Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:3901' (ECDSA) to the list of known hosts. 2026/01/16 15:06:58 fuzzer started 2026/01/16 15:06:59 dialing manager at localhost:42157 syzkaller login: [ 51.434167] cgroup: Unknown subsys name 'net' [ 51.508217] cgroup: Unknown subsys name 'cpuset' [ 51.527851] cgroup: Unknown subsys name 'rlimit' 2026/01/16 15:07:09 syscalls: 2214 2026/01/16 15:07:09 code coverage: enabled 2026/01/16 15:07:09 comparison tracing: enabled 2026/01/16 15:07:09 extra coverage: enabled 2026/01/16 15:07:09 setuid sandbox: enabled 2026/01/16 15:07:09 namespace sandbox: enabled 2026/01/16 15:07:09 Android sandbox: enabled 2026/01/16 15:07:09 fault injection: enabled 2026/01/16 15:07:09 leak checking: enabled 2026/01/16 15:07:09 net packet injection: enabled 2026/01/16 15:07:09 net device setup: enabled 2026/01/16 15:07:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/16 15:07:09 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/16 15:07:09 USB emulation: enabled 2026/01/16 15:07:09 hci packet injection: enabled 2026/01/16 15:07:09 wifi device emulation: enabled 2026/01/16 15:07:09 802.15.4 emulation: enabled 2026/01/16 15:07:09 fetching corpus: 0, signal 0/2000 (executing program) 2026/01/16 15:07:09 fetching corpus: 50, signal 28468/31951 (executing program) 2026/01/16 15:07:09 fetching corpus: 100, signal 40695/45578 (executing program) 2026/01/16 15:07:09 fetching corpus: 150, signal 50194/56401 (executing program) 2026/01/16 15:07:09 fetching corpus: 200, signal 57665/65106 (executing program) 2026/01/16 15:07:10 fetching corpus: 250, signal 62971/71598 (executing program) 2026/01/16 15:07:10 fetching corpus: 300, signal 68402/78152 (executing program) 2026/01/16 15:07:10 fetching corpus: 350, signal 73499/84348 (executing program) 2026/01/16 15:07:10 fetching corpus: 400, signal 81236/92819 (executing program) 2026/01/16 15:07:10 fetching corpus: 450, signal 83551/96190 (executing program) 2026/01/16 15:07:10 fetching corpus: 500, signal 87421/100905 (executing program) 2026/01/16 15:07:10 fetching corpus: 550, signal 89950/104373 (executing program) 2026/01/16 15:07:10 fetching corpus: 600, signal 91981/107378 (executing program) 2026/01/16 15:07:11 fetching corpus: 650, signal 94476/110759 (executing program) 2026/01/16 15:07:11 fetching corpus: 700, signal 96163/113380 (executing program) 2026/01/16 15:07:11 fetching corpus: 750, signal 98177/116292 (executing program) 2026/01/16 15:07:11 fetching corpus: 800, signal 100220/119184 (executing program) 2026/01/16 15:07:11 fetching corpus: 850, signal 103009/122666 (executing program) 2026/01/16 15:07:11 fetching corpus: 900, signal 105229/125635 (executing program) 2026/01/16 15:07:11 fetching corpus: 950, signal 106447/127712 (executing program) 2026/01/16 15:07:11 fetching corpus: 1000, signal 109101/130943 (executing program) 2026/01/16 15:07:12 fetching corpus: 1050, signal 110994/133524 (executing program) 2026/01/16 15:07:12 fetching corpus: 1100, signal 112770/135973 (executing program) 2026/01/16 15:07:12 fetching corpus: 1150, signal 114041/137983 (executing program) 2026/01/16 15:07:12 fetching corpus: 1200, signal 115707/140297 (executing program) 2026/01/16 15:07:12 fetching corpus: 1250, signal 116832/142131 (executing program) 2026/01/16 15:07:12 fetching corpus: 1300, signal 119109/144858 (executing program) 2026/01/16 15:07:12 fetching corpus: 1350, signal 120396/146798 (executing program) 2026/01/16 15:07:12 fetching corpus: 1400, signal 122200/149193 (executing program) 2026/01/16 15:07:13 fetching corpus: 1450, signal 123899/151384 (executing program) 2026/01/16 15:07:13 fetching corpus: 1500, signal 125362/153372 (executing program) 2026/01/16 15:07:13 fetching corpus: 1550, signal 126731/155261 (executing program) 2026/01/16 15:07:13 fetching corpus: 1600, signal 128006/157040 (executing program) 2026/01/16 15:07:13 fetching corpus: 1650, signal 129002/158602 (executing program) 2026/01/16 15:07:13 fetching corpus: 1700, signal 129983/160162 (executing program) 2026/01/16 15:07:13 fetching corpus: 1750, signal 130974/161708 (executing program) 2026/01/16 15:07:13 fetching corpus: 1800, signal 132419/163541 (executing program) 2026/01/16 15:07:13 fetching corpus: 1850, signal 133194/164895 (executing program) 2026/01/16 15:07:14 fetching corpus: 1900, signal 134285/166442 (executing program) 2026/01/16 15:07:14 fetching corpus: 1950, signal 135547/168092 (executing program) 2026/01/16 15:07:14 fetching corpus: 2000, signal 136981/169849 (executing program) 2026/01/16 15:07:14 fetching corpus: 2050, signal 137894/171288 (executing program) 2026/01/16 15:07:14 fetching corpus: 2100, signal 138664/172577 (executing program) 2026/01/16 15:07:14 fetching corpus: 2150, signal 139694/173975 (executing program) 2026/01/16 15:07:14 fetching corpus: 2200, signal 140607/175307 (executing program) 2026/01/16 15:07:14 fetching corpus: 2250, signal 141464/176583 (executing program) 2026/01/16 15:07:14 fetching corpus: 2300, signal 142211/177755 (executing program) 2026/01/16 15:07:15 fetching corpus: 2350, signal 142824/178868 (executing program) 2026/01/16 15:07:15 fetching corpus: 2400, signal 143495/180013 (executing program) 2026/01/16 15:07:15 fetching corpus: 2450, signal 144462/181307 (executing program) 2026/01/16 15:07:15 fetching corpus: 2500, signal 145435/182562 (executing program) 2026/01/16 15:07:15 fetching corpus: 2550, signal 146280/183770 (executing program) 2026/01/16 15:07:15 fetching corpus: 2600, signal 146776/184738 (executing program) 2026/01/16 15:07:15 fetching corpus: 2650, signal 147426/185814 (executing program) 2026/01/16 15:07:15 fetching corpus: 2700, signal 148292/187033 (executing program) 2026/01/16 15:07:15 fetching corpus: 2750, signal 149165/188200 (executing program) 2026/01/16 15:07:16 fetching corpus: 2800, signal 149639/189117 (executing program) 2026/01/16 15:07:16 fetching corpus: 2850, signal 150500/190239 (executing program) 2026/01/16 15:07:16 fetching corpus: 2900, signal 151169/191276 (executing program) 2026/01/16 15:07:16 fetching corpus: 2950, signal 152159/192459 (executing program) 2026/01/16 15:07:16 fetching corpus: 3000, signal 152758/193412 (executing program) 2026/01/16 15:07:16 fetching corpus: 3050, signal 153282/194346 (executing program) 2026/01/16 15:07:16 fetching corpus: 3100, signal 153748/195254 (executing program) 2026/01/16 15:07:16 fetching corpus: 3150, signal 154385/196197 (executing program) 2026/01/16 15:07:16 fetching corpus: 3200, signal 155069/197158 (executing program) 2026/01/16 15:07:17 fetching corpus: 3250, signal 155687/198062 (executing program) 2026/01/16 15:07:17 fetching corpus: 3300, signal 156177/198916 (executing program) 2026/01/16 15:07:17 fetching corpus: 3350, signal 156742/199774 (executing program) 2026/01/16 15:07:17 fetching corpus: 3400, signal 157415/200647 (executing program) 2026/01/16 15:07:17 fetching corpus: 3450, signal 158156/201532 (executing program) 2026/01/16 15:07:17 fetching corpus: 3500, signal 158868/202420 (executing program) 2026/01/16 15:07:17 fetching corpus: 3550, signal 159408/203240 (executing program) 2026/01/16 15:07:17 fetching corpus: 3600, signal 160554/204253 (executing program) 2026/01/16 15:07:17 fetching corpus: 3650, signal 161078/205104 (executing program) 2026/01/16 15:07:18 fetching corpus: 3700, signal 161890/205932 (executing program) 2026/01/16 15:07:18 fetching corpus: 3750, signal 162360/206675 (executing program) 2026/01/16 15:07:18 fetching corpus: 3800, signal 162963/207493 (executing program) 2026/01/16 15:07:18 fetching corpus: 3850, signal 163557/208246 (executing program) 2026/01/16 15:07:18 fetching corpus: 3900, signal 164042/208974 (executing program) 2026/01/16 15:07:18 fetching corpus: 3950, signal 164731/209750 (executing program) 2026/01/16 15:07:18 fetching corpus: 4000, signal 165110/210471 (executing program) 2026/01/16 15:07:18 fetching corpus: 4050, signal 165898/211283 (executing program) 2026/01/16 15:07:18 fetching corpus: 4100, signal 167100/212146 (executing program) 2026/01/16 15:07:19 fetching corpus: 4150, signal 167720/212814 (executing program) 2026/01/16 15:07:19 fetching corpus: 4200, signal 168085/213439 (executing program) 2026/01/16 15:07:19 fetching corpus: 4250, signal 168461/214077 (executing program) 2026/01/16 15:07:19 fetching corpus: 4300, signal 168844/214686 (executing program) 2026/01/16 15:07:19 fetching corpus: 4350, signal 169389/215346 (executing program) 2026/01/16 15:07:19 fetching corpus: 4400, signal 169934/215970 (executing program) 2026/01/16 15:07:19 fetching corpus: 4450, signal 170337/216619 (executing program) 2026/01/16 15:07:19 fetching corpus: 4500, signal 171175/217326 (executing program) 2026/01/16 15:07:19 fetching corpus: 4550, signal 171996/218017 (executing program) 2026/01/16 15:07:19 fetching corpus: 4600, signal 172400/218569 (executing program) 2026/01/16 15:07:20 fetching corpus: 4650, signal 172992/219203 (executing program) 2026/01/16 15:07:20 fetching corpus: 4700, signal 173437/219783 (executing program) 2026/01/16 15:07:20 fetching corpus: 4750, signal 173953/220376 (executing program) 2026/01/16 15:07:20 fetching corpus: 4800, signal 174419/220920 (executing program) 2026/01/16 15:07:20 fetching corpus: 4850, signal 174799/221450 (executing program) 2026/01/16 15:07:20 fetching corpus: 4900, signal 175396/222034 (executing program) 2026/01/16 15:07:20 fetching corpus: 4950, signal 175834/222560 (executing program) 2026/01/16 15:07:20 fetching corpus: 5000, signal 176575/223110 (executing program) 2026/01/16 15:07:21 fetching corpus: 5050, signal 176966/223590 (executing program) 2026/01/16 15:07:21 fetching corpus: 5100, signal 177564/224102 (executing program) 2026/01/16 15:07:21 fetching corpus: 5150, signal 178146/224624 (executing program) 2026/01/16 15:07:21 fetching corpus: 5200, signal 178628/225131 (executing program) 2026/01/16 15:07:21 fetching corpus: 5250, signal 179111/225660 (executing program) 2026/01/16 15:07:21 fetching corpus: 5300, signal 179471/226108 (executing program) 2026/01/16 15:07:21 fetching corpus: 5350, signal 180098/226604 (executing program) 2026/01/16 15:07:21 fetching corpus: 5400, signal 180483/227031 (executing program) 2026/01/16 15:07:21 fetching corpus: 5450, signal 181005/227466 (executing program) 2026/01/16 15:07:22 fetching corpus: 5500, signal 181431/227896 (executing program) 2026/01/16 15:07:22 fetching corpus: 5550, signal 181678/228326 (executing program) 2026/01/16 15:07:22 fetching corpus: 5600, signal 182213/228758 (executing program) 2026/01/16 15:07:22 fetching corpus: 5650, signal 182703/228861 (executing program) 2026/01/16 15:07:22 fetching corpus: 5700, signal 183017/228861 (executing program) 2026/01/16 15:07:22 fetching corpus: 5750, signal 183381/228861 (executing program) 2026/01/16 15:07:22 fetching corpus: 5800, signal 183733/228869 (executing program) 2026/01/16 15:07:22 