/01/13 09:27:09 fetching corpus: 12318, signal 224073/232222 (executing program) 2026/01/13 09:27:09 fetching corpus: 12368, signal 224239/232222 (executing program) 2026/01/13 09:27:09 fetching corpus: 12417, signal 224493/232222 (executing program) 2026/01/13 09:27:09 fetching corpus: 12467, signal 224794/232222 (executing program) 2026/01/13 09:27:09 fetching corpus: 12517, signal 224939/232222 (executing program) 2026/01/13 09:27:09 fetching corpus: 12567, signal 225173/232222 (executing program) 2026/01/13 09:27:09 fetching corpus: 12617, signal 225464/232234 (executing program) 2026/01/13 09:27:09 fetching corpus: 12667, signal 225621/232234 (executing program) 2026/01/13 09:27:10 fetching corpus: 12716, signal 225793/232234 (executing program) 2026/01/13 09:27:10 fetching corpus: 12765, signal 225991/232238 (executing program) 2026/01/13 09:27:10 fetching corpus: 12815, signal 226224/232238 (executing program) 2026/01/13 09:27:10 fetching corpus: 12865, signal 226402/232240 (executing program) 2026/01/13 09:27:10 fetching corpus: 12914, signal 226644/232242 (executing program) 2026/01/13 09:27:10 fetching corpus: 12964, signal 226831/232242 (executing program) 2026/01/13 09:27:10 fetching corpus: 13013, signal 227065/232242 (executing program) 2026/01/13 09:27:10 fetching corpus: 13061, signal 227233/232242 (executing program) 2026/01/13 09:27:10 fetching corpus: 13111, signal 227418/232242 (executing program) 2026/01/13 09:27:10 fetching corpus: 13160, signal 227555/232242 (executing program) 2026/01/13 09:27:11 fetching corpus: 13210, signal 227790/232242 (executing program) 2026/01/13 09:27:11 fetching corpus: 13260, signal 228122/232242 (executing program) 2026/01/13 09:27:11 fetching corpus: 13310, signal 228315/232242 (executing program) 2026/01/13 09:27:11 fetching corpus: 13360, signal 228535/232244 (executing program) 2026/01/13 09:27:11 fetching corpus: 13410, signal 228698/232246 (executing program) 2026/01/13 09:27:11 fetching corpus: 13459, signal 228863/232247 (executing program) 2026/01/13 09:27:11 fetching corpus: 13508, signal 229076/232247 (executing program) 2026/01/13 09:27:11 fetching corpus: 13558, signal 229275/232253 (executing program) 2026/01/13 09:27:11 fetching corpus: 13608, signal 229420/232258 (executing program) 2026/01/13 09:27:11 fetching corpus: 13658, signal 229691/232258 (executing program) 2026/01/13 09:27:12 fetching corpus: 13707, signal 229909/232258 (executing program) 2026/01/13 09:27:12 fetching corpus: 13757, signal 230167/232261 (executing program) 2026/01/13 09:27:12 fetching corpus: 13806, signal 230355/232261 (executing program) 2026/01/13 09:27:12 fetching corpus: 13854, signal 230540/232261 (executing program) 2026/01/13 09:27:12 fetching corpus: 13896, signal 230699/232262 (executing program) 2026/01/13 09:27:12 fetching corpus: 13897, signal 230701/232262 (executing program) 2026/01/13 09:27:12 fetching corpus: 13897, signal 230701/232262 (executing program) 2026/01/13 09:27:14 starting 8 fuzzer processes 09:27:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x20}}, 0x0) 09:27:14 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000001c00010500008000000000000200000001000000", @ANYRES32=r1, @ANYBLOB="080001"], 0x24}], 0x1}, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$binfmt_script(r2, 0x0, 0x144) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000000)) 09:27:14 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x227e, &(0x7f0000001480)=ANY=[]) 09:27:14 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1000001, &(0x7f0000000140)={[{@uid={'uid', 0x3d, r1}}], [{@subj_user={'subj_user', 0x3d, '}\\!:$^!#*+'}}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 09:27:14 executing program 5: socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r2}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@local, @remote, @val={@void}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @dev}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}, 0x0) 09:27:14 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) listen(r2, 0x0) pread64(r0, &(0x7f0000000040)=""/156, 0x9c, 0x2) 09:27:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) 09:27:14 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) shutdown(r0, 0x0) [ 97.132958] audit: type=1400 audit(1768296434.843:7): avc: denied { execmem } for pid=273 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 98.355309] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.358863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.361993] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.368073] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.371390] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.424213] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.427658] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.431046] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.433073] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.440458] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.442325] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.443987] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.451105] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.456539] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.458010] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.460496] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.461765] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.464715] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.467723] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.470468] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.472498] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.475719] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.476077] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.483118] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.494542] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.508938] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 98.513977] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 98.515887] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 98.517794] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 98.521368] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 98.524877] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 98.527485] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 98.528554] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 98.538008] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 98.550582] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 98.556943] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 98.569930] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 98.601091] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 98.613850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 98.615733] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 100.448215] Bluetooth: hci0: command tx timeout [ 100.575653] Bluetooth: hci4: command tx timeout [ 100.576377] Bluetooth: hci1: command tx timeout [ 100.576832] Bluetooth: hci6: command tx timeout [ 100.576901] Bluetooth: hci2: command tx timeout [ 100.640162] Bluetooth: hci7: command tx timeout [ 100.640630] Bluetooth: hci3: command tx timeout [ 100.705638] Bluetooth: hci5: command tx timeout [ 102.495726] Bluetooth: hci0: command tx timeout [ 102.623686] Bluetooth: hci2: command tx timeout [ 102.624666] Bluetooth: hci1: command tx timeout [ 102.625073] Bluetooth: hci6: command tx timeout [ 102.625453] Bluetooth: hci4: command tx timeout [ 102.688276] Bluetooth: hci7: command tx timeout [ 102.688775] Bluetooth: hci3: command tx timeout [ 102.752602] Bluetooth: hci5: command tx timeout [ 104.543769] Bluetooth: hci0: command tx timeout [ 104.671650] Bluetooth: hci4: command tx timeout [ 104.672129] Bluetooth: hci1: command tx timeout [ 104.672513] Bluetooth: hci2: command tx timeout [ 104.673000] Bluetooth: hci6: command tx timeout [ 104.735799] Bluetooth: hci7: command tx timeout [ 104.736243] Bluetooth: hci3: command tx timeout [ 104.799693] Bluetooth: hci5: command tx timeout [ 106.592883] Bluetooth: hci0: command tx timeout [ 106.719685] Bluetooth: hci2: command tx timeout [ 106.719908] Bluetooth: hci1: command tx timeout [ 106.720110] Bluetooth: hci4: command tx timeout [ 106.720929] Bluetooth: hci6: command tx timeout [ 106.783752] Bluetooth: hci7: command tx timeout [ 106.784659] Bluetooth: hci3: command tx timeout [ 106.848633] Bluetooth: hci5: command tx timeout [ 132.260099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.260790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.363276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.363919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.695365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.696029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.805662] audit: type=1400 audit(1768296470.513:8): avc: denied { open } for pid=3793 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 132.811566] audit: type=1400 audit(1768296470.513:9): avc: denied { kernel } for pid=3793 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 132.840142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.840739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:27:50 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) listen(r2, 0x0) pread64(r0, &(0x7f0000000040)=""/156, 0x9c, 0x2) 09:27:50 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) listen(r2, 0x0) pread64(r0, &(0x7f0000000040)=""/156, 0x9c, 0x2) [ 132.992155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.992770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:27:50 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) listen(r2, 0x0) pread64(r0, &(0x7f0000000040)=""/156, 0x9c, 0x2) [ 133.134149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.136093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:27:50 executing program 3: move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x4000)=nil], &(0x7f00000000c0), 0x0, 0x0) [ 133.216125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.216748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:27:50 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x227e, &(0x7f0000001480)=ANY=[]) 09:27:50 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1045c82, 0x0) mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000868, 0x0) 09:27:51 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x227e, &(0x7f0000001480)=ANY=[]) [ 133.326613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.330626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.332797] ======================================================= [ 133.332797] WARNING: The mand mount option has been deprecated and [ 133.332797] and is ignored by this kernel. Remove the mand [ 133.332797] option from the mount to silence this warning. [ 133.332797] ======================================================= [ 133.376665] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. [ 133.385618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.386202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:27:51 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x227e, &(0x7f0000001480)=ANY=[]) [ 133.513629] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.514224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.744058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.744703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.847208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.847862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.039504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.040177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.069688] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.070307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.361376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.363379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.486908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.488893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:27:52 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) shutdown(r0, 0x0) 09:27:52 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r0, 0x5412, 0x8000000000000) 09:27:52 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_expedited', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/29, 0x1d) 09:27:52 executing program 1: syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000300)={0x9}, &(0x7f0000000340)={0x0, 0x989680}, 0x0) 09:27:52 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000980)='environ\x00') perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/53, 0x35}, {0x0}], 0x2) 09:27:52 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x1000}, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x2b1e, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x0) ppoll(&(0x7f00000000c0)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 09:27:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{}]}) 09:27:52 executing program 2: futex(&(0x7f00000000c0), 0xd, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) 09:27:52 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) pwritev2(r0, &(0x7f0000000340)=[{&(0x7f0000000640)='\t', 0x1}], 0x1, 0x0, 0x0, 0x0) 09:27:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) 09:27:52 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_expedited', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/29, 0x1d) 09:27:52 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flock(r0, 0x8) 09:27:52 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}) fcntl$lock(r0, 0x24, &(0x7f0000000100)={0x2}) 09:27:52 executing program 1: syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000300)={0x9}, &(0x7f0000000340)={0x0, 0x989680}, 0x0) [ 134.836558] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 09:27:52 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) flock(r0, 0x2) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) flock(r1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 09:27:52 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) pwritev2(r0, &(0x7f0000000340)=[{&(0x7f0000000640)='\t', 0x1}], 0x1, 0x0, 0x0, 0x0) 09:27:52 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) shutdown(r0, 0x0) 09:27:52 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) flock(r0, 0x2) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) flock(r1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 09:27:52 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00004f2000/0x2000)=nil, 0x2000, 0x0) munmap(&(0x7f00004a2000/0x1000)=nil, 0x1000) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) 09:27:52 executing program 1: syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000300)={0x9}, &(0x7f0000000340)={0x0, 0x989680}, 0x0) 09:27:52 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 09:27:52 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) pwritev2(r0, &(0x7f0000000340)=[{&(0x7f0000000640)='\t', 0x1}], 0x1, 0x0, 0x0, 0x0) 09:27:52 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_expedited', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/29, 0x1d) 09:27:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) 09:27:52 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_expedited', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/29, 0x1d) 09:27:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000001a80)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008001) sendmmsg$inet6(r0, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001640)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0}}], 0x2, 0x0) 09:27:52 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) pwritev2(r0, &(0x7f0000000340)=[{&(0x7f0000000640)='\t', 0x1}], 0x1, 0x0, 0x0, 0x0) 09:27:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) 09:27:52 executing program 1: syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000280), 0x0, &(0x7f0000000300)={0x9}, &(0x7f0000000340)={0x0, 0x989680}, 0x0) 09:27:52 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/route\x00') pread64(r0, &(0x7f0000000000)=""/233, 0xe9, 0x300) 09:27:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000001a80)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008001) sendmmsg$inet6(r0, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001640)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0}}], 0x2, 0x0) 09:27:52 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001d00)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c, &(0x7f0000001580)=[{0x0, 0x4000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x0) 09:27:53 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) shutdown(r0, 0x0) 09:27:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000001a80)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008001) sendmmsg$inet6(r0, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001640)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0}}], 0x2, 0x0) 09:27:53 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 09:27:53 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) flock(r0, 0x2) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) flock(r1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 09:27:53 executing program 3: perf_event_open$cgroup(&(0x7f0000000a40)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:27:53 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 09:27:53 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) 09:27:53 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x1, 0x20982) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="7811b4162400000000000000925a9eed92a8c20c450000000000000200ffffffff462af69d1bfa35606d117738a70fb2940a5459", 0x34}], 0x1) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/69, 0x45}], 0x1) 09:27:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000001a80)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008001) sendmmsg$inet6(r0, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001640)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0}}], 0x2, 0x0) 09:27:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000000)=""/171, &(0x7f0000000100)=0xab) 09:27:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETS(r0, 0x4b4b, &(0x7f0000000080)) 09:27:53 executing program 5: r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000240)=ANY=[@ANYBLOB="dc0100001800000125bd7000fedbdf25000000000000000000000000000000000a0101020000000000000000000000004e2404014e2300000000000000000000005232c5631a1d434f42f8ca5776bd6687"], 0x1dc}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x22, &(0x7f0000000440)=[{&(0x7f0000000280)}], 0x1) [ 135.494099] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 135.495546] sr 1:0:0:0: [sr0] tag#0 CDB: Service action bidirectional, sa=0x1b 9d 1b fa 35 60 6d 11 77 38 a7 0f b2 94 0a 54 59 09:27:53 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) [ 135.513016] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 135.514477] sr 1:0:0:0: [sr0] tag#0 CDB: Service action bidirectional, sa=0x1b 9d 1b fa 35 60 6d 11 77 38 a7 0f b2 94 0a 54 59 09:27:53 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) flock(r0, 0x2) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) flock(r1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 09:27:53 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c05, 0x0) 09:27:53 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000300)={0x3}) 09:27:53 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0xcdb, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) 09:27:53 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5411, &(0x7f00000002c0)) 09:27:53 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 09:27:53 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, 0x0) 09:27:53 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x200000, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736676209600088020000200000004f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000010100)='RRaA\x00'/32, 0x20, 0x800}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010300)="601c6d6b646f736676209600088020000200000004f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10800}, {&(0x7f0000010600)="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", 0x120, 0x11000}, {&(0x7f0000010800)="2e202020202020202020201000b4ea70325132510000ea7032510300000000002e2e2020202020202020201000b4ea70325132510000ea70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020202000b4ea70325132510000ea70325104001a040000", 0x80, 0x51000}, {&(0x7f0000010900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x91000}, {&(0x7f0000010e00)='syzkallers\x00'/32, 0x20, 0xd1000}, {&(0x7f0000010f00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x151000}], 0x0, &(0x7f0000011000)) 09:27:53 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) fallocate(r1, 0x11, 0x80000000, 0x6ef) ftruncate(r1, 0x10000) 09:27:53 executing program 4: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}]}, 0x24}}, 0x0) r0 = syz_io_uring_setup(0xb4d, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000000000)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x13, &(0x7f00000001c0), 0x2) 09:27:53 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) pipe(&(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x8000000}}]}}) [ 135.760031] loop6: detected capacity change from 0 to 5392 09:27:53 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5411, &(0x7f00000002c0)) 09:27:53 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) [ 135.810624] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 135.836272] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd 09:27:53 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0xd400080b) 09:27:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x24, 0x18, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wla\x021\x00'}, @typed={0x8, 0x4, 0x0, 0x0, @fd}]}, 0x24}], 0x1}, 0x0) 09:27:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="0008061001"], 0x30}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r2) 09:27:53 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5411, &(0x7f00000002c0)) 09:27:53 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0xcdb, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) 09:27:53 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) fallocate(r1, 0x11, 0x80000000, 0x6ef) ftruncate(r1, 0x10000) 09:27:53 executing program 7: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0xcdb, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) 09:27:53 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x200000, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736676209600088020000200000004f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000010100)='RRaA\x00'/32, 0x20, 0x800}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010300)="601c6d6b646f736676209600088020000200000004f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10800}, {&(0x7f0000010600)="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", 0x120, 0x11000}, {&(0x7f0000010800)="2e202020202020202020201000b4ea70325132510000ea7032510300000000002e2e2020202020202020201000b4ea70325132510000ea70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020202000b4ea70325132510000ea70325104001a040000", 0x80, 0x51000}, {&(0x7f0000010900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x91000}, {&(0x7f0000010e00)='syzkallers\x00'/32, 0x20, 0xd1000}, {&(0x7f0000010f00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x151000}], 0x0, &(0x7f0000011000)) [ 135.983812] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 09:27:53 executing program 4: syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)={[{'port'}]}) 09:27:53 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x300}}) [ 136.051531] nfs4: Bad value for 'port' 09:27:53 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev2(r0, &(0x7f0000000340)=[{&(0x7f0000000640)='\t', 0x1}], 0x1, 0x345c, 0x0, 0x0) [ 136.053164] loop6: detected capacity change from 0 to 5392 [ 136.056147] nfs4: Bad value for 'port' 09:27:53 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0xcdb, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) 09:27:53 executing program 7: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0xcdb, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) 09:27:53 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0xcdb, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) 09:27:53 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x5385, &(0x7f0000001140)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:27:53 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5411, &(0x7f00000002c0)) 09:27:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='time_offset=']) 09:27:53 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) fallocate(r1, 0x11, 0x80000000, 0x6ef) ftruncate(r1, 0x10000) 09:27:53 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x200000, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736676209600088020000200000004f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000010100)='RRaA\x00'/32, 0x20, 0x800}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010300)="601c6d6b646f736676209600088020000200000004f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10800}, {&(0x7f0000010600)="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", 0x120, 0x11000}, {&(0x7f0000010800)="2e202020202020202020201000b4ea70325132510000ea7032510300000000002e2e2020202020202020201000b4ea70325132510000ea70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020202000b4ea70325132510000ea70325104001a040000", 0x80, 0x51000}, {&(0x7f0000010900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x91000}, {&(0x7f0000010e00)='syzkallers\x00'/32, 0x20, 0xd1000}, {&(0x7f0000010f00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x151000}], 0x0, &(0x7f0000011000)) 09:27:53 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x21, 0x0, &(0x7f0000002240)) [ 136.248943] vfat: Bad value for 'time_offset' [ 136.254305] vfat: Bad value for 'time_offset' [ 136.259333] loop6: detected capacity change from 0 to 5392 09:27:53 executing program 7: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0xcdb, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) 09:27:53 executing program 3: mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffc000/0x2000)=nil) 09:27:54 executing program 1: syz_mount_image$msdos(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x1, &(0x7f0000001b40)=[{0x0, 0x0, 0xffffffffffffffff}], 0x8800, &(0x7f0000001c40)) 09:27:54 executing program 2: syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x35) socket$inet6_icmp(0xa, 0x2, 0x3a) 09:27:54 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f00000000c0)=""/183) [ 136.357800] loop1: detected capacity change from 0 to 16383 09:27:54 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x80080, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) io_setup(0xfff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x8b) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r1, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x3a, 0x0, @private1}, 0x80, &(0x7f0000000280)}, 0x2000c0c1) open(&(0x7f0000000140)='./file0\x00', 0x4040, 0x99) io_submit(0x0, 0x2000000000000193, &(0x7f0000000240)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x6802, 0x1) r3 = geteuid() lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setresuid(0x0, r5, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000340)={0x71, 0x7d, 0x2, {{0x0, 0x5a, 0x4dc, 0x4, {0xe5be30dbb6acd81a, 0x0, 0x2}, 0x18000000, 0x70, 0xff, 0x41, 0x12, '/dev/loop-control\x00', 0x2, '-/', 0x12, '/dev/loop-control\x00', 0x1, '\x00'}, 0x2, '(#', r3, r4, r5}}, 0x71) 09:27:54 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x0, 0x300) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) fallocate(r1, 0x11, 0x80000000, 0x6ef) ftruncate(r1, 0x10000) 09:27:54 executing program 3: mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffc000/0x2000)=nil) [ 136.390480] loop1: detected capacity change from 0 to 16383 [ 136.391478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:27:54 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) [ 136.717124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:27:54 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x200000, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736676209600088020000200000004f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000010100)='RRaA\x00'/32, 0x20, 0x800}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010300)="601c6d6b646f736676209600088020000200000004f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10800}, {&(0x7f0000010600)="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", 0x120, 0x11000}, {&(0x7f0000010800)="2e202020202020202020201000b4ea70325132510000ea7032510300000000002e2e2020202020202020201000b4ea70325132510000ea70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020202000b4ea70325132510000ea70325104001a040000", 0x80, 0x51000}, {&(0x7f0000010900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x91000}, {&(0x7f0000010e00)='syzkallers\x00'/32, 0x20, 0xd1000}, {&(0x7f0000010f00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x151000}], 0x0, &(0x7f0000011000)) 09:27:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x5385, &(0x7f0000001140)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:27:54 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x5385, &(0x7f0000001140)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:27:54 executing program 3: mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffc000/0x2000)=nil) 09:27:54 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0xeb, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCGREP(r0, 