fetching corpus: 5850, signal 184285/228876 (executing program) 2026/01/16 15:07:22 fetching corpus: 5900, signal 184665/228876 (executing program) 2026/01/16 15:07:23 fetching corpus: 5950, signal 184994/228879 (executing program) 2026/01/16 15:07:23 fetching corpus: 6000, signal 185403/228890 (executing program) 2026/01/16 15:07:23 fetching corpus: 6050, signal 185693/228890 (executing program) 2026/01/16 15:07:23 fetching corpus: 6100, signal 186267/228890 (executing program) 2026/01/16 15:07:23 fetching corpus: 6150, signal 186647/228891 (executing program) 2026/01/16 15:07:23 fetching corpus: 6200, signal 187021/228892 (executing program) 2026/01/16 15:07:23 fetching corpus: 6250, signal 187618/228892 (executing program) 2026/01/16 15:07:23 fetching corpus: 6300, signal 188027/228892 (executing program) 2026/01/16 15:07:23 fetching corpus: 6350, signal 188349/228893 (executing program) 2026/01/16 15:07:23 fetching corpus: 6400, signal 188687/228902 (executing program) 2026/01/16 15:07:24 fetching corpus: 6450, signal 189130/228903 (executing program) 2026/01/16 15:07:24 fetching corpus: 6500, signal 189534/228903 (executing program) 2026/01/16 15:07:24 fetching corpus: 6550, signal 189889/228909 (executing program) 2026/01/16 15:07:24 fetching corpus: 6600, signal 190384/228909 (executing program) 2026/01/16 15:07:24 fetching corpus: 6650, signal 190615/228909 (executing program) 2026/01/16 15:07:24 fetching corpus: 6700, signal 191002/228921 (executing program) 2026/01/16 15:07:24 fetching corpus: 6750, signal 191457/228921 (executing program) 2026/01/16 15:07:24 fetching corpus: 6800, signal 191862/228921 (executing program) 2026/01/16 15:07:24 fetching corpus: 6850, signal 192219/228923 (executing program) 2026/01/16 15:07:24 fetching corpus: 6900, signal 192552/228925 (executing program) 2026/01/16 15:07:24 fetching corpus: 6950, signal 192954/228925 (executing program) 2026/01/16 15:07:25 fetching corpus: 7000, signal 193237/228925 (executing program) 2026/01/16 15:07:25 fetching corpus: 7050, signal 193556/228925 (executing program) 2026/01/16 15:07:25 fetching corpus: 7100, signal 193930/228926 (executing program) 2026/01/16 15:07:25 fetching corpus: 7150, signal 194513/228927 (executing program) 2026/01/16 15:07:25 fetching corpus: 7200, signal 194874/228927 (executing program) 2026/01/16 15:07:25 fetching corpus: 7250, signal 195225/228927 (executing program) 2026/01/16 15:07:25 fetching corpus: 7300, signal 195716/228927 (executing program) 2026/01/16 15:07:25 fetching corpus: 7350, signal 196096/228927 (executing program) 2026/01/16 15:07:25 fetching corpus: 7400, signal 196458/228929 (executing program) 2026/01/16 15:07:26 fetching corpus: 7450, signal 196765/228931 (executing program) 2026/01/16 15:07:26 fetching corpus: 7500, signal 197302/228931 (executing program) 2026/01/16 15:07:26 fetching corpus: 7550, signal 197552/228944 (executing program) 2026/01/16 15:07:26 fetching corpus: 7600, signal 197872/228944 (executing program) 2026/01/16 15:07:26 fetching corpus: 7650, signal 198166/228944 (executing program) 2026/01/16 15:07:26 fetching corpus: 7700, signal 198532/228944 (executing program) 2026/01/16 15:07:26 fetching corpus: 7750, signal 198859/228944 (executing program) 2026/01/16 15:07:26 fetching corpus: 7800, signal 199196/228944 (executing program) 2026/01/16 15:07:26 fetching corpus: 7850, signal 199529/228948 (executing program) 2026/01/16 15:07:26 fetching corpus: 7900, signal 199932/228951 (executing program) 2026/01/16 15:07:26 fetching corpus: 7950, signal 200289/228958 (executing program) 2026/01/16 15:07:27 fetching corpus: 8000, signal 200671/228958 (executing program) 2026/01/16 15:07:27 fetching corpus: 8050, signal 201117/228960 (executing program) 2026/01/16 15:07:27 fetching corpus: 8100, signal 201482/228960 (executing program) 2026/01/16 15:07:27 fetching corpus: 8150, signal 201859/228976 (executing program) 2026/01/16 15:07:27 fetching corpus: 8200, signal 202222/228976 (executing program) 2026/01/16 15:07:27 fetching corpus: 8250, signal 202525/228990 (executing program) 2026/01/16 15:07:27 fetching corpus: 8300, signal 202820/228996 (executing program) 2026/01/16 15:07:27 fetching corpus: 8350, signal 203227/229000 (executing program) 2026/01/16 15:07:27 fetching corpus: 8400, signal 203642/229000 (executing program) 2026/01/16 15:07:27 fetching corpus: 8450, signal 203981/229000 (executing program) 2026/01/16 15:07:27 fetching corpus: 8500, signal 204225/229000 (executing program) 2026/01/16 15:07:27 fetching corpus: 8550, signal 204406/229000 (executing program) 2026/01/16 15:07:28 fetching corpus: 8600, signal 204730/229013 (executing program) 2026/01/16 15:07:28 fetching corpus: 8650, signal 204945/229015 (executing program) 2026/01/16 15:07:28 fetching corpus: 8700, signal 205273/229015 (executing program) 2026/01/16 15:07:28 fetching corpus: 8750, signal 205497/229023 (executing program) 2026/01/16 15:07:28 fetching corpus: 8800, signal 205845/229023 (executing program) 2026/01/16 15:07:28 fetching corpus: 8850, signal 206045/229023 (executing program) 2026/01/16 15:07:28 fetching corpus: 8900, signal 206452/229030 (executing program) 2026/01/16 15:07:28 fetching corpus: 8950, signal 206696/229030 (executing program) 2026/01/16 15:07:28 fetching corpus: 9000, signal 206956/229030 (executing program) 2026/01/16 15:07:28 fetching corpus: 9050, signal 207205/229030 (executing program) 2026/01/16 15:07:29 fetching corpus: 9100, signal 207527/229030 (executing program) 2026/01/16 15:07:29 fetching corpus: 9150, signal 207790/229030 (executing program) 2026/01/16 15:07:29 fetching corpus: 9200, signal 208047/229031 (executing program) 2026/01/16 15:07:29 fetching corpus: 9250, signal 208487/229032 (executing program) 2026/01/16 15:07:29 fetching corpus: 9300, signal 208707/229033 (executing program) 2026/01/16 15:07:29 fetching corpus: 9350, signal 209022/229033 (executing program) 2026/01/16 15:07:29 fetching corpus: 9400, signal 209244/229033 (executing program) 2026/01/16 15:07:29 fetching corpus: 9450, signal 209525/229033 (executing program) 2026/01/16 15:07:29 fetching corpus: 9500, signal 209755/229033 (executing program) 2026/01/16 15:07:30 fetching corpus: 9550, signal 210022/229035 (executing program) 2026/01/16 15:07:30 fetching corpus: 9600, signal 210461/229035 (executing program) 2026/01/16 15:07:30 fetching corpus: 9650, signal 210879/229035 (executing program) 2026/01/16 15:07:30 fetching corpus: 9700, signal 211153/229035 (executing program) 2026/01/16 15:07:30 fetching corpus: 9750, signal 211407/229036 (executing program) 2026/01/16 15:07:30 fetching corpus: 9800, signal 211767/229044 (executing program) 2026/01/16 15:07:30 fetching corpus: 9850, signal 212035/229051 (executing program) 2026/01/16 15:07:30 fetching corpus: 9900, signal 212323/229051 (executing program) 2026/01/16 15:07:30 fetching corpus: 9950, signal 212631/229052 (executing program) 2026/01/16 15:07:30 fetching corpus: 10000, signal 212896/229052 (executing program) 2026/01/16 15:07:31 fetching corpus: 10050, signal 213148/229052 (executing program) 2026/01/16 15:07:31 fetching corpus: 10100, signal 213438/229052 (executing program) 2026/01/16 15:07:31 fetching corpus: 10150, signal 213578/229058 (executing program) 2026/01/16 15:07:31 fetching corpus: 10200, signal 213828/229069 (executing program) 2026/01/16 15:07:31 fetching corpus: 10250, signal 214110/229088 (executing program) 2026/01/16 15:07:31 fetching corpus: 10300, signal 214471/229088 (executing program) 2026/01/16 15:07:31 fetching corpus: 10350, signal 214697/229090 (executing program) 2026/01/16 15:07:31 fetching corpus: 10400, signal 214943/229092 (executing program) 2026/01/16 15:07:31 fetching corpus: 10450, signal 215168/229093 (executing program) 2026/01/16 15:07:32 fetching corpus: 10500, signal 215374/229093 (executing program) 2026/01/16 15:07:32 fetching corpus: 10550, signal 215579/229093 (executing program) 2026/01/16 15:07:32 fetching corpus: 10600, signal 215794/229093 (executing program) 2026/01/16 15:07:32 fetching corpus: 10650, signal 216051/229098 (executing program) 2026/01/16 15:07:32 fetching corpus: 10700, signal 216317/229108 (executing program) 2026/01/16 15:07:32 fetching corpus: 10750, signal 216549/229109 (executing program) 2026/01/16 15:07:32 fetching corpus: 10800, signal 216826/229109 (executing program) 2026/01/16 15:07:32 fetching corpus: 10850, signal 217063/229109 (executing program) 2026/01/16 15:07:32 fetching corpus: 10900, signal 217294/229109 (executing program) 2026/01/16 15:07:32 fetching corpus: 10950, signal 217520/229136 (executing program) 2026/01/16 15:07:33 fetching corpus: 11000, signal 217778/229136 (executing program) 2026/01/16 15:07:33 fetching corpus: 11050, signal 217965/229142 (executing program) 2026/01/16 15:07:33 fetching corpus: 11100, signal 218267/229142 (executing program) 2026/01/16 15:07:33 fetching corpus: 11150, signal 218547/229142 (executing program) 2026/01/16 15:07:33 fetching corpus: 11200, signal 218754/229143 (executing program) 2026/01/16 15:07:33 fetching corpus: 11250, signal 218946/229148 (executing program) 2026/01/16 15:07:33 fetching corpus: 11300, signal 219201/229148 (executing program) 2026/01/16 15:07:33 fetching corpus: 11350, signal 219497/229148 (executing program) 2026/01/16 15:07:33 fetching corpus: 11400, signal 219749/229148 (executing program) 2026/01/16 15:07:34 fetching corpus: 11450, signal 219989/229157 (executing program) 2026/01/16 15:07:34 fetching corpus: 11500, signal 220234/229157 (executing program) 2026/01/16 15:07:34 fetching corpus: 11550, signal 220460/229157 (executing program) 2026/01/16 15:07:34 fetching corpus: 11600, signal 220628/229157 (executing program) 2026/01/16 15:07:34 fetching corpus: 11650, signal 220806/229158 (executing program) 2026/01/16 15:07:34 fetching corpus: 11700, signal 221132/229158 (executing program) 2026/01/16 15:07:34 fetching corpus: 11750, signal 221328/229158 (executing program) 2026/01/16 15:07:34 fetching corpus: 11800, signal 221816/229161 (executing program) 2026/01/16 15:07:34 fetching corpus: 11850, signal 222049/229163 (executing program) 2026/01/16 15:07:34 fetching corpus: 11900, signal 222265/229173 (executing program) 2026/01/16 15:07:35 fetching corpus: 11950, signal 222497/229176 (executing program) 2026/01/16 15:07:35 fetching corpus: 12000, signal 223006/229177 (executing program) 2026/01/16 15:07:35 fetching corpus: 12050, signal 223174/229177 (executing program) 2026/01/16 15:07:35 fetching corpus: 12100, signal 223428/229177 (executing program) 2026/01/16 15:07:35 fetching corpus: 12150, signal 223672/229182 (executing program) 2026/01/16 15:07:35 fetching corpus: 12200, signal 223844/229186 (executing program) 2026/01/16 15:07:35 fetching corpus: 12250, signal 224011/229187 (executing program) 2026/01/16 15:07:35 fetching corpus: 12300, signal 224663/229187 (executing program) 2026/01/16 