0x80084504, &(0x7f00000011c0)=""/219) 09:27:54 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x80080, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) io_setup(0xfff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x8b) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r1, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x3a, 0x0, @private1}, 0x80, &(0x7f0000000280)}, 0x2000c0c1) open(&(0x7f0000000140)='./file0\x00', 0x4040, 0x99) io_submit(0x0, 0x2000000000000193, &(0x7f0000000240)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x6802, 0x1) r3 = geteuid() lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setresuid(0x0, r5, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000340)={0x71, 0x7d, 0x2, {{0x0, 0x5a, 0x4dc, 0x4, {0xe5be30dbb6acd81a, 0x0, 0x2}, 0x18000000, 0x70, 0xff, 0x41, 0x12, '/dev/loop-control\x00', 0x2, '-/', 0x12, '/dev/loop-control\x00', 0x1, '\x00'}, 0x2, '(#', r3, r4, r5}}, 0x71) 09:27:54 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x80080, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) io_setup(0xfff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x8b) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r1, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x3a, 0x0, @private1}, 0x80, &(0x7f0000000280)}, 0x2000c0c1) open(&(0x7f0000000140)='./file0\x00', 0x4040, 0x99) io_submit(0x0, 0x2000000000000193, &(0x7f0000000240)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x6802, 0x1) r3 = geteuid() lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setresuid(0x0, r5, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000340)={0x71, 0x7d, 0x2, {{0x0, 0x5a, 0x4dc, 0x4, {0xe5be30dbb6acd81a, 0x0, 0x2}, 0x18000000, 0x70, 0xff, 0x41, 0x12, '/dev/loop-control\x00', 0x2, '-/', 0x12, '/dev/loop-control\x00', 0x1, '\x00'}, 0x2, '(#', r3, r4, r5}}, 0x71) 09:27:54 executing program 1: syz_mount_image$msdos(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x1, &(0x7f0000001b40)=[{0x0, 0x0, 0xffffffffffffffff}], 0x8800, &(0x7f0000001c40)) [ 136.802928] loop6: detected capacity change from 0 to 5392 [ 136.804264] loop1: detected capacity change from 0 to 16383 09:27:54 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x5385, &(0x7f0000001140)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:27:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x5385, &(0x7f0000001140)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:27:54 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x80080, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) io_setup(0xfff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x8b) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r1, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x3a, 0x0, @private1}, 0x80, &(0x7f0000000280)}, 0x2000c0c1) open(&(0x7f0000000140)='./file0\x00', 0x4040, 0x99) io_submit(0x0, 0x2000000000000193, &(0x7f0000000240)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x6802, 0x1) r3 = geteuid() lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setresuid(0x0, r5, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000340)={0x71, 0x7d, 0x2, {{0x0, 0x5a, 0x4dc, 0x4, {0xe5be30dbb6acd81a, 0x0, 0x2}, 0x18000000, 0x70, 0xff, 0x41, 0x12, '/dev/loop-control\x00', 0x2, '-/', 0x12, '/dev/loop-control\x00', 0x1, '\x00'}, 0x2, '(#', r3, r4, r5}}, 0x71) 09:27:54 executing program 3: mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffc000/0x2000)=nil) 09:27:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x5385, &(0x7f0000001140)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:27:54 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0xeb, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCGREP(r0, 0x80084504, &(0x7f00000011c0)=""/219) 09:27:54 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x80080, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) io_setup(0xfff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x8b) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r1, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x3a, 0x0, @private1}, 0x80, &(0x7f0000000280)}, 0x2000c0c1) open(&(0x7f0000000140)='./file0\x00', 0x4040, 0x99) io_submit(0x0, 0x2000000000000193, &(0x7f0000000240)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x6802, 0x1) r3 = geteuid() lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setresuid(0x0, r5, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000340)={0x71, 0x7d, 0x2, {{0x0, 0x5a, 0x4dc, 0x4, {0xe5be30dbb6acd81a, 0x0, 0x2}, 0x18000000, 0x70, 0xff, 0x41, 0x12, '/dev/loop-control\x00', 0x2, '-/', 0x12, '/dev/loop-control\x00', 0x1, '\x00'}, 0x2, '(#', r3, r4, r5}}, 0x71) 09:27:54 executing program 1: syz_mount_image$msdos(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x1, &(0x7f0000001b40)=[{0x0, 0x0, 0xffffffffffffffff}], 0x8800, &(0x7f0000001c40)) 09:27:54 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x5385, &(0x7f0000001140)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:27:54 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x80080, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) io_setup(0xfff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x8b) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r1, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x3a, 0x0, @private1}, 0x80, &(0x7f0000000280)}, 0x2000c0c1) open(&(0x7f0000000140)='./file0\x00', 0x4040, 0x99) io_submit(0x0, 0x2000000000000193, &(0x7f0000000240)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x6802, 0x1) r3 = geteuid() lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setresuid(0x0, r5, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000340)={0x71, 0x7d, 0x2, {{0x0, 0x5a, 0x4dc, 0x4, {0xe5be30dbb6acd81a, 0x0, 0x2}, 0x18000000, 0x70, 0xff, 0x41, 0x12, '/dev/loop-control\x00', 0x2, '-/', 0x12, '/dev/loop-control\x00', 0x1, '\x00'}, 0x2, '(#', r3, r4, r5}}, 0x71) [ 137.093920] loop1: detected capacity change from 0 to 16383 09:27:54 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0xeb, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCGREP(r0, 0x80084504, &(0x7f00000011c0)=""/219) 09:27:54 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x80080, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) io_setup(0xfff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x8b) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r1, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x3a, 0x0, @private1}, 0x80, &(0x7f0000000280)}, 0x2000c0c1) open(&(0x7f0000000140)='./file0\x00', 0x4040, 0x99) io_submit(0x0, 0x2000000000000193, &(0x7f0000000240)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x6802, 0x1) r3 = geteuid() lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setresuid(0x0, r5, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000340)={0x71, 0x7d, 0x2, {{0x0, 0x5a, 0x4dc, 0x4, {0xe5be30dbb6acd81a, 0x0, 0x2}, 0x18000000, 0x70, 0xff, 0x41, 0x12, '/dev/loop-control\x00', 0x2, '-/', 0x12, '/dev/loop-control\x00', 0x1, '\x00'}, 0x2, '(#', r3, r4, r5}}, 0x71) 09:27:54 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000000280)="6c37077fa0348e7920a53c8c7618c8355b41056832d4253b51937cbbe810f9c56e7e5eef320044d0a8001cf4ed1abf957e34991034b1f9419e2ec448db4335e31ac614bbb1efcf8032fb65625b34c229798c1da34517a6e5b93658217f13fe39472255df6b280ddccd2bf03b800322a02fdd705d3e8832cc2b13ca55baad55e95a980ec99e10cb801fbf56b829e4243ed973fae87e4c83ddb2835d39435eb31262", 0xa1, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00)=ANY=[]) [ 137.212735] loop6: detected capacity change from 0 to 512 09:27:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002ac0)=[{{&(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10, 0x0}}, {{&(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0xfee0, 0x0, 0x0, &(0x7f0000000040)=[@ip_tos_int={{0x17}}], 0x18}}], 0x2, 0x0) [ 137.216634] EXT4-fs (loop6): failed to parse options in superblock: b [ 137.226637] EXT4-fs warning (device loop6): ext4_multi_mount_protect:288: Invalid MMP block in superblock 09:27:54 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r0, 0x8905, &(0x7f0000000000)) 09:27:54 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x0, 0x0, &(0x7f0000000100)) timer_delete(0x0) 09:27:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 09:27:54 executing program 1: syz_mount_image$msdos(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x1, &(0x7f0000001b40)=[{0x0, 0x0, 0xffffffffffffffff}], 0x8800, &(0x7f0000001c40)) [ 137.304368] loop6: detected capacity change from 0 to 512 09:27:55 executing program 3: statx(0xffffffffffffffff, 0x0, 0x0, 0xdb090000, 0x0) [ 137.342941] EXT4-fs (loop6): failed to parse options in superblock: b [ 137.349126] EXT4-fs warning (device loop6): ext4_multi_mount_protect:288: Invalid MMP block in superblock 09:27:55 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0xeb, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCGREP(r0, 0x80084504, &(0x7f00000011c0)=""/219) 09:27:55 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r0, 0x8905, &(0x7f0000000000)) 09:27:55 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000000280)="6c37077fa0348e7920a53c8c7618c8355b41056832d4253b51937cbbe810f9c56e7e5eef320044d0a8001cf4ed1abf957e34991034b1f9419e2ec448db4335e31ac614bbb1efcf8032fb65625b34c229798c1da34517a6e5b93658217f13fe39472255df6b280ddccd2bf03b800322a02fdd705d3e8832cc2b13ca55baad55e95a980ec99e10cb801fbf56b829e4243ed973fae87e4c83ddb2835d39435eb31262", 0xa1, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00)=ANY=[]) 09:27:55 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1600000001000100ff"], 0x0) 09:27:55 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) getdents(r0, 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) getdents(r0, &(0x7f00000000c0)=""/80, 0x50) 09:27:55 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r0, 0x8905, &(0x7f0000000000)) 09:27:55 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000000)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) 09:27:55 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 09:27:55 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000040), 0x0) inotify_init1(0x0) pipe(0x0) 09:27:55 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 09:27:55 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r0, 0x8905, &(0x7f0000000000)) [ 137.691638] EXT4-fs (loop6): failed to parse options in superblock: b [ 137.694176] EXT4-fs warning (device loop6): ext4_multi_mount_protect:288: Invalid MMP block in superblock 09:27:55 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) getdents(r0, 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) getdents(r0, &(0x7f00000000c0)=""/80, 0x50) 09:27:55 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="95c31ecb", 0xfff7}], 0x1, &(0x7f0000000140)=[@dstopts={{0x18, 0x29, 0x3}}], 0x18}}], 0x1, 0x0) 09:27:55 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000000280)="6c37077fa0348e7920a53c8c7618c8355b41056832d4253b51937cbbe810f9c56e7e5eef320044d0a8001cf4ed1abf957e34991034b1f9419e2ec448db4335e31ac614bbb1efcf8032fb65625b34c229798c1da34517a6e5b93658217f13fe39472255df6b280ddccd2bf03b800322a02fdd705d3e8832cc2b13ca55baad55e95a980ec99e10cb801fbf56b829e4243ed973fae87e4c83ddb2835d39435eb31262", 0xa1, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00)=ANY=[]) 09:27:55 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 09:27:55 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) getdents(r0, 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) getdents(r0, &(0x7f00000000c0)=""/80, 0x50) [ 137.847842] EXT4-fs (loop6): failed to parse options in superblock: b [ 137.849500] EXT4-fs warning (device loop6): ext4_multi_mount_protect:288: Invalid MMP block in superblock 09:27:55 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) getdents(r0, 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) getdents(r0, &(0x7f00000000c0)=""/80, 0x50) 09:27:55 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1600000001000100ff"], 0x0) 09:27:55 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) 09:27:55 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000000)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) 09:27:55 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="95c31ecb", 0xfff7}], 0x1, &(0x7f0000000140)=[@dstopts={{0x18, 0x29, 0x3}}], 0x18}}], 0x1, 0x0) 09:27:55 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000000280)="6c37077fa0348e7920a53c8c7618c8355b41056832d4253b51937cbbe810f9c56e7e5eef320044d0a8001cf4ed1abf957e34991034b1f9419e2ec448db4335e31ac614bbb1efcf8032fb65625b34c229798c1da34517a6e5b93658217f13fe39472255df6b280ddccd2bf03b800322a02fdd705d3e8832cc2b13ca55baad55e95a980ec99e10cb801fbf56b829e4243ed973fae87e4c83ddb2835d39435eb31262", 0xa1, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}], 0x0, &(0x7f0000013c00)=ANY=[]) 09:27:55 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 09:27:55 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="95c31ecb", 0xfff7}], 0x1, &(0x7f0000000140)=[@dstopts={{0x18, 0x29, 0x3}}], 0x18}}], 0x1, 0x0) [ 138.023771] EXT4-fs (loop6): failed to parse options in superblock: b [ 138.025454] EXT4-fs warning (device loop6): ext4_multi_mount_protect:288: Invalid MMP block in superblock 09:27:55 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 09:27:55 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="95c31ecb", 0xfff7}], 0x1, &(0x7f0000000140)=[@dstopts={{0x18, 0x29, 0x3}}], 0x18}}], 0x1, 0x0) 09:27:55 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1600000001000100ff"], 0x0) 09:27:55 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getflags(r0, 0x1) 09:27:55 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x7c9a1e339c50dbd1}, 0x6) 09:27:55 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00') 09:27:55 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)={0x38, r3, 0x1, 0x0, 0x0, {{0x39}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14}]}]}]}, 0x38}}, 0x0) 09:27:55 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000000)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) 09:27:55 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x7c9a1e339c50dbd1}, 0x6) 09:27:55 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) 09:27:56 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1600000001000100ff"], 0x0) 09:27:56 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x7c9a1e339c50dbd1}, 0x6) 09:27:56 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @dev}, {0x304, @link_local}, 0x0, {0x2, 0x0, @loopback}}) 09:27:56 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000000)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) 09:27:56 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x7c9a1e339c50dbd1}, 0x6) 09:27:56 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @dev}, {0x304, @link_local}, 0x0, {0x2, 0x0, @loopback}}) 09:27:56 executing program 6: msgrcv(0x0, &(0x7f0000001080)={0x0, ""/238}, 0xffffffffffffffe7, 0x0, 0x0) 09:27:56 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8931, &(0x7f0000000780)={'wlan0\x00'}) 09:27:56 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000440)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x8, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 09:27:56 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f00000031c0)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS={0x8}]}, 0x1c}}, 0x0) 09:27:56 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) lseek(r0, 0x2000000000000000, 0x1) 09:27:56 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000700100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000efdd79b7c3654313ac0cec53e79dcbaf010040", 0x1f, 0x4e0}, {&(0x7f0000000140)="03000000040000000000000000000000006518c3ca4bb86bfe0df8651836675e612e0babc8f939b25c7437700042ef5672bee73a4cbeadc585", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000017000f000300040000000000000000000f008551", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1800}, {&(0x7f0000011000)="8081000000180000def4655fdef4655fdef4655f00000000000001002000000010000800000000000af30200040000000000000000000000020000005000000002000000040000005200000000000000000000000000570a00000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000def465", 0x89, 0x1c00}], 0x0, &(0x7f0000013800)) 09:27:56 executing program 6: r0 = socket$inet(0x2, 0x3, 0x6) sendmsg(r0, &(0x7f0000001500)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000240)=""/210, 0xd2}], 0x2}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4000000000001ff, 0x10062, 0x0) [ 138.582879] EXT4-fs error (device loop5): ext4_quota_enable:7177: inode #3: comm syz-executor.5: iget: bad extended attribute block 137438953472 [ 138.588348] EXT4-fs error (device loop5): ext4_quota_enable:7179: comm syz-executor.5: Bad quota inode: 3, type: 0 [ 138.596623] EXT4-fs warning (device loop5): ext4_enable_quotas:7217: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 138.602028] EXT4-fs (loop5): mount failed [ 138.623294] EXT4-fs error (device loop5): ext4_quota_enable:7177: inode #3: comm syz-executor.5: iget: bad extended attribute block 137438953472 [ 138.626061] EXT4-fs error (device loop5): ext4_quota_enable:7179: comm syz-executor.5: Bad quota inode: 3, type: 0 [ 138.627503] EXT4-fs warning (device loop5): ext4_enable_quotas:7217: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 138.629918] EXT4-fs (loop5): mount failed [ 138.642447] raw_sendmsg: syz-executor.6 forgot to set AF_INET. Fix it! 09:27:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x1d, 0x0, &(0x7f0000007dc0)) 09:27:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001c40)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001b00)="2faf2953401d", 0x0, 0x0, 0x0, 0x0, 0x0}) 09:27:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) truncate(&(0x7f0000000240)='./file1\x00', 0x10000) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) 09:27:56 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f00000031c0)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS={0x8}]}, 0x1c}}, 0x0) 09:27:56 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @dev}, {0x304, @link_local}, 0x0, {0x2, 0x0, @loopback}}) 09:27:56 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @dev}, {0x304, @link_local}, 0x0, {0x2, 0x0, @loopback}}) 09:27:56 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000440)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x8, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 09:27:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001c40)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001b00)="2faf2953401d", 0x0, 0x0, 0x0, 0x0, 0x0}) 09:27:56 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f00000031c0)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS={0x8}]}, 0x1c}}, 0x0) 09:27:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) truncate(&(0x7f0000000240)='./file1\x00', 0x10000) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) 09:27:56 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000700100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000efdd79b7c3654313ac0cec53e79dcbaf010040", 0x1f, 0x4e0}, {&(0x7f0000000140)="03000000040000000000000000000000006518c3ca4bb86bfe0df8651836675e612e0babc8f939b25c7437700042ef5672bee73a4cbeadc585", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000017000f000300040000000000000000000f008551", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1800}, {&(0x7f0000011000)="8081000000180000def4655fdef4655fdef4655f00000000000001002000000010000800000000000af30200040000000000000000000000020000005000000002000000040000005200000000000000000000000000570a00000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000def465", 0x89, 0x1c00}], 0x0, &(0x7f0000013800)) 09:27:56 executing program 6: r0 = socket$inet(0x2, 0x3, 0x6) sendmsg(r0, &(0x7f0000001500)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000240)=""/210, 0xd2}], 0x2}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4000000000001ff, 0x10062, 0x0) 09:27:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x1d, 0x0, &(0x7f0000007dc0)) [ 138.978470] EXT4-fs error (device loop5): ext4_quota_enable:7177: inode #3: comm syz-executor.5: iget: bad extended attribute block 137438953472 [ 138.997954] EXT4-fs error (device loop5): ext4_quota_enable:7179: comm syz-executor.5: Bad quota inode: 3, type: 0 [ 139.014656] EXT4-fs warning (device loop5): ext4_enable_quotas:7217: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 139.028900] EXT4-fs (loop5): mount failed 09:27:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) truncate(&(0x7f0000000240)='./file1\x00', 0x10000) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) 09:27:56 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000440)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x8, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 09:27:56 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f00000031c0)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS={0x8}]}, 0x1c}}, 0x0) 09:27:56 executing program 6: r0 = socket$inet(0x2, 0x3, 0x6) sendmsg(r0, &(0x7f0000001500)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000240)=""/210, 0xd2}], 0x2}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4000000000001ff, 0x10062, 0x0) 09:27:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x1d, 0x0, &(0x7f0000007dc0)) 09:27:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001c40)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001b00)="2faf2953401d", 0x0, 0x0, 0x0, 0x0, 0x0}) 09:27:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) truncate(&(0x7f0000000240)='./file1\x00', 0x10000) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) 09:27:56 executing program 6: r0 = socket$inet(0x2, 0x3, 0x6) sendmsg(r0, &(0x7f0000001500)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000240)=""/210, 0xd2}], 0x2}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4000000000001ff, 0x10062, 0x0) 09:27:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001c40)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001b00)="2faf2953401d", 0x0, 0x0, 0x0, 0x0, 0x0}) 09:27:56 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000700100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000efdd79b7c3654313ac0cec53e79dcbaf010040", 0x1f, 0x4e0}, {&(0x7f0000000140)="03000000040000000000000000000000006518c3ca4bb86bfe0df8651836675e612e0babc8f939b25c7437700042ef5672bee73a4cbeadc585", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000017000f000300040000000000000000000f008551", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1800}, {&(0x7f0000011000)="8081000000180000def4655fdef4655fdef4655f00000000000001002000000010000800000000000af30200040000000000000000000000020000005000000002000000040000005200000000000000000000000000570a00000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000def465", 0x89, 0x1c00}], 0x0, &(0x7f0000013800)) 09:27:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x1d, 0x0, &(0x7f0000007dc0)) 09:27:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) truncate(&(0x7f0000000240)='./file1\x00', 0x10000) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) 09:27:56 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000440)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x8, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 09:27:56 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000440)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x8, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 09:27:56 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x6, @remote}, 0x10) 09:27:56 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000002d80), 0x4) 09:27:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) truncate(&(0x7f0000000240)='./file1\x00', 0x10000) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) [ 139.265684] EXT4-fs error (device loop5): ext4_quota_enable:7177: inode #3: comm syz-executor.5: iget: bad extended attribute block 137438953472 [ 139.275877] EXT4-fs error (device loop5): ext4_quota_enable:7179: comm syz-executor.5: Bad quota inode: 3, type: 0 [ 139.279700] EXT4-fs warning (device loop5): ext4_enable_quotas:7217: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 139.287950] EXT4-fs (loop5): mount failed [ 139.302762] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 139.304118] mac80211_hwsim hwsim14 wlan0: left promiscuous mode 09:27:57 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000440)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x8, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 09:27:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4442, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) truncate(&(0x7f0000000240)='./file1\x00', 0x10000) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) 09:27:57 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) 09:27:57 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x5501, 0x0) [ 139.393242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.394243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.403013] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 139.403751] mac80211_hwsim hwsim14 wlan0: left promiscuous mode 09:27:57 executing program 6: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0xfffffff8) 09:27:57 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000700100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000efdd79b7c3654313ac0cec53e79dcbaf010040", 0x1f, 0x4e0}, {&(0x7f0000000140)="03000000040000000000000000000000006518c3ca4bb86bfe0df8651836675e612e0babc8f939b25c7437700042ef5672bee73a4cbeadc585", 0x39, 0x640}, {&(0x7f0000010400)="03000000040000000500000017000f000300040000000000000000000f008551", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000def4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1800}, {&(0x7f0000011000)="8081000000180000def4655fdef4655fdef4655f00000000000001002000000010000800000000000af30200040000000000000000000000020000005000000002000000040000005200000000000000000000000000570a00000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000def465", 0x89, 0x1c00}], 0x0, &(0x7f0000013800)) [ 139.487962] EXT4-fs error (device loop5): ext4_quota_enable:7177: inode #3: comm syz-executor.5: iget: bad extended attribute block 137438953472 [ 139.490799] EXT4-fs error (device loop5): ext4_quota_enable:7179: comm syz-executor.5: Bad quota inode: 3, type: 0 [ 139.491939] EXT4-fs warning (device loop5): ext4_enable_quotas:7217: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 139.505249] EXT4-fs (loop5): mount failed [ 139.906289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.910347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 09:27:57 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) signalfd(r0, &(0x7f00000050c0), 0x8) 09:27:57 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f0000000c80)=[{{0x0, 0xffffff7f, 0x0, 0x0, &(0x7f00000006c0)=[@rights={{0x1c, 0x1, 0x1, [r1, r1, r1]}}], 0x20}}], 0x80000, 0xc0) recvmmsg$unix(r1, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 09:27:57 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000104"], 0x38}}, 0x0) 09:27:57 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/class/hwmon', 0x0, 0x0) getdents(r0, &(0x7f00000000c0)=""/145, 0x91) 09:27:57 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000440)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x8, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 09:27:57 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FITRIM(r0, 0xc020660b, &(0x7f00000014c0)={0x0, 0xfffffffffffffffc}) 09:27:57 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/dev\x00') pread64(r0, &(0x7f0000000040)=""/156, 0x9c, 0x0) 09:27:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) setpriority(0x1, 0x0, 0x0) 09:27:57 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$char_usb(r0, &(0x7f00000052c0)=""/231, 0xe7) 09:27:57 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000080)={0x8000}) [ 140.129715] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.7'. 