15:07:36 fetching corpus: 12350, signal 224889/229187 (executing program) 2026/01/16 15:07:36 fetching corpus: 12400, signal 225090/229187 (executing program) 2026/01/16 15:07:36 fetching corpus: 12450, signal 225400/229187 (executing program) 2026/01/16 15:07:36 fetching corpus: 12500, signal 225614/229189 (executing program) 2026/01/16 15:07:36 fetching corpus: 12550, signal 225879/229189 (executing program) 2026/01/16 15:07:36 fetching corpus: 12600, signal 226052/229189 (executing program) 2026/01/16 15:07:36 fetching corpus: 12650, signal 226189/229189 (executing program) 2026/01/16 15:07:36 fetching corpus: 12700, signal 226403/229189 (executing program) 2026/01/16 15:07:36 fetching corpus: 12750, signal 226619/229189 (executing program) 2026/01/16 15:07:37 fetching corpus: 12800, signal 226823/229189 (executing program) 2026/01/16 15:07:37 fetching corpus: 12850, signal 227147/229189 (executing program) 2026/01/16 15:07:37 fetching corpus: 12900, signal 227387/229189 (executing program) 2026/01/16 15:07:37 fetching corpus: 12950, signal 227538/229193 (executing program) 2026/01/16 15:07:37 fetching corpus: 12979, signal 227630/229193 (executing program) 2026/01/16 15:07:37 fetching corpus: 12979, signal 227630/229193 (executing program) 2026/01/16 15:07:38 starting 8 fuzzer processes 15:07:38 executing program 0: r0 = getpid() r1 = pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xff0b, 0x0) 15:07:38 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8004}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000100), 0x5000000) 15:07:38 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) shutdown(r0, 0x0) 15:07:38 executing program 2: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37", 0x37) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendfile(r2, r1, 0x0, 0x51f) [ 91.117210] audit: type=1400 audit(1768576058.885:7): avc: denied { execmem } for pid=269 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:07:38 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) poll(&(0x7f0000000180)=[{r0, 0x5b44aeef2a16d3d4}], 0x1, 0x2dbd) 15:07:38 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x24, 0x1c, 0x1, 0x0, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x24}], 0x1}, 0x0) 15:07:38 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/91, 0x5b}], 0x1) 15:07:38 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) [ 92.271736] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.274125] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.276174] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.280787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.288409] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.289668] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.291094] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.295213] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.295431] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.297947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.339452] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.340634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.343096] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.344002] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.345982] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.346848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.352315] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.355022] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.356224] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.357230] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.358708] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.362422] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.366026] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.381257] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.385384] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 92.386650] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.390382] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 92.393392] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 92.406315] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 92.407518] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 92.415525] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.418003] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 92.419666] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 92.420540] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 92.424968] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 92.430070] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.431255] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.432227] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 92.435995] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.439380] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 94.360361] Bluetooth: hci0: command tx timeout [ 94.361013] Bluetooth: hci1: command tx timeout [ 94.424140] Bluetooth: hci2: command tx timeout [ 94.424639] Bluetooth: hci4: command tx timeout [ 94.425133] Bluetooth: hci3: command tx timeout [ 94.488141] Bluetooth: hci5: command tx timeout [ 94.488538] Bluetooth: hci7: command tx timeout [ 94.489572] Bluetooth: hci6: command tx timeout [ 96.408660] Bluetooth: hci1: command tx timeout [ 96.408680] Bluetooth: hci0: command tx timeout [ 96.473959] Bluetooth: hci4: command tx timeout [ 96.473986] Bluetooth: hci3: command tx timeout [ 96.474818] Bluetooth: hci2: command tx timeout [ 96.536037] Bluetooth: hci7: command tx timeout [ 96.536935] Bluetooth: hci6: command tx timeout [ 96.537602] Bluetooth: hci5: command tx timeout [ 98.457694] Bluetooth: hci0: command tx timeout [ 98.457907] Bluetooth: hci1: command tx timeout [ 98.520640] Bluetooth: hci4: command tx timeout [ 98.520671] Bluetooth: hci3: command tx timeout [ 98.522057] Bluetooth: hci2: command tx timeout [ 98.583965] Bluetooth: hci7: command tx timeout [ 98.584434] Bluetooth: hci5: command tx timeout [ 98.584815] Bluetooth: hci6: command tx timeout [ 100.504564] Bluetooth: hci1: command tx timeout [ 100.505107] Bluetooth: hci0: command tx timeout [ 100.567988] Bluetooth: hci3: command tx timeout [ 100.569643] Bluetooth: hci2: command tx timeout [ 100.570159] Bluetooth: hci4: command tx timeout [ 100.632467] Bluetooth: hci6: command tx timeout [ 100.632967] Bluetooth: hci5: command tx timeout [ 100.632995] Bluetooth: hci7: command tx timeout [ 124.113994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.114626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.294376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.296615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.537675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.538305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.660767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.662071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 15:08:12 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x26, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x2}) fcntl$lock(r0, 0x25, &(0x7f0000000240)={0x1, 0x0, 0x9}) [ 124.869806] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 124.932974] audit: type=1400 audit(1768576092.700:8): avc: denied { open } for pid=3830 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 124.939017] audit: type=1400 audit(1768576092.700:9): avc: denied { kernel } for pid=3830 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 15:08:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x4, r3, 0x1, 0x0, 0x6, @dev}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 15:08:12 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) poll(&(0x7f0000000180)=[{r0, 0x5b44aeef2a16d3d4}], 0x1, 0x2dbd) 15:08:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x4, r3, 0x1, 0x0, 0x6, @dev}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 15:08:12 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) poll(&(0x7f0000000180)=[{r0, 0x5b44aeef2a16d3d4}], 0x1, 0x2dbd) 15:08:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x4, r3, 0x1, 0x0, 0x6, @dev}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) [ 125.231292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.231897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 15:08:13 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) poll(&(0x7f0000000180)=[{r0, 0x5b44aeef2a16d3d4}], 0x1, 0x2dbd) 15:08:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x4, r3, 0x1, 0x0, 0x6, @dev}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) [ 125.321164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.321751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.416482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.417185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.473273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.473913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.524803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.529710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.603009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.603609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.676054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.676657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.688329] audit: type=1400 audit(1768576093.456:10): avc: denied { read } for pid=3893 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 125.702157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.702750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.710590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.711324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.750513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.751617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.811672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.813817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.858157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.858755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 15:08:13 executing program 0: mlock2(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 15:08:13 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) chroot(&(0x7f00000006c0)='./file0\x00') 15:08:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x4, r3, 0x1, 0x0, 0x6, @dev}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 15:08:13 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) dup2(r1, r0) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 15:08:13 executing program 1: r0 = socket$inet(0x2, 0x803, 0x9) read(r0, 0x0, 0x0) 15:08:13 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/91, 0x5b}], 0x1) 15:08:13 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000010d00)) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) 15:08:13 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/53, 0x35}, {&(0x7f0000000140)=""/174, 0xae}, {&(0x7f00000000c0)=""/51, 0x33}], 0x3, 0x0, 0x0) [ 126.012712] loop6: detected capacity change