09:27:57 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x2, 0x0, 0x4000) clone3(&(0x7f00000003c0)={0x900, &(0x7f0000000140), 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/117, 0x0}, 0x58) 09:27:57 executing program 0: syz_open_dev$evdev(&(0x7f0000001140), 0x0, 0x0) 09:27:57 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r0, 0x5608, 0x1) 09:27:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x24, 0x0, &(0x7f00000000c0)) 09:27:57 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/kernel/kexec_crash_size', 0x0, 0x0) unlinkat(r0, &(0x7f0000000740)='./file0\x00', 0x0) 09:27:57 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xcf) [ 140.336865] [ 140.337201] ===================================== [ 140.337892] WARNING: bad unlock balance detected! [ 140.338574] 6.19.0-rc5-next-20260113 #1 Not tainted [ 140.339266] ------------------------------------- [ 140.339922] syz-executor.1/4420 is trying to release lock (rcu_read_lock) at: [ 140.344053] [] __wait_on_freeing_inode+0x105/0x350 [ 140.347630] but there are no more locks to release! [ 140.348335] [ 140.348335] other info that might help us debug this: [ 140.349267] 4 locks held by syz-executor.1/4420: [ 140.349944] #0: ffff88800f9123f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 140.351201] #1: ffff88801f7316f0 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 140.352637] #2: ffff88800f916950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 140.353939] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 140.355271] [ 140.355271] stack backtrace: [ 140.355906] CPU: 1 UID: 0 PID: 4420 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 140.355932] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 140.355944] Call Trace: [ 140.355952] [ 140.355960] dump_stack_lvl+0xca/0x120 [ 140.356003] ? __wait_on_freeing_inode+0x105/0x350 [ 140.356030] print_unlock_imbalance_bug+0x118/0x130 [ 140.356056] ? __wait_on_freeing_inode+0x105/0x350 [ 140.356083] lock_release+0x1ee/0x270 [ 140.356110] __wait_on_freeing_inode+0x10a/0x350 [ 140.356137] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 140.356166] ? __pfx_var_wake_function+0x10/0x10 [ 140.356199] ? lock_is_held_type+0x9e/0x120 [ 140.356219] insert_inode_locked+0x25f/0x890 [ 140.356251] __ext4_new_inode+0x223d/0x4cd0 [ 140.356281] ? __pfx___ext4_new_inode+0x10/0x10 [ 140.356307] ? __pfx___dquot_initialize+0x10/0x10 [ 140.356340] ? __pfx_avc_has_perm+0x10/0x10 [ 140.356369] ext4_symlink+0x406/0xb40 [ 140.356403] ? __pfx_ext4_symlink+0x10/0x10 [ 140.356432] ? security_inode_permission+0x72/0xe0 [ 140.356455] vfs_symlink+0x44b/0x840 [ 140.356486] do_symlinkat+0x153/0x440 [ 140.356511] ? __pfx_do_symlinkat+0x10/0x10 [ 140.356536] ? strncpy_from_user+0x21b/0x2f0 [ 140.356567] __x64_sys_symlink+0x79/0xa0 [ 140.356593] do_syscall_64+0xbf/0x420 [ 140.356616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.356637] RIP: 0033:0x7f478b451427 [ 140.356653] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 140.356672] RSP: 002b:00007ffcb4579f48 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 140.356691] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f478b451427 [ 140.356705] RDX: 00007ffcb457a027 RSI: 00007f478b4ac019 RDI: 00007ffcb457a010 [ 140.356718] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffcb4579de0 [ 140.356730] R10: 00007ffcb4579c97 R11: 0000000000000206 R12: 0000000000000001 [ 140.356743] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffcb457a010 [ 140.356761] [ 140.384761] ------------[ cut here ]------------ [ 140.385456] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.1/4420 [ 140.387178] Modules linked in: [ 140.387748] CPU: 1 UID: 0 PID: 4420 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 140.389283] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 140.390550] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 140.391466] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 a6 bb de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 89 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 61 f9 73 03 e8 0c 88 56 00 e9 [ 140.396218] RSP: 0018:ffff88804a7ef9a0 EFLAGS: 00010286 [ 140.398452] RAX: 00000000ffffffff RBX: ffff88804a6f1b80 RCX: ffffffff815664c7 [ 140.399563] RDX: 0000000000000000 RSI: ffffffff815664d0 RDI: ffff88804a6f1f7c [ 140.400727] RBP: ffff88804a6f1b80 R08: 0000000000000000 R09: fffffbfff0ba6ff4 [ 140.401846] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88804a6f1b80 [ 140.402941] R13: 0000000000000001 R14: ffffffff85c0d650 R15: ffff88801f626268 [ 140.404042] FS: 000055559365d400(0000) GS:ffff8880e5442000(0000) knlGS:0000000000000000 [ 140.405283] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.406228] CR2: 00007f478b4d1541 CR3: 000000001c15d000 CR4: 0000000000350ef0 [ 140.407321] Call Trace: [ 140.407816] [ 140.409022] __wait_on_freeing_inode+0x10f/0x350 [ 140.410269] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 140.412221] ? __pfx_var_wake_function+0x10/0x10 [ 140.414435] ? lock_is_held_type+0x9e/0x120 [ 140.416403] insert_inode_locked+0x25f/0x890 [ 140.419337] __ext4_new_inode+0x223d/0x4cd0 [ 140.423834] ? __pfx___ext4_new_inode+0x10/0x10 [ 140.426025] ? __pfx___dquot_initialize+0x10/0x10 [ 140.427380] ? __pfx_avc_has_perm+0x10/0x10 [ 140.430545] ext4_symlink+0x406/0xb40 [ 140.434655] ? __pfx_ext4_symlink+0x10/0x10 [ 140.436404] ? security_inode_permission+0x72/0xe0 [ 140.439329] vfs_symlink+0x44b/0x840 [ 140.441688] do_symlinkat+0x153/0x440 [ 140.443659] ? __pfx_do_symlinkat+0x10/0x10 [ 140.444930] ? strncpy_from_user+0x21b/0x2f0 [ 140.448352] __x64_sys_symlink+0x79/0xa0 [ 140.449727] do_syscall_64+0xbf/0x420 [ 140.451154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.452116] RIP: 0033:0x7f478b451427 [ 140.452829] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 140.455418] RSP: 002b:00007ffcb4579f48 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 140.456544] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f478b451427 [ 140.457667] RDX: 00007ffcb457a027 RSI: 00007f478b4ac019 RDI: 00007ffcb457a010 [ 140.458732] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffcb4579de0 [ 140.459799] R10: 00007ffcb4579c97 R11: 0000000000000206 R12: 0000000000000001 [ 140.460854] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffcb457a010 [ 140.465487] [ 140.465899] irq event stamp: 181 [ 140.466379] hardirqs last enabled at (181): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 140.467856] hardirqs last disabled at (180): [] _raw_spin_lock_irqsave+0x53/0x60 [ 140.469286] softirqs last enabled at (176): [] kernel_fpu_end+0x59/0x70 [ 140.470666] softirqs last disabled at (174): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 140.472093] ---[ end trace 0000000000000000 ]--- 09:27:58 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@flushsa={0x28, 0x1c, 0x227, 0x0, 0x0, {}, [@coaddr={0x14, 0xe, @in6=@empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 09:27:58 executing program 3: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, 0x0, r0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r1) [ 140.545186] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.7'. [ 140.585102] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. 09:27:58 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@flushsa={0x28, 0x1c, 0x227, 0x0, 0x0, {}, [@coaddr={0x14, 0xe, @in6=@empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 09:27:58 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000104"], 0x38}}, 0x0) 09:27:58 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001800)='stat\x00') pread64(r0, 0x0, 0x14, 0x500) 09:27:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002200)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000001340)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/157, 0x9d}, {&(0x7f00000012c0)=""/84, 0x54}], 0x3, &(0x7f0000001380)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f00000014c0)=@abs, 0x6e, &(0x7f00000016c0), 0x0, &(0x7f0000001800)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001880)=""/182, 0xb6}, {0x0}], 0x2}}], 0x3, 0x0, &(0x7f0000002380)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x0, 0x0) 09:27:58 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) get_robust_list(0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)) 09:27:58 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000100)=0xd) 09:27:58 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f00000000c0)) keyctl$KEYCTL_RESTRICT_KEYRING(0x5, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 09:27:58 executing program 4: r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000640)) [ 140.753834] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.7'. [ 140.782433] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. 09:27:58 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001800)='stat\x00') pread64(r0, 0x0, 0x14, 0x500) 09:27:58 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000005c0), 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000000)=""/6) 09:27:58 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@flushsa={0x28, 0x1c, 0x227, 0x0, 0x0, {}, [@coaddr={0x14, 0xe, @in6=@empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 09:27:58 executing program 3: select(0x0, 0x0, &(0x7f0000000e00), &(0x7f0000000e40), &(0x7f0000000e80)={0x0, 0x2710}) [ 140.961123] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. 09:27:58 executing program 4: recvfrom$packet(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 09:27:58 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000104"], 0x38}}, 0x0) 09:27:58 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f00000000c0)) keyctl$KEYCTL_RESTRICT_KEYRING(0x5, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 09:27:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002200)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000001340)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/157, 0x9d}, {&(0x7f00000012c0)=""/84, 0x54}], 0x3, &(0x7f0000001380)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f00000014c0)=@abs, 0x6e, &(0x7f00000016c0), 0x0, &(0x7f0000001800)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001880)=""/182, 0xb6}, {0x0}], 0x2}}], 0x3, 0x0, &(0x7f0000002380)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x0, 0x0) 09:27:58 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) ioctl$CDROMREADTOCENTRY(r0, 0x5306, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, @lba}) 09:27:58 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@flushsa={0x28, 0x1c, 0x227, 0x0, 0x0, {}, [@coaddr={0x14, 0xe, @in6=@empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 09:27:58 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001800)='stat\x00') pread64(r0, 0x0, 0x14, 0x500) 09:27:58 executing program 3: select(0x0, 0x0, &(0x7f0000000e00), &(0x7f0000000e40), &(0x7f0000000e80)={0x0, 0x2710}) [ 141.122486] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. [ 141.129427] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.7'. 09:27:58 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0xb, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}, "13666f3475370000"}}}}}, 0x0) 09:27:58 executing program 3: select(0x0, 0x0, &(0x7f0000000e00), &(0x7f0000000e40), &(0x7f0000000e80)={0x0, 0x2710}) [ 141.217857] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 09:27:58 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001800)='stat\x00') pread64(r0, 0x0, 0x14, 0x500) 09:27:58 executing program 3: select(0x0, 0x0, &(0x7f0000000e00), &(0x7f0000000e40), &(0x7f0000000e80)={0x0, 0x2710}) 09:27:58 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f00000000c0)) keyctl$KEYCTL_RESTRICT_KEYRING(0x5, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 09:27:58 executing program 6: ioprio_set$uid(0x3, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x10000, 0x20) r0 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) pwritev2(r0, &(0x7f0000000380)=[{&(0x7f0000000180)="bd", 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 09:27:59 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000)=':^/\x00', 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x5) 09:27:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002200)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000001340)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/157, 0x9d}, {&(0x7f00000012c0)=""/84, 0x54}], 0x3, &(0x7f0000001380)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f00000014c0)=@abs, 0x6e, &(0x7f00000016c0), 0x0, &(0x7f0000001800)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001880)=""/182, 0xb6}, {0x0}], 0x2}}], 0x3, 0x0, &(0x7f0000002380)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x0, 0x0) 09:27:59 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000104"], 0x38}}, 0x0) [ 141.403112] perf: interrupt took too long (4158 > 4077), lowering kernel.perf_event_max_sample_rate to 48000 09:27:59 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f00000000c0)) keyctl$KEYCTL_RESTRICT_KEYRING(0x5, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 141.446622] perf: interrupt took too long (6563 > 6535), lowering kernel.perf_event_max_sample_rate to 30000 [ 141.448111] perf: interrupt took too long (6563 > 6535), lowering kernel.perf_event_max_sample_rate to 30000 09:27:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='gid_map\x00') pread64(r0, &(0x7f0000000100)=""/120, 0x78, 0x6) 09:27:59 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000001a00)=0x4082, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvfrom(r0, 0x0, 0x8, 0x73f4ad3f919ba9ee, 0x0, 0x0) [ 141.464819] perf: interrupt took too long (8209 > 8203), lowering kernel.perf_event_max_sample_rate to 24000 [ 141.479222] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.7'. [ 141.485403] perf: interrupt took too long (10270 > 10261), lowering kernel.perf_event_max_sample_rate to 19000 [ 141.551280] audit: type=1400 audit(1768296479.262:10): avc: denied { write } for pid=4495 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 09:27:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)={0x30, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd}]}, @typed={0x8, 0x19, 0x0, 0x0, @pid}]}, 0x30}], 0x1}, 0x0) 09:27:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) setreuid(0x0, 0xffffffffffffffff) 09:27:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002200)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000001340)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/157, 0x9d}, {&(0x7f00000012c0)=""/84, 0x54}], 0x3, &(0x7f0000001380)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f00000014c0)=@abs, 0x6e, &(0x7f00000016c0), 0x0, &(0x7f0000001800)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001880)=""/182, 0xb6}, {0x0}], 0x2}}], 0x3, 0x0, &(0x7f0000002380)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x0, 0x0) 09:27:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) shutdown(r0, 0x1) sendmmsg$inet6(r0, &(0x7f0000004880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004080) [ 141.610044] ÿÿÿÿ: renamed from sit0 (while UP) 09:27:59 executing program 3: r0 = timerfd_create(0x7, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, r1+10000000}}, 0x0) timerfd_gettime(r0, &(0x7f0000000140)) [ 141.620700] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 141.624829] A link change request failed with some changes committed already. Interface ÿÿÿÿ may have been left with an inconsistent configuration, please check. 09:27:59 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) dup3(r0, r1, 0x0) 09:27:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)={0x30, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd}]}, @typed={0x8, 0x19, 0x0, 0x0, @pid}]}, 0x30}], 0x1}, 0x0) 09:27:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@max_dir_size_kb}]}) 09:27:59 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x0, 0x0, 0x2000007}) fcntl$lock(r0, 0x24, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x2}) [ 141.747906] No source specified [ 141.748445] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 141.752089] No source specified [ 141.769660] A link change request failed with some changes committed already. Interface ÿÿÿÿ may have been left with an inconsistent configuration, please check. 09:27:59 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fstat(r0, &(0x7f0000000040)) 09:27:59 executing program 1: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x450002, 0x0) 09:27:59 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) dup3(r0, r1, 0x0) 09:27:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1a, &(0x7f0000007fc0)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) 09:27:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)={0x30, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd}]}, @typed={0x8, 0x19, 0x0, 0x0, @pid}]}, 0x30}], 0x1}, 0x0) 09:27:59 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0) rmdir(&(0x7f0000000140)='./file0\x00') mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2008864, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) 09:27:59 executing program 6: ioprio_set$uid(0x3, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x10000, 0x20) r0 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) pwritev2(r0, &(0x7f0000000380)=[{&(0x7f0000000180)="bd", 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 09:27:59 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff}) io_setup(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x140241, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) [ 142.211002] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 142.219664] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. [ 142.221377] A link change request failed with some changes committed already. Interface ÿÿÿÿ may have been left with an inconsistent configuration, please check. [ 142.274851] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. 09:28:00 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff}) io_setup(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x140241, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) 09:28:00 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)) 09:28:00 executing program 6: ioprio_set$uid(0x3, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x10000, 0x20) r0 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) pwritev2(r0, &(0x7f0000000380)=[{&(0x7f0000000180)="bd", 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 09:28:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)={0x30, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd}]}, @typed={0x8, 0x19, 0x0, 0x0, @pid}]}, 0x30}], 0x1}, 0x0) 09:28:00 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) dup3(r0, r1, 0x0) 09:28:00 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0) rmdir(&(0x7f0000000140)='./file0\x00') mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2008864, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) 09:28:00 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff}) io_setup(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x140241, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) 09:28:00 executing program 5: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) [ 142.530667] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 142.531337] A link change request failed with some changes committed already. Interface ÿÿÿÿ may have been left with an inconsistent configuration, please check. 09:28:00 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0) rmdir(&(0x7f0000000140)='./file0\x00') mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2008864, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) [ 142.569664] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. 09:28:00 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff}) io_setup(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x140241, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) 09:28:00 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0) rmdir(&(0x7f0000000140)='./file0\x00') mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2008864, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) 09:28:00 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff}) io_setup(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x140241, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) [ 142.668075] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. 09:28:00 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) dup3(r0, r1, 0x0) 09:28:00 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0) rmdir(&(0x7f0000000140)='./file0\x00') mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2008864, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) 09:28:00 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff}) io_setup(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x140241, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) 09:28:00 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)) 09:28:00 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff}) io_setup(0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x140241, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) [ 142.783669] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. [ 142.842651] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. 09:28:00 executing program 6: ioprio_set$uid(0x3, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x10000, 0x20) r0 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) pwritev2(r0, &(0x7f0000000380)=[{&(0x7f0000000180)="bd", 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 09:28:00 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0) rmdir(&(0x7f0000000140)='./file0\x00') mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2008864, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) 09:28:00 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)) 09:28:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r1, r2) read(r0, 0x0, 0x40004) 09:28:00 executing program 4: r0 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r1, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) 09:28:00 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0) rmdir(&(0x7f0000000140)='./file0\x00') mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2008864, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) 09:28:00 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0) rmdir(&(0x7f0000000140)='./file0\x00') mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2008864, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) 09:28:00 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet6_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000180)=""/108, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000100), 0x4) [ 143.028642] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. [ 143.032087] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. [ 143.047841] serio: Serial port ptm0 [ 143.057065] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. 09:28:00 executing program 4: r0 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r1, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) 09:28:00 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0) rmdir(&(0x7f0000000140)='./file0\x00') mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2008864, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) [ 143.100165] serio: Serial port ptm0 [ 143.115049] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8. 09:28:01 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40345410, 0x0) 09:28:01 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0) rmdir(&(0x7f0000000140)='./file0\x00') mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2008864, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) 09:28:01 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)) 09:28:01 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0) write$vga_arbiter(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='lock io'], 0xc) 09:28:01 executing program 4: r0 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r1, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) 09:28:01 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) close(r0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 09:28:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r1, r2) read(r0, 0x0, 0x40004) 09:28:01 executing program 6: execveat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0, 0x0) [ 143.443622] serio: Serial port ptm0 [ 143.446894] audit: type=1400 audit(1768296481.158:11): avc: denied { read } for pid=4619 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 09:28:01 executing program 4: r0 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r1, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) 09:28:01 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000340)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)) dup3(r0, r2, 0x0) 09:28:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r1, r2) read(r0, 0x0, 0x40004) 09:28:01 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40345410, 0x0) 09:28:01 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) r1 = semget$private(0x0, 0x4, 0x0) semctl$GETNCNT(r1, 0x0, 0xe, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000280)=""/151) clone(0x0, &(0x7f0000000340)="33f4bbfc8dac49b85ff067d85128caa4b2459f4a03451e030a8735a0bfa4d0a19d7c6323dc285e9deb696419db7e60472c582e95e1f7c4e097d9a61662a150df726ad0e6b172abcc1db0765e288bc20157a993fa87991c8485be79d8866dd74f35ad9aefa32c409e0e09c5d231ab3ab3d377968ac15657925d1e319342e3a79089a8b92fbb690096391d72425945dffadcde221e8978d80c3f5e8b0752a3f6ca4de346a1c5ba08e4bb14d56bbe18ccc2ae5013ae0619c36797ee94774236ed7a321f82aca028810f5b827faff2a12c9fda118a5b9a3a9645f4c6331062ee3bfb6eb88e36db025bd073450d9538e4b3fc5e00", &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="ad98193cfbda941e9c823e08b33d953a0f3c9e3c99621c534e06a09dde363e7e4bfad1d19942aa101bd8b5f16dfa6c3a688d9c9daad21514efd0e087e092947abc343a2a32a3cb3e6c055937ce89ec75084174625b89e17631bde50f4c27bef6ca714c86386763bf8107a910559891427394aad2e456156ec14cd528655f16a2bba023411a4f15f90f8d52b2494636171c7ac938f481a45501fcae289c5ad54ab94f4968445d2520ec76ee1aa9da66812fae6dbfe767cc0d1b6b6169eeeaa905059d1ea4a9019e9d81f3d459874dd2e3b4d6410f6307834d") write(r0, &(0x7f0000000100)="34ef9364e0d3f2b7567b9791e73bc45eb2188c2a29c766f1b7bac9ab58dd7f8127dce6dbb62da84984e26a0cc2728bc9a93d09493ed651a5e8b42aea0f8eee7429447f29d88d60de51", 0x49) openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x424200, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 09:28:01 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="000204"], 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) [ 143.596260] serio: Serial port ptm0 09:28:01 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) 09:28:01 executing program 0: io_submit(0x0, 0xffff88800ed470a0, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) 09:28:01 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40345410, 0x0) [ 143.714298] syz-executor.5 (4654) used greatest stack depth: 24000 bytes left 09:28:01 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) r1 = semget$private(0x0, 0x4, 0x0) semctl$GETNCNT(r1, 0x0, 0xe, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000280)=""/151) clone(0x0, &(0x7f0000000340)="33f4bbfc8dac49b85ff067d85128caa4b2459f4a03451e030a8735a0bfa4d0a19d7c6323dc285e9deb696419db7e60472c582e95e1f7c4e097d9a61662a150df726ad0e6b172abcc1db0765e288bc20157a993fa87991c8485be79d8866dd74f35ad9aefa32c409e0e09c5d231ab3ab3d377968ac15657925d1e319342e3a79089a8b92fbb690096391d72425945dffadcde221e8978d80c3f5e8b0752a3f6ca4de346a1c5ba08e4bb14d56bbe18ccc2ae5013ae0619c36797ee94774236ed7a321f82aca028810f5b827faff2a12c9fda118a5b9a3a9645f4c6331062ee3bfb6eb88e36db025bd073450d9538e4b3fc5e00", &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="ad98193cfbda941e9c823e08b33d953a0f3c9e3c99621c534e06a09dde363e7e4bfad1d19942aa101bd8b5f16dfa6c3a688d9c9daad21514efd0e087e092947abc343a2a32a3cb3e6c055937ce89ec75084174625b89e17631bde50f4c27bef6ca714c86386763bf8107a910559891427394aad2e456156ec14cd528655f16a2bba023411a4f15f90f8d52b2494636171c7ac938f481a45501fcae289c5ad54ab94f4968445d2520ec76ee1aa9da66812fae6dbfe767cc0d1b6b6169eeeaa905059d1ea4a9019e9d81f3d459874dd2e3b4d6410f6307834d") write(r0, &(0x7f0000000100)="34ef9364e0d3f2b7567b9791e73bc45eb2188c2a29c766f1b7bac9ab58dd7f8127dce6dbb62da84984e26a0cc2728bc9a93d09493ed651a5e8b42aea0f8eee7429447f29d88d60de51", 0x49) openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x424200, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 09:28:01 executing program 1: syslog(0x4, &(0x7f0000000280)=""/220, 0xdc) 09:28:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r1, r2) read(r0, 0x0, 0x40004) 09:28:01 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) r1 = semget$private(0x0, 0x4, 0x0) semctl$GETNCNT(r1, 0x0, 0xe, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000280)=""/151) clone(0x0, &(0x7f0000000340)="33f4bbfc8dac49b85ff067d85128caa4b2459f4a03451e030a8735a0bfa4d0a19d7c6323dc285e9deb696419db7e60472c582e95e1f7c4e097d9a61662a150df726ad0e6b172abcc1db0765e288bc20157a993fa87991c8485be79d8866dd74f35ad9aefa32c409e0e09c5d231ab3ab3d377968ac15657925d1e319342e3a79089a8b92fbb690096391d72425945dffadcde221e8978d80c3f5e8b0752a3f6ca4de346a1c5ba08e4bb14d56bbe18ccc2ae5013ae0619c36797ee94774236ed7a321f82aca028810f5b827faff2a12c9fda118a5b9a3a9645f4c6331062ee3bfb6eb88e36db025bd073450d9538e4b3fc5e00", &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="ad98193cfbda941e9c823e08b33d953a0f3c9e3c99621c534e06a09dde363e7e4bfad1d19942aa101bd8b5f16dfa6c3a688d9c9daad21514efd0e087e092947abc343a2a32a3cb3e6c055937ce89ec75084174625b89e17631bde50f4c27bef6ca714c86386763bf8107a910559891427394aad2e456156ec14cd528655f16a2bba023411a4f15f90f8d52b2494636171c7ac938f481a45501fcae289c5ad54ab94f4968445d2520ec76ee1aa9da66812fae6dbfe767cc0d1b6b6169eeeaa905059d1ea4a9019e9d81f3d459874dd2e3b4d6410f6307834d") write(r0, &(0x7f0000000100)="34ef9364e0d3f2b7567b9791e73bc45eb2188c2a29c766f1b7bac9ab58dd7f8127dce6dbb62da84984e26a0cc2728bc9a93d09493ed651a5e8b42aea0f8eee7429447f29d88d60de51", 0x49) openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x424200, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 09:28:01 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x5411, &(0x7f0000000000)={'sit0\x00'}) 09:28:01 executing program 0: io_submit(0x0, 0xffff88800ed470a0, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) 09:28:01 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40345410, 0x0) 09:28:01 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) [ 143.750260] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 143.770120] serio: Serial port ptm0 09:28:01 executing program 0: io_submit(0x0, 0xffff88800ed470a0, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) 09:28:01 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) r1 = semget$private(0x0, 0x4, 0x0) semctl$GETNCNT(r1, 0x0, 