from 0 to 6 [ 126.042492] FAT-fs (loop6): Directory bread(block 6) failed [ 126.059307] FAT-fs (loop6): Directory bread(block 6) failed [ 126.082046] FAT-fs (loop6): Directory bread(block 6) failed 15:08:13 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADMODE1(r0, 0x530e, 0x0) 15:08:13 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) dup2(r1, r0) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 15:08:13 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/91, 0x5b}], 0x1) 15:08:13 executing program 4: syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f00000049c0), 0x24, 0x0) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_access\x00', 0x0, 0x2) 15:08:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x4, r3, 0x1, 0x0, 0x6, @dev}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 15:08:13 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000010d00)) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) 15:08:13 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgroups(0x1, &(0x7f0000000340)=[0x0]) 15:08:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x0, 0x0, 0x19, 0x0, "719dbaafbaa0cbae2bff747f4426caf59b50a5edbbdf34ef5bdea852b7adb38cc01f0aca504d9e30a0304839fed428ad5b6b0714b838d97dddab67795fa7c4cafb5100b857eed7ed06bb10c4ec2a7910"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 15:08:13 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) lseek(r0, 0x36e6591dffffc, 0x1) [ 126.179558] loop6: detected capacity change from 0 to 6 [ 126.189465] FAT-fs (loop6): Directory bread(block 6) failed [ 126.199322] FAT-fs (loop6): Directory bread(block 6) failed [ 126.199831] FAT-fs (loop6): Directory bread(block 6) failed 15:08:13 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) dup2(r1, r0) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 15:08:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x4, r3, 0x1, 0x0, 0x6, @dev}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 15:08:13 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000010d00)) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) 15:08:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x0, 0x0, 0x19, 0x0, "719dbaafbaa0cbae2bff747f4426caf59b50a5edbbdf34ef5bdea852b7adb38cc01f0aca504d9e30a0304839fed428ad5b6b0714b838d97dddab67795fa7c4cafb5100b857eed7ed06bb10c4ec2a7910"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) [ 126.255947] loop6: detected capacity change from 0 to 6 [ 126.258318] FAT-fs (loop6): Directory bread(block 6) failed [ 126.260655] FAT-fs (loop6): Directory bread(block 6) failed [ 126.261257] FAT-fs (loop6): Directory bread(block 6) failed 15:08:14 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/91, 0x5b}], 0x1) 15:08:14 executing program 6: r0 = syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000010d00)) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) 15:08:14 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgroups(0x1, &(0x7f0000000340)=[0x0]) 15:08:14 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADMODE1(r0, 0x530e, 0x0) 15:08:14 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) dup2(r1, r0) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) [ 126.360627] loop6: detected capacity change from 0 to 6 [ 126.365562] FAT-fs (loop6): Directory bread(block 6) failed [ 126.368582] FAT-fs (loop6): Directory bread(block 6) failed [ 126.369690] FAT-fs (loop6): Directory bread(block 6) failed 15:08:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x0, 0x0, 0x19, 0x0, "719dbaafbaa0cbae2bff747f4426caf59b50a5edbbdf34ef5bdea852b7adb38cc01f0aca504d9e30a0304839fed428ad5b6b0714b838d97dddab67795fa7c4cafb5100b857eed7ed06bb10c4ec2a7910"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 15:08:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x0, 0x0, 0x19, 0x0, "719dbaafbaa0cbae2bff747f4426caf59b50a5edbbdf34ef5bdea852b7adb38cc01f0aca504d9e30a0304839fed428ad5b6b0714b838d97dddab67795fa7c4cafb5100b857eed7ed06bb10c4ec2a7910"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 15:08:14 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgroups(0x1, &(0x7f0000000340)=[0x0]) 15:08:14 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='clear_refs\x00') pwrite64(r0, &(0x7f0000000040)="a00a7e", 0x3, 0x0) 15:08:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x0, 0x0, 0x19, 0x0, "719dbaafbaa0cbae2bff747f4426caf59b50a5edbbdf34ef5bdea852b7adb38cc01f0aca504d9e30a0304839fed428ad5b6b0714b838d97dddab67795fa7c4cafb5100b857eed7ed06bb10c4ec2a7910"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 15:08:14 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x4, 0x63}], 0xff2f) 15:08:14 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000140), 0x14) 15:08:14 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADMODE1(r0, 0x530e, 0x0) 15:08:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x0, 0x0, 0x19, 0x0, "719dbaafbaa0cbae2bff747f4426caf59b50a5edbbdf34ef5bdea852b7adb38cc01f0aca504d9e30a0304839fed428ad5b6b0714b838d97dddab67795fa7c4cafb5100b857eed7ed06bb10c4ec2a7910"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 15:08:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x0, 0x0, 0x19, 0x0, "719dbaafbaa0cbae2bff747f4426caf59b50a5edbbdf34ef5bdea852b7adb38cc01f0aca504d9e30a0304839fed428ad5b6b0714b838d97dddab67795fa7c4cafb5100b857eed7ed06bb10c4ec2a7910"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 15:08:14 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgroups(0x1, &(0x7f0000000340)=[0x0]) 15:08:14 executing program 5: mlockall(0x5) mlockall(0x3) mlockall(0x5) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15:08:14 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c460000000000000040"], 0x78) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) [ 126.574569] Unsupported ieee802154 address type: 0 15:08:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x301}, 0x14}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0xa260, 0x4) recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/22, 0x16}}], 0x1, 0x0, 0x0) 15:08:14 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_gfeatures={0x34}}) 15:08:14 executing program 7: creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = fsopen(&(0x7f0000000040)='pipefs\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 15:08:14 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000005, 0x32, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)) 15:08:14 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADMODE1(r0, 0x530e, 0x0) 15:08:14 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x0) lseek(r0, 0x0, 0x2) 15:08:14 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000003ac0)='/proc/asound/seq/clients\x00', 0x0, 0x0) 15:08:14 executing program 5: mlockall(0x5) mlockall(0x3) mlockall(0x5) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 126.945896] [ 126.946082] ===================================== [ 126.946457] WARNING: bad unlock balance detected! [ 126.946844] 6.19.0-rc5-next-20260116 #1 Not tainted [ 126.947233] ------------------------------------- [ 126.947620] syz-executor.0/4001 is trying to release lock (rcu_read_lock) at: [ 126.948201] [] __wait_on_freeing_inode+0x105/0x350 [ 126.949010] but there are no more locks to release! [ 126.949971] [ 126.949971] other info that might help us debug this: [ 126.951319] 4 locks held by syz-executor.0/4001: [ 126.952289] #0: ffff88800f7fa3f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 126.954089] #1: ffff888047d82a00 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 126.956302] #2: ffff88800f7fe950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 126.958014] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 126.959367] [ 126.959367] stack backtrace: [ 126.959727] CPU: 1 UID: 0 PID: 4001 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 126.959741] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 126.959748] Call Trace: [ 126.959752] [ 126.959756] dump_stack_lvl+0xca/0x120 [ 126.959787] ? __wait_on_freeing_inode+0x105/0x350 [ 126.959801] print_unlock_imbalance_bug+0x118/0x130 [ 126.959816] ? __wait_on_freeing_inode+0x105/0x350 [ 126.959830] lock_release+0x1ee/0x270 [ 126.959844] __wait_on_freeing_inode+0x10a/0x350 [ 126.959859] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 126.959874] ? __pfx_var_wake_function+0x10/0x10 [ 126.959891] ? lock_is_held_type+0x9e/0x120 [ 126.959903] insert_inode_locked+0x25f/0x890 [ 126.959919] __ext4_new_inode+0x223d/0x4cd0 [ 126.959936] ? __pfx___ext4_new_inode+0x10/0x10 [ 126.959950] ? __pfx___dquot_initialize+0x10/0x10 [ 126.959967] ? __pfx_avc_has_perm+0x10/0x10 [ 126.959983] ext4_symlink+0x623/0xb40 [ 126.960001] ? __pfx_ext4_symlink+0x10/0x10 [ 126.960017] ? security_inode_permission+0x72/0xe0 [ 126.960030] vfs_symlink+0x44b/0x840 [ 126.960046] filename_symlinkat+0x158/0x440 [ 126.960060] ? __pfx_filename_symlinkat+0x10/0x10 [ 126.960073] ? strncpy_from_user+0x21b/0x2f0 [ 126.960090] __x64_sys_symlink+0x82/0x110 [ 126.960103] do_syscall_64+0xbf/0x420 [ 126.960116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.960128] RIP: 0033:0x7fa2250cc427 [ 126.960137] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 126.960148] RSP: 002b:00007ffefd656258 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 126.960158] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa2250cc427 [ 126.960166] RDX: 00007ffefd656337 RSI: 00007fa225127019 RDI: 00007ffefd656320 [ 126.960173] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffefd6560f0 [ 126.960180] R10: 00007ffefd655fa7 R11: 0000000000000202 R12: 0000000000000001 [ 126.960187] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffefd656320 [ 126.960197] [ 126.975822] ------------[ cut here ]------------ [ 126.976936] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.0/4001 [ 126.977780] Modules linked in: [ 126.978084] CPU: 1 UID: 0 PID: 4001 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 126.978914] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 126.979558] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 126.980051] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 126.981539] RSP: 0018:ffff88804818f9a0 EFLAGS: 00010286 [ 126.982009] RAX: 00000000ffffffff RBX: ffff88801a43d280 RCX: ffffffff815660f7 [ 126.982588] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff88801a43d67c [ 126.983201] RBP: ffff88801a43d280 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 126.983781] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801a43d280 [ 126.984404] R13: 0000000000000001 R14: ffffffff85c0f9a0 R15: ffff888047cff578 [ 126.985023] FS: 0000555593a5c400(0000) GS:ffff8880e5442000(0000) knlGS:0000000000000000 [ 126.985665] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.986170] CR2: 00007fa22514c540 CR3: 000000001c1db000 CR4: 0000000000350ef0 [ 126.986744] Call Trace: [ 126.987036] [ 126.987681] __wait_on_freeing_inode+0x10f/0x350 [ 126.988401] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 