0xe, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000280)=""/151) clone(0x0, &(0x7f0000000340)="33f4bbfc8dac49b85ff067d85128caa4b2459f4a03451e030a8735a0bfa4d0a19d7c6323dc285e9deb696419db7e60472c582e95e1f7c4e097d9a61662a150df726ad0e6b172abcc1db0765e288bc20157a993fa87991c8485be79d8866dd74f35ad9aefa32c409e0e09c5d231ab3ab3d377968ac15657925d1e319342e3a79089a8b92fbb690096391d72425945dffadcde221e8978d80c3f5e8b0752a3f6ca4de346a1c5ba08e4bb14d56bbe18ccc2ae5013ae0619c36797ee94774236ed7a321f82aca028810f5b827faff2a12c9fda118a5b9a3a9645f4c6331062ee3bfb6eb88e36db025bd073450d9538e4b3fc5e00", &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="ad98193cfbda941e9c823e08b33d953a0f3c9e3c99621c534e06a09dde363e7e4bfad1d19942aa101bd8b5f16dfa6c3a688d9c9daad21514efd0e087e092947abc343a2a32a3cb3e6c055937ce89ec75084174625b89e17631bde50f4c27bef6ca714c86386763bf8107a910559891427394aad2e456156ec14cd528655f16a2bba023411a4f15f90f8d52b2494636171c7ac938f481a45501fcae289c5ad54ab94f4968445d2520ec76ee1aa9da66812fae6dbfe767cc0d1b6b6169eeeaa905059d1ea4a9019e9d81f3d459874dd2e3b4d6410f6307834d") write(r0, &(0x7f0000000100)="34ef9364e0d3f2b7567b9791e73bc45eb2188c2a29c766f1b7bac9ab58dd7f8127dce6dbb62da84984e26a0cc2728bc9a93d09493ed651a5e8b42aea0f8eee7429447f29d88d60de51", 0x49) openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x424200, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 09:28:01 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x8}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 09:28:01 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x17, &(0x7f0000001480)=[{0x0, 0x200000000000000}], 0x1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 09:28:01 executing program 0: io_submit(0x0, 0xffff88800ed470a0, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)="d3", 0x1}]) 09:28:01 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/29, 0x1d}], 0x1) 09:28:01 executing program 3: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x34, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x34}}, 0x0) 09:28:01 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) 09:28:01 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) r1 = semget$private(0x0, 0x4, 0x0) semctl$GETNCNT(r1, 0x0, 0xe, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000280)=""/151) clone(0x0, &(0x7f0000000340)="33f4bbfc8dac49b85ff067d85128caa4b2459f4a03451e030a8735a0bfa4d0a19d7c6323dc285e9deb696419db7e60472c582e95e1f7c4e097d9a61662a150df726ad0e6b172abcc1db0765e288bc20157a993fa87991c8485be79d8866dd74f35ad9aefa32c409e0e09c5d231ab3ab3d377968ac15657925d1e319342e3a79089a8b92fbb690096391d72425945dffadcde221e8978d80c3f5e8b0752a3f6ca4de346a1c5ba08e4bb14d56bbe18ccc2ae5013ae0619c36797ee94774236ed7a321f82aca028810f5b827faff2a12c9fda118a5b9a3a9645f4c6331062ee3bfb6eb88e36db025bd073450d9538e4b3fc5e00", &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="ad98193cfbda941e9c823e08b33d953a0f3c9e3c99621c534e06a09dde363e7e4bfad1d19942aa101bd8b5f16dfa6c3a688d9c9daad21514efd0e087e092947abc343a2a32a3cb3e6c055937ce89ec75084174625b89e17631bde50f4c27bef6ca714c86386763bf8107a910559891427394aad2e456156ec14cd528655f16a2bba023411a4f15f90f8d52b2494636171c7ac938f481a45501fcae289c5ad54ab94f4968445d2520ec76ee1aa9da66812fae6dbfe767cc0d1b6b6169eeeaa905059d1ea4a9019e9d81f3d459874dd2e3b4d6410f6307834d") write(r0, &(0x7f0000000100)="34ef9364e0d3f2b7567b9791e73bc45eb2188c2a29c766f1b7bac9ab58dd7f8127dce6dbb62da84984e26a0cc2728bc9a93d09493ed651a5e8b42aea0f8eee7429447f29d88d60de51", 0x49) openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x424200, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 09:28:01 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[]) mknodat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0x2710}}, 0x0) 09:28:01 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) r1 = semget$private(0x0, 0x4, 0x0) semctl$GETNCNT(r1, 0x0, 0xe, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000280)=""/151) clone(0x0, &(0x7f0000000340)="33f4bbfc8dac49b85ff067d85128caa4b2459f4a03451e030a8735a0bfa4d0a19d7c6323dc285e9deb696419db7e60472c582e95e1f7c4e097d9a61662a150df726ad0e6b172abcc1db0765e288bc20157a993fa87991c8485be79d8866dd74f35ad9aefa32c409e0e09c5d231ab3ab3d377968ac15657925d1e319342e3a79089a8b92fbb690096391d72425945dffadcde221e8978d80c3f5e8b0752a3f6ca4de346a1c5ba08e4bb14d56bbe18ccc2ae5013ae0619c36797ee94774236ed7a321f82aca028810f5b827faff2a12c9fda118a5b9a3a9645f4c6331062ee3bfb6eb88e36db025bd073450d9538e4b3fc5e00", &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="ad98193cfbda941e9c823e08b33d953a0f3c9e3c99621c534e06a09dde363e7e4bfad1d19942aa101bd8b5f16dfa6c3a688d9c9daad21514efd0e087e092947abc343a2a32a3cb3e6c055937ce89ec75084174625b89e17631bde50f4c27bef6ca714c86386763bf8107a910559891427394aad2e456156ec14cd528655f16a2bba023411a4f15f90f8d52b2494636171c7ac938f481a45501fcae289c5ad54ab94f4968445d2520ec76ee1aa9da66812fae6dbfe767cc0d1b6b6169eeeaa905059d1ea4a9019e9d81f3d459874dd2e3b4d6410f6307834d") write(r0, &(0x7f0000000100)="34ef9364e0d3f2b7567b9791e73bc45eb2188c2a29c766f1b7bac9ab58dd7f8127dce6dbb62da84984e26a0cc2728bc9a93d09493ed651a5e8b42aea0f8eee7429447f29d88d60de51", 0x49) openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x424200, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 09:28:01 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:28:01 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x17, &(0x7f0000001480)=[{0x0, 0x200000000000000}], 0x1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) [ 144.056111] set_capacity_and_notify: 9 callbacks suppressed [ 144.056126] loop3: detected capacity change from 0 to 6 [ 144.071276] FAT-fs (loop3): Directory bread(block 6) failed [ 144.080857] FAT-fs (loop3): Directory bread(block 6) failed [ 144.081639] FAT-fs (loop3): Directory bread(block 6) failed 09:28:01 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) r1 = semget$private(0x0, 0x4, 0x0) semctl$GETNCNT(r1, 0x0, 0xe, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000280)=""/151) clone(0x0, &(0x7f0000000340)="33f4bbfc8dac49b85ff067d85128caa4b2459f4a03451e030a8735a0bfa4d0a19d7c6323dc285e9deb696419db7e60472c582e95e1f7c4e097d9a61662a150df726ad0e6b172abcc1db0765e288bc20157a993fa87991c8485be79d8866dd74f35ad9aefa32c409e0e09c5d231ab3ab3d377968ac15657925d1e319342e3a79089a8b92fbb690096391d72425945dffadcde221e8978d80c3f5e8b0752a3f6ca4de346a1c5ba08e4bb14d56bbe18ccc2ae5013ae0619c36797ee94774236ed7a321f82aca028810f5b827faff2a12c9fda118a5b9a3a9645f4c6331062ee3bfb6eb88e36db025bd073450d9538e4b3fc5e00", &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="ad98193cfbda941e9c823e08b33d953a0f3c9e3c99621c534e06a09dde363e7e4bfad1d19942aa101bd8b5f16dfa6c3a688d9c9daad21514efd0e087e092947abc343a2a32a3cb3e6c055937ce89ec75084174625b89e17631bde50f4c27bef6ca714c86386763bf8107a910559891427394aad2e456156ec14cd528655f16a2bba023411a4f15f90f8d52b2494636171c7ac938f481a45501fcae289c5ad54ab94f4968445d2520ec76ee1aa9da66812fae6dbfe767cc0d1b6b6169eeeaa905059d1ea4a9019e9d81f3d459874dd2e3b4d6410f6307834d") write(r0, &(0x7f0000000100)="34ef9364e0d3f2b7567b9791e73bc45eb2188c2a29c766f1b7bac9ab58dd7f8127dce6dbb62da84984e26a0cc2728bc9a93d09493ed651a5e8b42aea0f8eee7429447f29d88d60de51", 0x49) openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x424200, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 09:28:01 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[]) mknodat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0x2710}}, 0x0) 09:28:01 executing program 2: syz_mount_image$tmpfs(&(0x7f0000002f40), &(0x7f0000002f80)='./file0\x00', 0x0, 0x1, &(0x7f0000003300)=[{&(0x7f0000002fc0)="8f", 0x1}], 0x0, &(0x7f00000033c0)) 09:28:01 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) r1 = semget$private(0x0, 0x4, 0x0) semctl$GETNCNT(r1, 0x0, 0xe, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000280)=""/151) clone(0x0, &(0x7f0000000340)="33f4bbfc8dac49b85ff067d85128caa4b2459f4a03451e030a8735a0bfa4d0a19d7c6323dc285e9deb696419db7e60472c582e95e1f7c4e097d9a61662a150df726ad0e6b172abcc1db0765e288bc20157a993fa87991c8485be79d8866dd74f35ad9aefa32c409e0e09c5d231ab3ab3d377968ac15657925d1e319342e3a79089a8b92fbb690096391d72425945dffadcde221e8978d80c3f5e8b0752a3f6ca4de346a1c5ba08e4bb14d56bbe18ccc2ae5013ae0619c36797ee94774236ed7a321f82aca028810f5b827faff2a12c9fda118a5b9a3a9645f4c6331062ee3bfb6eb88e36db025bd073450d9538e4b3fc5e00", &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="ad98193cfbda941e9c823e08b33d953a0f3c9e3c99621c534e06a09dde363e7e4bfad1d19942aa101bd8b5f16dfa6c3a688d9c9daad21514efd0e087e092947abc343a2a32a3cb3e6c055937ce89ec75084174625b89e17631bde50f4c27bef6ca714c86386763bf8107a910559891427394aad2e456156ec14cd528655f16a2bba023411a4f15f90f8d52b2494636171c7ac938f481a45501fcae289c5ad54ab94f4968445d2520ec76ee1aa9da66812fae6dbfe767cc0d1b6b6169eeeaa905059d1ea4a9019e9d81f3d459874dd2e3b4d6410f6307834d") write(r0, &(0x7f0000000100)="34ef9364e0d3f2b7567b9791e73bc45eb2188c2a29c766f1b7bac9ab58dd7f8127dce6dbb62da84984e26a0cc2728bc9a93d09493ed651a5e8b42aea0f8eee7429447f29d88d60de51", 0x49) openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x424200, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 09:28:01 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) r1 = semget$private(0x0, 0x4, 0x0) semctl$GETNCNT(r1, 0x0, 0xe, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000280)=""/151) clone(0x0, &(0x7f0000000340)="33f4bbfc8dac49b85ff067d85128caa4b2459f4a03451e030a8735a0bfa4d0a19d7c6323dc285e9deb696419db7e60472c582e95e1f7c4e097d9a61662a150df726ad0e6b172abcc1db0765e288bc20157a993fa87991c8485be79d8866dd74f35ad9aefa32c409e0e09c5d231ab3ab3d377968ac15657925d1e319342e3a79089a8b92fbb690096391d72425945dffadcde221e8978d80c3f5e8b0752a3f6ca4de346a1c5ba08e4bb14d56bbe18ccc2ae5013ae0619c36797ee94774236ed7a321f82aca028810f5b827faff2a12c9fda118a5b9a3a9645f4c6331062ee3bfb6eb88e36db025bd073450d9538e4b3fc5e00", &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="ad98193cfbda941e9c823e08b33d953a0f3c9e3c99621c534e06a09dde363e7e4bfad1d19942aa101bd8b5f16dfa6c3a688d9c9daad21514efd0e087e092947abc343a2a32a3cb3e6c055937ce89ec75084174625b89e17631bde50f4c27bef6ca714c86386763bf8107a910559891427394aad2e456156ec14cd528655f16a2bba023411a4f15f90f8d52b2494636171c7ac938f481a45501fcae289c5ad54ab94f4968445d2520ec76ee1aa9da66812fae6dbfe767cc0d1b6b6169eeeaa905059d1ea4a9019e9d81f3d459874dd2e3b4d6410f6307834d") write(r0, &(0x7f0000000100)="34ef9364e0d3f2b7567b9791e73bc45eb2188c2a29c766f1b7bac9ab58dd7f8127dce6dbb62da84984e26a0cc2728bc9a93d09493ed651a5e8b42aea0f8eee7429447f29d88d60de51", 0x49) openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x424200, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 09:28:01 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) 09:28:01 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x17, &(0x7f0000001480)=[{0x0, 0x200000000000000}], 0x1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) [ 144.239015] loop3: detected capacity change from 0 to 6 09:28:01 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req={0x24000000, 0x5, 0x34}, 0x10) [ 144.247202] FAT-fs (loop3): Directory bread(block 6) failed [ 144.252662] FAT-fs (loop3): Directory bread(block 6) failed [ 144.253163] FAT-fs (loop3): Directory bread(block 6) failed 09:28:02 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[]) mknodat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0x2710}}, 0x0) [ 144.338152] loop3: detected capacity change from 0 to 6 09:28:02 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x17, &(0x7f0000001480)=[{0x0, 0x200000000000000}], 0x1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) [ 144.340599] FAT-fs (loop3): Directory bread(block 6) failed [ 144.350669] FAT-fs (loop3): Directory bread(block 6) failed [ 144.351328] FAT-fs (loop3): Directory bread(block 6) failed 09:28:02 executing program 2: r0 = syz_io_uring_setup(0x6ed6, &(0x7f0000000280), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x1a, 0x0, 0x0) 09:28:02 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[]) mknodat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0x2710}}, 0x0) [ 144.498740] loop3: detected capacity change from 0 to 6 [ 144.502113] FAT-fs (loop3): Directory bread(block 6) failed [ 144.504645] FAT-fs (loop3): Directory bread(block 6) failed [ 144.505175] FAT-fs (loop3): Directory bread(block 6) failed 09:28:02 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000011c0), 0x82801, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000001200)={0x0, 0xfffffff8}) 09:28:02 executing program 0: prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffc000/0x1000)=nil) 09:28:02 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x18, 0x3, 0x1, 0x801, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) 09:28:02 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/222, 0xde}], 0x1) 09:28:02 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) r1 = semget$private(0x0, 0x4, 0x0) semctl$GETNCNT(r1, 0x0, 0xe, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000280)=""/151) clone(0x0, &(0x7f0000000340)="33f4bbfc8dac49b85ff067d85128caa4b2459f4a03451e030a8735a0bfa4d0a19d7c6323dc285e9deb696419db7e60472c582e95e1f7c4e097d9a61662a150df726ad0e6b172abcc1db0765e288bc20157a993fa87991c8485be79d8866dd74f35ad9aefa32c409e0e09c5d231ab3ab3d377968ac15657925d1e319342e3a79089a8b92fbb690096391d72425945dffadcde221e8978d80c3f5e8b0752a3f6ca4de346a1c5ba08e4bb14d56bbe18ccc2ae5013ae0619c36797ee94774236ed7a321f82aca028810f5b827faff2a12c9fda118a5b9a3a9645f4c6331062ee3bfb6eb88e36db025bd073450d9538e4b3fc5e00", &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="ad98193cfbda941e9c823e08b33d953a0f3c9e3c99621c534e06a09dde363e7e4bfad1d19942aa101bd8b5f16dfa6c3a688d9c9daad21514efd0e087e092947abc343a2a32a3cb3e6c055937ce89ec75084174625b89e17631bde50f4c27bef6ca714c86386763bf8107a910559891427394aad2e456156ec14cd528655f16a2bba023411a4f15f90f8d52b2494636171c7ac938f481a45501fcae289c5ad54ab94f4968445d2520ec76ee1aa9da66812fae6dbfe767cc0d1b6b6169eeeaa905059d1ea4a9019e9d81f3d459874dd2e3b4d6410f6307834d") write(r0, &(0x7f0000000100)="34ef9364e0d3f2b7567b9791e73bc45eb2188c2a29c766f1b7bac9ab58dd7f8127dce6dbb62da84984e26a0cc2728bc9a93d09493ed651a5e8b42aea0f8eee7429447f29d88d60de51", 0x49) openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x424200, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 09:28:02 executing program 2: r0 = syz_io_uring_setup(0x6ed6, &(0x7f0000000280), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x1a, 0x0, 0x0) 09:28:02 executing program 6: msgrcv(0x0, 0x0, 0x0, 0x0, 0x5000) 09:28:02 executing program 4: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0]) getresgid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) [ 144.699119] random: crng reseeded on system resumption [ 144.711351] random: crng reseeded on system resumption 09:28:02 executing program 6: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa0103) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000001000000000009a16700"/32]) 09:28:02 executing program 3: sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x0) unshare(0x20000000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x20000400) unshare(0x2000080) 09:28:02 executing program 2: r0 = syz_io_uring_setup(0x6ed6, &(0x7f0000000280), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x1a, 0x0, 0x0) 09:28:02 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x18, &(0x7f0000000080), 0x4) 09:28:02 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/222, 0xde}], 0x1) 09:28:02 