126.989482] ? __pfx_var_wake_function+0x10/0x10 [ 126.990762] ? lock_is_held_type+0x9e/0x120 [ 126.991951] insert_inode_locked+0x25f/0x890 [ 126.993535] __ext4_new_inode+0x223d/0x4cd0 [ 126.996093] ? __pfx___ext4_new_inode+0x10/0x10 [ 126.997315] ? __pfx___dquot_initialize+0x10/0x10 [ 126.998085] ? __pfx_avc_has_perm+0x10/0x10 [ 126.999811] ext4_symlink+0x623/0xb40 [ 127.002164] ? __pfx_ext4_symlink+0x10/0x10 [ 127.003168] ? security_inode_permission+0x72/0xe0 [ 127.004761] vfs_symlink+0x44b/0x840 [ 127.006158] filename_symlinkat+0x158/0x440 [ 127.007284] ? __pfx_filename_symlinkat+0x10/0x10 [ 127.008058] ? strncpy_from_user+0x21b/0x2f0 [ 127.009935] __x64_sys_symlink+0x82/0x110 [ 127.010661] do_syscall_64+0xbf/0x420 [ 127.011516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.012070] RIP: 0033:0x7fa2250cc427 [ 127.012430] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 127.013938] RSP: 002b:00007ffefd656258 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 127.014543] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa2250cc427 [ 127.015155] RDX: 00007ffefd656337 RSI: 00007fa225127019 RDI: 00007ffefd656320 [ 127.015716] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffefd6560f0 [ 127.016319] R10: 00007ffefd655fa7 R11: 0000000000000202 R12: 0000000000000001 [ 127.016924] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffefd656320 [ 127.019505] [ 127.019700] irq event stamp: 183 [ 127.020010] hardirqs last enabled at (183): [] irqentry_exit+0x17b/0x650 [ 127.020738] hardirqs last disabled at (182): [] sysvec_apic_timer_interrupt+0xf/0x80 [ 127.021576] softirqs last enabled at (176): [] kernel_fpu_end+0x59/0x70 [ 127.022335] softirqs last disabled at (174): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 127.023167] ---[ end trace 0000000000000000 ]--- 15:08:14 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000040)) 15:08:14 executing program 7: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x300, 0x0) read(r0, 0x0, 0x0) 15:08:14 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x0) lseek(r0, 0x0, 0x2) 15:08:14 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) 15:08:14 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000005, 0x32, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)) 15:08:15 executing program 6: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) shutdown(r0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000200), 0x0, 0x0) 15:08:15 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x0) lseek(r0, 0x0, 0x2) 15:08:15 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x2000000) write$binfmt_aout(r0, 0x0, 0x1001) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)) fallocate(r1, 0x0, 0x0, 0x100000000) close(r0) 15:08:15 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000005, 0x32, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)) 15:08:15 executing program 0: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x44032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x18) 15:08:15 executing program 5: mlockall(0x5) mlockall(0x3) mlockall(0x5) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15:08:15 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000040)) 15:08:15 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe}, 0xc) 15:08:15 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x0) lseek(r0, 0x0, 0x2) 15:08:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x68, &(0x7f0000000080)=0x3, 0x4) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet_udp_encap(r0, 0x11, 0x68, &(0x7f0000000080)=0x5, 0x4) 15:08:15 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x52) 15:08:15 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000005, 0x32, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)) 15:08:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x28, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}]}, 0x28}], 0x1}, 0x0) 15:08:15 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000040)) 15:08:15 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) [ 127.453174] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 15:08:15 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r0, 0x4b4a, &(0x7f0000000600)) 15:08:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00') getdents64(r0, &(0x7f0000000380)=""/4096, 0x18) 15:08:15 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) get_robust_list(0xffffffffffffffff, 0x0, 0x0) 15:08:15 executing program 3: clock_settime(0x0, &(0x7f0000000240)={0x77359400}) 15:08:15 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5390, &(0x7f0000000440)={"b55c3a41609039d40088a81b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:08:15 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000040)) 15:08:15 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioperm(0x0, 0x30, 0x7f) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) 15:08:15 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 15:08:15 executing program 5: mlockall(0x5) mlockall(0x3) mlockall(0x5) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15:08:15 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) get_robust_list(0xffffffffffffffff, 0x0, 0x0) 15:08:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00') getdents64(r0, &(0x7f0000000380)=""/4096, 0x18) 03:33:20 executing program 6: sendmsg$sock(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)=@llc={0x1a, 0x307, 0x8, 0x64, 0x3, 0x20, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="20445a525d5ea02c8da2c2c4b4cf64dcada4338fc150dbbae070f1cac6901f92897858b5409483a612dffdecd8aab7f619eaac67d3123ff04e813d2154b5dd66d90a2139e00ffb59c47784f9700fbdba30690c224e4abb3aa7ec7802d7b74a38af8f0b9e9a24aaf727f582f0aaa29d6130d9648b142e65cfb97f43dae43772b1c48613239839a2bed699af300218595b1b4e0befef16d12e63dffa7703acde5b90340ae9f4daf065e55e94bfb281db", 0xaf}, {&(0x7f00000001c0)="85de0cf77c1f90d2ae9a3515c9c59bf505497324e31cc734123298272eb3e266cbebf9cceba344bf81794a18b24f6fa5827e3f865a8071d31b8b602acde4312c4a3d3cba0361c19e287e343a39b58c2e2624b7887dbb58c238fa0cefaeb060cce3b0e3937883ef339936cb24a3ce4bd2ce16a12bf056fff6d3f5b0f49c4b6dc9bee31960ee89eaa5da46535821fa60", 0x8f}], 0x2, &(0x7f0000000280)=[@mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x6d}}], 0x30}, 0x8000) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x1, @perf_bp={0x0, 0xf}, 0x2430, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000f40), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000f40), 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='.\x00', &(0x7f0000000440), 0x801, &(0x7f0000000480)={[{@huge_always}], [{@smackfsfloor={'smackfsfloor', 0x3d, '{#'}}]}) ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000014c0)={0x0, 0xfffffffffffffffc, 0x2}) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r3, &(0x7f00000008c0)={0x61, 0x7d, 0x1, {{0x0, 0x42, 0x92bf, 0x8, {0x8, 0x0, 0x5}, 0x41110000, 0x2, 0x2, 0x6, 0xf, '/dev/snd/timer\x00'}, 0xa, 'map_files\x00', r4, 0x0, 0xee01}}, 0x61) r5 = perf_event_open$cgroup(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x1f, 0x5, 0x4, 0x0, 0x5, 0x94ec, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f00000004c0), 0x8}, 0x0, 0x4e8, 0x4, 0x1, 0x20452d21, 0x4, 0x2985, 0x0, 0x7, 0x0, 0x80}, 0xffffffffffffffff, 0x2, r0, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) copy_file_range(r1, &(0x7f00000000c0)=0x2703, r2, &(0x7f0000000100), 0x80000000, 0x0) setuid(0xee01) syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') 03:33:20 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) get_robust_list(0xffffffffffffffff, 0x0, 0x0) 03:33:20 executing program 3: clock_settime(0x0, &(0x7f0000000240)={0x77359400}) 03:33:20 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/stat\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat2(r1, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x0) 03:33:20 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00') getdents64(r0, &(0x7f0000000380)=""/4096, 0x18) 03:33:20 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) [ 127.814206] tmpfs: Unsupported parameter 'huge' 03:33:20 executing program 3: clock_settime(0x0, &(0x7f0000000240)={0x77359400}) 03:33:20 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) get_robust_list(0xffffffffffffffff, 0x0, 0x0) 03:33:20 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00') getdents64(r0, &(0x7f0000000380)=""/4096, 0x18) 03:33:20 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5390, &(0x7f0000000440)={"b55c3a41609039d40088a81b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:33:20 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '-'}}]}}) 03:33:20 executing program 6: sendmsg$sock(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)=@llc={0x1a, 0x307, 0x8, 0x64, 0x3, 0x20, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="20445a525d5ea02c8da2c2c4b4cf64dcada4338fc150dbbae070f1cac6901f92897858b5409483a612dffdecd8aab7f619eaac67d3123ff04e813d2154b5dd66d90a2139e00ffb59c47784f9700fbdba30690c224e4abb3aa7ec7802d7b74a38af8f0b9e9a24aaf727f582f0aaa29d6130d9648b142e65cfb97f43dae43772b1c48613239839a2bed699af300218595b1b4e0befef16d12e63dffa7703acde5b90340ae9f4daf065e55e94bfb281db", 0xaf}, {&(0x7f00000001c0)="85de0cf77c1f90d2ae9a3515c9c59bf505497324e31cc734123298272eb3e266cbebf9cceba344bf81794a18b24f6fa5827e3f865a8071d31b8b602acde4312c4a3d3cba0361c19e287e343a39b58c2e2624b7887dbb58c238fa0cefaeb060cce3b0e3937883ef339936cb24a3ce4bd2ce16a12bf056fff6d3f5b0f49c4b6dc9bee31960ee89eaa5da46535821fa60", 0x8f}], 0x2, &(0x7f0000000280)=[@mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x6d}}], 0x30}, 0x8000) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x1, @perf_bp={0x0, 0xf}, 0x2430, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000f40), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000f40), 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='.\x00', &(0x7f0000000440), 0x801, &(0x7f0000000480)={[{@huge_always}], [{@smackfsfloor={'smackfsfloor', 0x3d, '{#'}}]}) ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000014c0)={0x0, 0xfffffffffffffffc, 0x2}) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r3, &(0x7f00000008c0)={0x61, 0x7d, 0x1, {{0x0, 0x42, 0x92bf, 0x8, {0x8, 0x0, 0x5}, 0x41110000, 0x2, 0x2, 0x6, 0xf, '/dev/snd/timer\x00'}, 0xa, 'map_files\x00', r4, 0x0, 0xee01}}, 0x61) r5 = perf_event_open$cgroup(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x1f, 0x5, 0x4, 0x0, 0x5, 0x94ec, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f00000004c0), 0x8}, 0x0, 0x4e8, 0x4, 0x1, 0x20452d21, 0x4, 0x2985, 0x0, 0x7, 0x0, 0x80}, 0xffffffffffffffff, 0x2, r0, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) copy_file_range(r1, &(0x7f00000000c0)=0x2703, r2, &(0x7f0000000100), 0x80000000, 0x0) setuid(0xee01) syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') 03:33:20 executing program 2: sendmsg$sock(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)=@llc={0x1a, 0x307, 0x8, 0x64, 0x3, 0x20, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="20445a525d5ea02c8da2c2c4b4cf64dcada4338fc150dbbae070f1cac6901f92897858b5409483a612dffdecd8aab7f619eaac67d3123ff04e813d2154b5dd66d90a2139e00ffb59c47784f9700fbdba30690c224e4abb3aa7ec7802d7b74a38af8f0b9e9a24aaf727f582f0aaa29d6130d9648b142e65cfb97f43dae43772b1c48613239839a2bed699af300218595b1b4e0befef16d12e63dffa7703acde5b90340ae9f4daf065e55e94bfb281db", 0xaf}, {&(0x7f00000001c0)="85de0cf77c1f90d2ae9a3515c9c59bf505497324e31cc734123298272eb3e266cbebf9cceba344bf81794a18b24f6fa5827e3f865a8071d31b8b602acde4312c4a3d3cba0361c19e287e343a39b58c2e2624b7887dbb58c238fa0cefaeb060cce3b0e3937883ef339936cb24a3ce4bd2ce16a12bf056fff6d3f5b0f49c4b6dc9bee31960ee89eaa5da46535821fa60", 0x8f}], 0x2, &(0x7f0000000280)=[@mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x6d}}], 0x30}, 0x8000) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x1, @perf_bp={0x0, 0xf}, 0x2430, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000f40), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000f40), 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='.\x00', &(0x7f0000000440), 0x801, &(0x7f0000000480)={[{@huge_always}], [{@smackfsfloor={'smackfsfloor', 0x3d, '{#'}}]}) ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000014c0)={0x0, 0xfffffffffffffffc, 0x2}) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r3, &(0x7f00000008c0)={0x61, 0x7d, 0x1, {{0x0, 0x42, 0x92bf, 0x8, {0x8, 0x0, 0x5}, 0x41110000, 0x2, 0x2, 0x6, 0xf, '/dev/snd/timer\x00'}, 0xa, 'map_files\x00', r4, 0x0, 0xee01}}, 0x61) r5 = perf_event_open$cgroup(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x1f, 0x5, 0x4, 0x0, 0x5, 0x94ec, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f00000004c0), 0x8}, 0x0, 0x4e8, 0x4, 0x1, 0x20452d21, 0x4, 0x2985, 0x0, 0x7, 0x0, 0x80}, 0xffffffffffffffff, 0x2, r0, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) copy_file_range(r1, &(0x7f00000000c0)=0x2703, r2, &(0x7f0000000100), 0x80000000, 0x0) setuid(0xee01) syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') 03:33:20 executing program 3: clock_settime(0x0, &(0x7f0000000240)={0x77359400}) [ 128.261190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:20 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x15}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 128.317636] tmpfs: Unsupported parameter 'huge' [ 128.323675] tmpfs: Unsupported parameter 'huge' 03:33:20 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00010000040000000a000080"], 0x24}], 0x1}, 0x0) 03:33:20 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x227e, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:33:20 executing program 7: r0 = semget$private(0x0, 0x5, 0x0) semop(r0, &(0x7f0000000000)=[{0x3}], 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() fork() syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000240001000f801", 0x17}, {0x0, 0x0, 0x80000000000}], 0x0, &(0x7f0000010d00)) [ 128.372212] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 03:33:20 executing program 2: sendmsg$sock(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)=@llc={0x1a, 0x307, 0x8, 0x64, 0x3, 0x20, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="20445a525d5ea02c8da2c2c4b4cf64dcada4338fc150dbbae070f1cac6901f92897858b5409483a612dffdecd8aab7f619eaac67d3123ff04e813d2154b5dd66d90a2139e00ffb59c47784f9700fbdba30690c224e4abb3aa7ec7802d7b74a38af8f0b9e9a24aaf727f582f0aaa29d6130d9648b142e65cfb97f43dae43772b1c48613239839a2bed699af300218595b1b4e0befef16d12e63dffa7703acde5b90340ae9f4daf065e55e94bfb281db", 0xaf}, {&(0x7f00000001c0)="85de0cf77c1f90d2ae9a3515c9c59bf505497324e31cc734123298272eb3e266cbebf9cceba344bf81794a18b24f6fa5827e3f865a8071d31b8b602acde4312c4a3d3cba0361c19e287e343a39b58c2e2624b7887dbb58c238fa0cefaeb060cce3b0e3937883ef339936cb24a3ce4bd2ce16a12bf056fff6d3f5b0f49c4b6dc9bee31960ee89eaa5da46535821fa60", 0x8f}], 0x2, &(0x7f0000000280)=[@mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x6d}}], 0x30}, 0x8000) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x1, @perf_bp={0x0, 0xf}, 0x2430, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000f40), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000f40), 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='.\x00', &(0x7f0000000440), 0x801, &(0x7f0000000480)={[{@huge_always}], [{@smackfsfloor={'smackfsfloor', 0x3d, '{#'}}]}) ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000014c0)={0x0, 0xfffffffffffffffc, 0x2}) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r3, &(0x7f00000008c0)={0x61, 0x7d, 0x1, {{0x0, 0x42, 0x92bf, 0x8, {0x8, 0x0, 0x5}, 0x41110000, 0x2, 0x2, 0x6, 0xf, '/dev/snd/timer\x00'}, 0xa, 'map_files\x00', r4, 0x0, 0xee01}}, 0x61) r5 = perf_event_open$cgroup(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x1f, 0x5, 0x4, 0x0, 0x5, 0x94ec, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f00000004c0), 0x8}, 0x0, 0x4e8, 0x4, 0x1, 0x20452d21, 0x4, 0x2985, 0x0, 0x7, 0x0, 0x80}, 0xffffffffffffffff, 0x2, r0, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) copy_file_range(r1, &(0x7f00000000c0)=0x2703, r2, &(0x7f0000000100), 0x80000000, 0x0) setuid(0xee01) syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') 03:33:20 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5390, &(0x7f0000000440)={"b55c3a41609039d40088a81b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:33:20 executing program 6: sendmsg$sock(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)=@llc={0x1a, 0x307, 0x8, 0x64, 0x3, 0x20, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="20445a525d5ea02c8da2c2c4b4cf64dcada4338fc150dbbae070f1cac6901f92897858b5409483a612dffdecd8aab7f619eaac67d3123ff04e813d2154b5dd66d90a2139e00ffb59c47784f9700fbdba30690c224e4abb3aa7ec7802d7b74a38af8f0b9e9a24aaf727f582f0aaa29d6130d9648b142e65cfb97f43dae43772b1c48613239839a2bed699af300218595b1b4e0befef16d12e63dffa7703acde5b90340ae9f4daf065e55e94bfb281db", 0xaf}, {&(0x7f00000001c0)="85de0cf77c1f90d2ae9a3515c9c59bf505497324e31cc734123298272eb3e266cbebf9cceba344bf81794a18b24f6fa5827e3f865a8071d31b8b602acde4312c4a3d3cba0361c19e287e343a39b58c2e2624b7887dbb58c238fa0cefaeb060cce3b0e3937883ef339936cb24a3ce4bd2ce16a12bf056fff6d3f5b0f49c4b6dc9bee31960ee89eaa5da46535821fa60", 0x8f}], 0x2, &(0x7f0000000280)=[@mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x6d}}], 0x30}, 0x8000) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x1, @perf_bp={0x0, 0xf}, 0x2430, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000f40), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000f40), 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='.\x00', &(0x7f0000000440), 0x801, &(0x7f0000000480)={[{@huge_always}], [{@smackfsfloor={'smackfsfloor', 0x3d, '{#'}}]}) ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000014c0)={0x0, 0xfffffffffffffffc, 0x2}) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r3, &(0x7f00000008c0)={0x61, 0x7d, 0x1, {{0x0, 0x42, 0x92bf, 0x8, {0x8, 0x0, 0x5}, 0x41110000, 0x2, 0x2, 0x6, 0xf, '/dev/snd/timer\x00'}, 0xa, 'map_files\x00', r4, 0x0, 0xee01}}, 0x61) r5 = perf_event_open$cgroup(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x1f, 0x5, 0x4, 0x0, 0x5, 0x94ec, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f00000004c0), 0x8}, 0x0, 0x4e8, 0x4, 0x1, 0x20452d21, 0x4, 0x2985, 0x0, 0x7, 0x0, 0x80}, 0xffffffffffffffff, 0x2, r0, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) copy_file_range(r1, &(0x7f00000000c0)=0x2703, r2, &(0x7f0000000100), 0x80000000, 0x0) setuid(0xee01) syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') 03:33:20 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/uts\x00') 03:33:20 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "8d00a05de92cd2e174cbfb618b6904b473c3fe05ed91a72b627000", 'y\x00\x00\"\x00 \x00', {"a979159a1b08243b764e33f13a6a2006", "09000000502d538200595900"}}}}}}}, 0x0) [ 128.424848] tmpfs: Unsupported parameter 'huge' [ 128.426018] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 128.466110] tmpfs: Unsupported parameter 'huge' 03:33:20 executing program 6: sendmsg$sock(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)=@llc={0x1a, 0x307, 0x8, 0x64, 0x3, 0x20, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="20445a525d5ea02c8da2c2c4b4cf64dcada4338fc150dbbae070f1cac6901f92897858b5409483a612dffdecd8aab7f619eaac67d3123ff04e813d2154b5dd66d90a2139e00ffb59c47784f9700fbdba30690c224e4abb3aa7ec7802d7b74a38af8f0b9e9a24aaf727f582f0aaa29d6130d9648b142e65cfb97f43dae43772b1c48613239839a2bed699af300218595b1b4e0befef16d12e63dffa7703acde5b90340ae9f4daf065e55e94bfb281db", 0xaf}, {&(0x7f00000001c0)="85de0cf77c1f90d2ae9a3515c9c59bf505497324e31cc734123298272eb3e266cbebf9cceba344bf81794a18b24f6fa5827e3f865a8071d31b8b602acde4312c4a3d3cba0361c19e287e343a39b58c2e2624b7887dbb58c238fa0cefaeb060cce3b0e3937883ef339936cb24a3ce4bd2ce16a12bf056fff6d3f5b0f49c4b6dc9bee31960ee89eaa5da46535821fa60", 0x8f}], 0x2, &(0x7f0000000280)=[@mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x6d}}], 0x30}, 0x8000) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x1, @perf_bp={0x0, 0xf}, 0x2430, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000f40), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000f40), 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='.\x00', &(0x7f0000000440), 0x801, &(0x7f0000000480)={[{@huge_always}], [{@smackfsfloor={'smackfsfloor', 0x3d, '{#'}}]}) ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000014c0)={0x0, 0xfffffffffffffffc, 0x2}) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r3, &(0x7f00000008c0)={0x61, 0x7d, 0x1, {{0x0, 0x42, 0x92bf, 0x8, {0x8, 0x0, 0x5}, 0x41110000, 0x2, 0x2, 0x6, 0xf, '/dev/snd/timer\x00'}, 0xa, 'map_files\x00', r4, 0x0, 0xee01}}, 0x61) r5 = perf_event_open$cgroup(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x1f, 0x5, 0x4, 0x0, 0x5, 0x94ec, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f00000004c0), 0x8}, 0x0, 0x4e8, 0x4, 0x1, 0x20452d21, 0x4, 0x2985, 0x0, 0x7, 0x0, 0x80}, 0xffffffffffffffff, 0x2, r0, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) copy_file_range(r1, &(0x7f00000000c0)=0x2703, r2, &(0x7f0000000100), 0x80000000, 0x0) setuid(0xee01) syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') 03:33:20 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x2, 0x3, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x44}}, 0x0) [ 128.524806] loop7: detected capacity change from 0 to 264192 [ 128.577924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:20 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5390, &(0x7f0000000440)={"b55c3a41609039d40088a81b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:33:20 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x15}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 128.634532] tmpfs: Unsupported parameter 'huge' [ 128.699599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:20 executing program 2: sendmsg$sock(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)=@llc={0x1a, 0x307, 0x8, 0x64, 0x3, 0x20, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="20445a525d5ea02c8da2c2c4b4cf64dcada4338fc150dbbae070f1cac6901f92897858b5409483a612dffdecd8aab7f619eaac67d3123ff04e813d2154b5dd66d90a2139e00ffb59c47784f9700fbdba30690c224e4abb3aa7ec7802d7b74a38af8f0b9e9a24aaf727f582f0aaa29d6130d9648b142e65cfb97f43dae43772b1c48613239839a2bed699af300218595b1b4e0befef16d12e63dffa7703acde5b90340ae9f4daf065e55e94bfb281db", 0xaf}, {&(0x7f00000001c0)="85de0cf77c1f90d2ae9a3515c9c59bf505497324e31cc734123298272eb3e266cbebf9cceba344bf81794a18b24f6fa5827e3f865a8071d31b8b602acde4312c4a3d3cba0361c19e287e343a39b58c2e2624b7887dbb58c238fa0cefaeb060cce3b0e3937883ef339936cb24a3ce4bd2ce16a12bf056fff6d3f5b0f49c4b6dc9bee31960ee89eaa5da46535821fa60", 0x8f}], 0x2, &(0x7f0000000280)=[@mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x6d}}], 0x30}, 0x8000) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x1, @perf_bp={0x0, 0xf}, 0x2430, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000f40), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000f40), 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='.