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000011c0), 0x82801, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000001200)={0x0, 0xfffffff8}) 09:28:02 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='^@:,\x00') 09:28:02 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = gettid() process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 144.814953] random: crng reseeded on system resumption 09:28:02 executing program 2: r0 = syz_io_uring_setup(0x6ed6, &(0x7f0000000280), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000340)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x1a, 0x0, 0x0) 09:28:02 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4) close(r0) 09:28:02 executing program 0: setxattr$security_capability(&(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000240), &(0x7f00000002c0)=@v3={0x3000000, [{0x3}, {0x1000, 0x7}]}, 0x18, 0x0) creat(&(0x7f0000000600)='./cgroup.cpu/cgroup.procs\x00', 0x0) 09:28:02 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendto$packet(r0, &(0x7f0000000380)="cdda7c47556e3e84173484e688a8", 0x1000e, 0x0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 09:28:02 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000011c0), 0x82801, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000001200)={0x0, 0xfffffff8}) 09:28:02 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5}]}, 0x24}}, 0x0) 09:28:02 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x121a02, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='b 63'], 0xa) 09:28:02 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=""/153) 09:28:02 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/222, 0xde}], 0x1) 09:28:02 executing program 4: request_key(0x0, &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e07d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) [ 145.023859] random: crng reseeded on system resumption 09:28:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000680)="7a04", 0x2) 09:28:02 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f", 0x2d) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) 09:28:02 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=""/153) 09:28:02 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000011c0), 0x82801, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000001200)={0x0, 0xfffffff8}) [ 145.071887] random: crng reseeded on system resumption 09:28:02 executing program 4: request_key(0x0, &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e07d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) [ 145.094731] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 09:28:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x18, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wla\x02\xcc\xb0'}]}, 0x1c}], 0x1}, 0x0) 09:28:02 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=""/153) 09:28:02 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB='\b'], 0x90) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000040)=@nl=@unspec, 0x80, 0x0}, 0x8fc) 09:28:02 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0xe8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) 09:28:02 executing program 6: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=""/153) 09:28:02 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/222, 0xde}], 0x1) 09:28:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x18, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wla\x02\xcc\xb0'}]}, 0x1c}], 0x1}, 0x0) 09:28:02 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/cgroup', 0x0, 0x0) clone3(&(0x7f0000000000)={0x2c8004100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 09:28:02 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0xf, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) [ 145.315865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 145.316352] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 3 prio class 2 [ 145.320849] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 145.321444] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 145.322037] Buffer I/O error on dev sr0, logical block 2, lost async page write 09:28:03 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADAUDIO(r0, 0x5392, &(0x7f0000000180)={@msf={0x7}, 0x0, 0x0, 0x0}) 09:28:03 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/cgroup', 0x0, 0x0) clone3(&(0x7f0000000000)={0x2c8004100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 09:28:03 executing program 4: request_key(0x0, &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e07d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) 09:28:03 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x4f032, 0xffffffffffffffff, 0x80000000) 09:28:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x18, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wla\x02\xcc\xb0'}]}, 0x1c}], 0x1}, 0x0) 09:28:03 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0xe8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) 09:28:03 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000280)={0x0, 0x0, 0x9e}) 09:28:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x24, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) clock_gettime(0x0, &(0x7f0000003040)) recvmmsg(r0, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000000180)}}, {{0x0, 0x0, 0x0}}], 0x3fffe78, 0x2062, 0x0) [ 145.451302] program syz-executor.7 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.454168] program syz-executor.7 is using a deprecated SCSI ioctl, please convert it to SG_IO 09:28:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x9, @private0}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="3faee9a81e0b32aa3b3b2f18cbdb8e4b5e4db30b2ce6f8e9e77f901ab99a182f54f762397d9aea3094fd5872a5f57a5dd6ad52d41debf8aa769ea5d16720b44a15a5f2f0bc70fa2d", 0x48}, {&(0x7f0000000180)="8149856e3193e25943a59c1024679b15dd4f5a15b52f1abcf7624af8c5d5440aa7d65b4948c8d30e2134c15fe6a4e303e770602020c1b94f9c724c54ff80040cef0a95b0eeffea42e8d9707b3606d0fe374e9f71f061153bcce5b9d240472c2b5e23", 0x62}, {&(0x7f0000000d80)="98e19b464a260f0f29820c61fc158db9a2c0b1efb21cc03039cedc67656d4702e02e4cc4f871ebe6299b53b8811d9fcc29f5bc135b0ae2860ba1c8fc6b3f4c2b6fba8ffadacf0457c187fd46a247da930b91c27c584240280ab9b1637ad2f6ad866e65c2e2426eae25243bc5b7e471b24ca71b984aefcb911cee6e084668666949132f6d9c42bb99720053b95722c1b08cfc85925614c8dc27b1975ef2b4bf8de3d003725d9c07e5ce6b9355d476d86fad356ff3c68a0727bf3ac9060c7dc1eff5aafc25a0abd90203dd8a5a0d66fa875c55497c85a46e6e4908f41f2683230433fbf37d76befa2ea0897ed510c4d890cc391c961ff3872ed3339836bc99b1da237644a07ca381247b3dce1370bd4ae1788bc561491e36005910e910080f0394725ab413f2b44c0a1d5bf321452ec6e0cc07fecdaf52e84fa2b2239a51ac604fd62dcc548880be9774f201c12941ce2463245b75e0a60736aac7988c5b9ed04adf308b258ec96aa1c62198925fe69151cb46011846600d53cfa148fa4b963397d8545b40025b6e241032b7b4aaeb73540b51db70c17a7b4930116d1cf5f33f240e724403c3f0ecebdc87c0a2b728fdfe3bcc78217e8f464221fd845f3063c237bc60419cdabe73eea74f5482a025ac15e757e37abf8adc6e005b4f2f5087c4d035af2a66687e4fe50deed95c40dbce39aa25ebb0ed71ebaff8030ac75b7ff56b73257cc2333017efc9e910e891d24ee0f5df6da6ea7569566886e5a46eb90512b587adf923a805dae45cf75a712830c54ec2f6276046b4cc0f294afdb7f61dc5ca0eefd83d2b88ee20a0e97239c39cc16411f9b20d5bc105c3a05124beef9d6705fe6aa69cf0b531b9b62895a1e858720a901f3e414efaa36fa389fdffa6e9717f170bfa8a314736ef225aca18eb625d8c9468b74ae4e179c5d92e22f4f717e20f9b4bb63fc6d13cd02e570f63cf864ab6d0ef9d460318f7a58deb3b75aed5836da18f5b64ec3e6b665cc33b43a1160fded8f98b8ba55090dc15589bea078ef62817c480bc7a244e6e5414a751113850cdba42817b305b7697a54ccc100069b109ad97494cf556ba1b8b58df3e33eea2a1e319424c3a58d62993ef1d6552c1438af2040d52c4776c34f3e0f20b68416268ff03329d91174ee3d87c1ddd942d63c0413f6de65b7555568dfe5bc19086e9ffe7a50fcbc5595b21b9d6a60beb9ec038a9b275568e7f3c4391b3c1e208d016f3ca60b4c5d2f00f41a3c630a4a57dcbccbfa412f38e5917fe63c5cf2cc586b5797ee5bb4c7281e9e912bdac77783a388b59e9f138087b566cc69a5764c21b7a066b112c5c47fd7b0369bab3ae3419667a42f67e67b0a5df193d1f4a210700a0ca6fbad5bc723f0d0daf570fd17738ee633a18fce6f9c961c293ca03865d5b9948048786fb37c4555fdb700a9a913646c312be0571681b37fe574704f40efea47d82cf15d8923778b89feb8842006aaa03e27ff301c028ff267d158f421167a99a6e6cc4982e3278c88422317acf39761192656bb1ec77243cbd34bdf9abcdd788acf22dded20b6d58615559dab7fbf90e7caad83fe2b4234531a167785acc93a0a5509debbfe5e8c22835217be81b869da0c3835dcaadd56b38fd3859d46acb8dc3e70558a75b694049617dc5498b51c4685623e6d560a289d284f76f143a9f4a840bf64cf90e3ef6bdeb5947022920797111ad1c1278b6322cfe5c9b06a624f79a8037cd61531582a23b1ff10b7980b8d669450703a82e30687a6ffa34d5c583ccf262e0c8738f3af0b6befa9d406b3593bac64ccc749583b7ead4d921dcec17b3af04088a5fc1c5e992bdb3c9926c460cdd340117fe9ed57bdb2f2a59104982fd6d0a99525005157f190097d00890c05fef293ebc7ca0ccdd2b7442b31f06315314e19c0c630ec9898945bd625cd68520f53e22358c26f9b040938dc85a9cdc27bff61397b9deb6344f06b93a9d5685a5b3a261622b19dba31b408abd4a8385a1d36115741890ade856dacc86372b0dcc30cd60cefcb1f63fa5230d4b328a386a7721e84031825c5f7990e20dd47248fcfa6185cc3651d0aa7fce6218191dead926d7800d21ba5af95ca20218d173e49cac73c627795278487167e478c1f2fe9e91b6b788ec9141ed14f2e8356c601e6cbd2a6b5b1edf55d5481b81151847d646c0170d494878fe3d6b9808f387572e0d3116b5ad6978fee534b4c4b36a5cdc01e299a641250c4e2c8aaca6634773849bf9540462b41299df829f5df36a509547e6ea610312dc7c3ce7c60578fae319ef588549b8446165118e7d53bc07da595536ced15aae44c6e4388394f8735d7e5c1bc0b73b97df5ccbc4911821e338c5f2694bd094daf39dfdd49610c3335c16eb0d844d8c99554de2a54f869a5ec0d8fff90f9f6b3b54134b997fda08454007e243b7039d6376b4fdc7f1eaaea17417999ae5206ab4f87a06ccfab67d9eb6bdae5c83a12de28df25731b5766ce35e36cba1051a2190b99cd9c537b070c9865b54c1788c182b7664c6e5840622d4b6e52a6309247a9a159d412e8f1daa3591b9e7f4dd2986007ba4fc9a069fae187ef1ae45fe7808c2ec1b390426c03d3323334546e99c4f6f5575c99b85e07c28cb4076fdda1d77f2", 0x757}], 0x3}}], 0x1, 0x0) 09:28:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x18, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wla\x02\xcc\xb0'}]}, 0x1c}], 0x1}, 0x0) 09:28:03 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0xe8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) 09:28:03 executing program 4: request_key(0x0, &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e07d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) 09:28:03 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/cgroup', 0x0, 0x0) clone3(&(0x7f0000000000)={0x2c8004100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 09:28:03 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd60c7040000003a0000000000000000000000000000000000ff020000000000000000000000000001"], 0x0) 09:28:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) 09:28:03 executing program 6: shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) 09:28:03 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) keyctl$get_persistent(0xe, 0x0, 0x0) 09:28:03 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='mountstats\x00') 09:28:03 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0xe8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) 09:28:03 executing program 4: mq_open(&(0x7f0000000000)=']]]\xa4\xfa\x00', 0x40, 0x0, 0x0) 09:28:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x9, @private0}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="3faee9a81e0b32aa3b3b2f18cbdb8e4b5e4db30b2ce6f8e9e77f901ab99a182f54f762397d9aea3094fd5872a5f57a5dd6ad52d41debf8aa769ea5d16720b44a15a5f2f0bc70fa2d", 0x48}, {&(0x7f0000000180)="8149856e3193e25943a59c1024679b15dd4f5a15b52f1abcf7624af8c5d5440aa7d65b4948c8d30e2134c15fe6a4e303e770602020c1b94f9c724c54ff80040cef0a95b0eeffea42e8d9707b3606d0fe374e9f71f061153bcce5b9d240472c2b5e23", 0x62}, {&(0x7f0000000d80)="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", 0x757}], 0x3}}], 0x1, 0x0) 09:28:03 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x3) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0x100, 0x4) 09:28:03 executing program 6: syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) 09:28:03 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)={0x18, 0x15, 0x1, 0x0, 0x0, "", [@generic="02fb92b16c"]}, 0x18}], 0x1}, 0x0) [ 145.872681] audit: type=1326 audit(1768296483.583:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4902 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7f304ab19 code=0x7ffc0000 [ 145.875132] audit: type=1326 audit(1768296483.584:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4902 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fb7f3049c27 code=0x7ffc0000 09:28:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETS(r0, 0x5452, &(0x7f0000000080)) 09:28:03 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/cgroup', 0x0, 0x0) clone3(&(0x7f0000000000)={0x2c8004100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 09:28:03 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) bind(r0, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x3, 0x0, {0xa, 0x4e21, 0x6760, @dev={0xfe, 0x80, '\x00', 0x27}}}}, 0x80) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='#! ./fil\t'], 0xc) close(r1) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) write(r2, &(0x7f0000000900)="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", 0x200) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x100, 0x70bd2b, 0x25dfdbfd, {0x7, 0x7, './file1', './file1'}}, 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r3, 0x0, 0xfdef) 09:28:03 executing program 0: ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000004f80)={{}, 0x0, 0x0, 'id1\x00', 'timer0\x00'}) io_setup(0x9, &(0x7f0000005100)=0x0) io_cancel(r0, &(0x7f0000005200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 09:28:03 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffcfffd}]}) r0 = syz_mount_image$tmpfs(&(0x7f000000004 VM DIAGNOSIS: 09:27:58 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1527e RDX=fffffbfff0b82d11 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88801b807b50 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff11003700f6b R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88801b807b88 RIP=ffffffff84d15410 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555579557400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe5800000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb7f3562004 CR3=000000001e415000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000003c RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82977f45 RDI=ffffffff889c1a00 RBP=ffffffff889c19c0 RSP=ffff88804a7ef4a8 R8 =0000000000000000 R9 =ffffed1001729046 R10=000000000000003c R11=6666666666663c5b R12=000000000000003c R13=0000000000000010 R14=ffffffff889c19c0 R15=ffffffff82977f30 RIP=ffffffff82977f9d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055559365d400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f478b4d1541 CR3=000000001c15d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000ff0000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000