\x00', &(0x7f0000000440), 0x801, &(0x7f0000000480)={[{@huge_always}], [{@smackfsfloor={'smackfsfloor', 0x3d, '{#'}}]}) ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000014c0)={0x0, 0xfffffffffffffffc, 0x2}) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r3, &(0x7f00000008c0)={0x61, 0x7d, 0x1, {{0x0, 0x42, 0x92bf, 0x8, {0x8, 0x0, 0x5}, 0x41110000, 0x2, 0x2, 0x6, 0xf, '/dev/snd/timer\x00'}, 0xa, 'map_files\x00', r4, 0x0, 0xee01}}, 0x61) r5 = perf_event_open$cgroup(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x1f, 0x5, 0x4, 0x0, 0x5, 0x94ec, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f00000004c0), 0x8}, 0x0, 0x4e8, 0x4, 0x1, 0x20452d21, 0x4, 0x2985, 0x0, 0x7, 0x0, 0x80}, 0xffffffffffffffff, 0x2, r0, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, 0x0) copy_file_range(r1, &(0x7f00000000c0)=0x2703, r2, &(0x7f0000000100), 0x80000000, 0x0) setuid(0xee01) syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') 03:33:20 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "8d00a05de92cd2e174cbfb618b6904b473c3fe05ed91a72b627000", 'y\x00\x00\"\x00 \x00', {"a979159a1b08243b764e33f13a6a2006", "09000000502d538200595900"}}}}}}}, 0x0) 03:33:20 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x15}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 03:33:20 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000003680), 0x4) 03:33:20 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x2, 0x3, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x44}}, 0x0) 03:33:20 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64], 0x90) sendmsg(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0}, 0x0) 03:33:20 executing program 1: prctl$PR_SET_MM_MAP(0x39, 0xe, 0x0, 0x0) 03:33:20 executing program 7: r0 = semget$private(0x0, 0x5, 0x0) semop(r0, &(0x7f0000000000)=[{0x3}], 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() fork() syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000240001000f801", 0x17}, {0x0, 0x0, 0x80000000000}], 0x0, &(0x7f0000010d00)) [ 129.038502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 03:33:20 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "8d00a05de92cd2e174cbfb618b6904b473c3fe05ed91a72b627000", 'y\x00\x00\"\x00 \x00', {"a979159a1b08243b764e33f13a6a2006", "09000000502d538200595900"}}}}}}}, 0x0) 03:33:20 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/149, 0x50, 0x0) 03:33:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000002840)=0xffffffffffffffff, 0x4) sendmmsg$inet6(r0, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="90", 0x1}], 0x1}}], 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 03:33:20 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "8d00a05de92cd2e174cbfb618b6904b473c3fe05ed91a72b627000", 'y\x00\x00\"\x00 \x00', {"a979159a1b08243b764e33f13a6a2006", "09000000502d538200595900"}}}}}}}, 0x0) 03:33:20 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64], 0x90) sendmsg(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0}, 0x0) [ 129.174731] tmpfs: Unsupported parameter 'huge' 03:33:20 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x2, 0x3, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x44}}, 0x0) [ 129.189402] loop7: detected capacity change from 0 to 264192 03:33:21 executing program 7: r0 = semget$private(0x0, 0x5, 0x0) semop(r0, &(0x7f0000000000)=[{0x3}], 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() fork() syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000240001000f801", 0x17}, {0x0, 0x0, 0x80000000000}], 0x0, &(0x7f0000010d00)) 03:33:21 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64], 0x90) sendmsg(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0}, 0x0) 03:33:21 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) dup2(r0, r1) 03:33:21 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) poll(&(0x7f0000000180)=[{r0}], 0x1, 0x0) 03:33:21 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xd400080b) inotify_rm_watch(r0, r1) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00') 03:33:21 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x15}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 03:33:21 executing program 2: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r1, &(0x7f00000000c0), 0x1, 0x0) 03:33:21 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x2, 0x3, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x44}}, 0x0) [ 129.410095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.414648] audit: type=1400 audit(2000000001.159:11): avc: denied { watch_reads } for pid=4232 comm="syz-executor.6" path="/syzkaller-testdir694355218/syzkaller.6HvUFO/19/file0" dev="tmpfs" ino=1 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=dir permissive=1 03:33:21 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xd400080b) inotify_rm_watch(r0, r1) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00') 03:33:21 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000001040)='net/route\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x180, 0x0) 03:33:21 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xd400080b) inotify_rm_watch(r0, r1) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00') [ 129.633512] loop7: detected capacity change from 0 to 264192 03:33:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x8942, &(0x7f0000000000)={'sit0\x00', 0x0}) 03:33:21 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xd400080b) inotify_rm_watch(r0, r1) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00') 03:33:21 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000001c0)={{0x6}, 'port1\x00'}) 03:33:21 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64], 0x90) sendmsg(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0}, 0x0) 03:33:21 executing program 2: r0 = gettid() r1 = getpgrp(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x6}]}) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) rt_tgsigqueueinfo(r1, r0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x80000001}) 03:33:21 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r2, 0x1}, 0x14}}, 0x0) 03:33:21 executing program 7: r0 = semget$private(0x0, 0x5, 0x0) semop(r0, &(0x7f0000000000)=[{0x3}], 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81202ff0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() fork() syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000240001000f801", 0x17}, {0x0, 0x0, 0x80000000000}], 0x0, &(0x7f0000010d00)) [ 129.754550] audit: type=1326 audit(2000000001.499:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4263 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe07c589b19 code=0x0 03:33:21 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ff", 0xa, 0x3ffd}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00f78622783d23fc238afc2047c1c4ef60e4073b654e3f052cdb0fbc7316bbe0abaceaeb810000007184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038a38eaf"]) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/31) fchown(0xffffffffffffffff, 0x0, 0x0) renameat(r1, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = signalfd4(r1, 0x0, 0x0, 0x80000) lstat(&(0x7f0000000c00)='./file0/file0\x00', &(0x7f0000000c40)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) dup3(0xffffffffffffffff, r2, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000900)='./file0/file0\x00', 0x8000, 0x103) fchown(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() 03:33:21 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) umount2(&(0x7f0000000000)='./file0\x00', 0x0) [ 129.811713] loop1: detected capacity change from 0 to 63 [ 129.813652] FAT-fs (loop1): bogus number of reserved sectors [ 129.814148] FAT-fs (loop1): Can't find a valid FAT filesystem 03:33:21 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0x0, 0x4d}, "de23a381cce58bda6abcb78f61fb1befdd0e0d65efd5d7e3fb1cde26e47a942d78c981dd21ea551bc87aed22cb8e04fe06f4c7d08b1f5e50f37cdf1b2360b86b90edd49ef610e8a8561d94c54d"}, 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dummy0\x00'}) ioctl$TUNSETSNDBUF(r0, 0x801054db, 0x0) 03:33:21 executing program 5: r0 = syz_io_uring_setup(0x6130, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000000080)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = dup(r0) syz_io_uring_setup(0x7544, &(0x7f0000000240)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000002c0)) 03:33:21 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295", 0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) [ 129.879841] loop1: detected capacity change from 0 to 63 03:33:21 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="10", 0x1, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r1, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) 03:33:21 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r0, 0x107, 0x11, 0x0, 0x0) 03:33:21 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ff", 0xa, 0x3ffd}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00f78622783d23fc238afc2047c1c4ef60e4073b654e3f052cdb0fbc7316bbe0abaceaeb810000007184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038a38eaf"]) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/31) fchown(0xffffffffffffffff, 0x0, 0x0) renameat(r1, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = signalfd4(r1, 0x0, 0x0, 0x80000) lstat(&(0x7f0000000c00)='./file0/file0\x00', &(0x7f0000000c40)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) dup3(0xffffffffffffffff, r2, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000900)='./file0/file0\x00', 0x8000, 0x103) fchown(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() 03:33:21 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ff", 0xa, 0x3ffd}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00f78622783d23fc238afc2047c1c4ef60e4073b654e3f052cdb0fbc7316bbe0abaceaeb810000007184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038a38eaf"]) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/31) fchown(0xffffffffffffffff, 0x0, 0x0) renameat(r1, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = signalfd4(r1, 0x0, 0x0, 0x80000) lstat(&(0x7f0000000c00)='./file0/file0\x00', &(0x7f0000000c40)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) dup3(0xffffffffffffffff, r2, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000900)='./file0/file0\x00', 0x8000, 0x103) fchown(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() [ 129.911135] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 130.009766] loop0: detected capacity change from 0 to 63 [ 130.050437] FAT-fs (loop0): bogus number of reserved sectors [ 130.050973] FAT-fs (loop0): Can't find a valid FAT filesystem 03:33:21 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ff", 0xa, 0x3ffd}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00f78622783d23fc238afc2047c1c4ef60e4073b654e3f052cdb0fbc7316bbe0abaceaeb810000007184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038a38eaf"]) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/31) fchown(0xffffffffffffffff, 0x0, 0x0) renameat(r1, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = signalfd4(r1, 0x0, 0x0, 0x80000) lstat(&(0x7f0000000c00)='./file0/file0\x00', &(0x7f0000000c40)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) dup3(0xffffffffffffffff, r2, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000900)='./file0/file0\x00', 0x8000, 0x103) fchown(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() 03:33:21 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x1}}}}}, 0x20}}, 0x0) [ 130.095744] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 130.183895] FAT-fs (loop5): bogus number of reserved sectors [ 130.196895] FAT-fs (loop5): Can't find a valid FAT filesystem 03:33:21 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="10", 0x1, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r1, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) [ 130.587381] audit: type=1326 audit(2000000002.331:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4263 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe07c589b19 code=0x0 03:33:22 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ff", 0xa, 0x3ffd}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00f78622783d23fc238afc2047c1c4ef60e4073b654e3f052cdb0fbc7316bbe0abaceaeb810000007184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038a38eaf"]) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/31) fchown(0xffffffffffffffff, 0x0, 0x0) renameat(r1, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = signalfd4(r1, 0x0, 0x0, 0x80000) lstat(&(0x7f0000000c00)='./file0/file0\x00', &(0x7f0000000c40)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) dup3(0xffffffffffffffff, r2, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000900)='./file0/file0\x00', 0x8000, 0x103) fchown(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() 03:33:22 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295", 0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) 03:33:22 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295", 0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) 03:33:22 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ff", 0xa, 0x3ffd}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00f78622783d23fc238afc2047c1c4ef60e4073b654e3f052cdb0fbc7316bbe0abaceaeb810000007184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038a38eaf"]) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/31) fchown(0xffffffffffffffff, 0x0, 0x0) renameat(r1, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = signalfd4(r1, 0x0, 0x0, 0x80000) lstat(&(0x7f0000000c00)='./file0/file0\x00', &(0x7f0000000c40)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) dup3(0xffffffffffffffff, r2, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000900)='./file0/file0\x00', 0x8000, 0x103) fchown(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() 03:33:22 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="10", 0x1, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r1, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) 03:33:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="10", 0x1, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r1, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) 03:33:22 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0x0, 0x4d}, "de23a381cce58bda6abcb78f61fb1befdd0e0d65efd5d7e3fb1cde26e47a942d78c981dd21ea551bc87aed22cb8e04fe06f4c7d08b1f5e50f37cdf1b2360b86b90edd49ef610e8a8561d94c54d"}, 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dummy0\x00'}) ioctl$TUNSETSNDBUF(r0, 0x801054db, 0x0) 03:33:22 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ff", 0xa, 0x3ffd}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00f78622783d23fc238afc2047c1c4ef60e4073b654e3f052cdb0fbc7316bbe0abaceaeb810000007184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038a38eaf"]) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/31) fchown(0xffffffffffffffff, 0x0, 0x0) renameat(r1, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = signalfd4(r1, 0x0, 0x0, 0x80000) lstat(&(0x7f0000000c00)='./file0/file0\x00', &(0x7f0000000c40)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) dup3(0xffffffffffffffff, r2, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000900)='./file0/file0\x00', 0x8000, 0x103) fchown(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() [ 130.652786] FAT-fs (loop0): bogus number of reserved sectors [ 130.653390] FAT-fs (loop0): Can't find a valid FAT filesystem [ 130.657031] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 130.682124] FAT-fs (loop5): bogus number of reserved sectors [ 130.683464] FAT-fs (loop5): Can't find a valid FAT filesystem 03:33:22 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="10", 0x1, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r1, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) 03:33:22 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0x0, 0x4d}, "de23a381cce58bda6abcb78f61fb1befdd0e0d65efd5d7e3fb1cde26e47a942d78c981dd21ea551bc87aed22cb8e04fe06f4c7d08b1f5e50f37cdf1b2360b86b90edd49ef610e8a8561d94c54d"}, 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dummy0\x00'}) ioctl$TUNSETSNDBUF(r0, 0x801054db, 0x0) 03:33:22 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ff", 0xa, 0x3ffd}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00f78622783d23fc238afc2047c1c4ef60e4073b654e3f052cdb0fbc7316bbe0abaceaeb810000007184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038a38eaf"]) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/31) fchown(0xffffffffffffffff, 0x0, 0x0) renameat(r1, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = signalfd4(r1, 0x0, 0x0, 0x80000) lstat(&(0x7f0000000c00)='./file0/file0\x00', &(0x7f0000000c40)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) dup3(0xffffffffffffffff, r2, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000900)='./file0/file0\x00', 0x8000, 0x103) fchown(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() 03:33:22 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ff", 0xa, 0x3ffd}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00f78622783d23fc238afc2047c1c4ef60e4073b654e3f052cdb0fbc7316bbe0abaceaeb810000007184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038a38eaf"]) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/31) fchown(0xffffffffffffffff, 0x0, 0x0) renameat(r1, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = signalfd4(r1, 0x0, 0x0, 0x80000) lstat(&(0x7f0000000c00)='./file0/file0\x00', &(0x7f0000000c40)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) dup3(0xffffffffffffffff, r2, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000900)='./file0/file0\x00', 0x8000, 0x103) fchown(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() 03:33:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="10", 0x1, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r1, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) 03:33:22 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0x0, 0x4d}, "de23a381cce58bda6abcb78f61fb1befdd0e0d65efd5d7e3fb1cde26e47a942d78c981dd21ea551bc87aed22cb8e04fe06f4c7d08b1f5e50f37cdf1b2360b86b90edd49ef610e8a8561d94c54d"}, 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dummy0\x00'}) ioctl$TUNSETSNDBUF(r0, 0x801054db, 0x0) 03:33:22 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ff", 0xa, 0x3ffd}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00f78622783d23fc238afc2047c1c4ef60e4073b654e3f052cdb0fbc7316bbe0abaceaeb810000007184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038a38eaf"]) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/31) fchown(0xffffffffffffffff, 0x0, 0x0) renameat(r1, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = signalfd4(r1, 0x0, 0x0, 0x80000) lstat(&(0x7f0000000c00)='./file0/file0\x00', &(0x7f0000000c40)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) dup3(0xffffffffffffffff, r2, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000900)='./file0/file0\x00', 0x8000, 0x103) fchown(0xffffffffffffffff, 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fork() [ 130.762917] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 130.874741] FAT-fs (loop0): bogus number of reserved sectors [ 130.878410] FAT-fs (loop0): Can't find a valid FAT filesystem [ 130.882119] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 130.915442] FAT-fs (loop5): bogus number of reserved sectors [ 130.916481] FAT-fs (loop5): Can't find a valid FAT filesystem 03:33:22 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000100)=""/72, 0x48, 0x6) 03:33:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="10", 0x1, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000100)='b', 0x1}], 0x1, 0x0, 0x0, 0x0) io_submit(r1, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}]) 03:33:22 executing program 3: syz_emit_ethernet(0x4e, &(0x7f0000000300)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x18, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x60, '\x00', @remote}}}}}}, 0x0) 03:33:22 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295", 0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) 03:33:22 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295", 0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) 03:33:22 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r2}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) 03:33:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {0x22}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) 03:33:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {0x22}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) 03:33:22 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000040)=""/115, 0x18) 03:33:22 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x4132, 0x4) sendmmsg$inet6(r0, &(0x7f00000043c0)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) recvmsg(r0, &(0x7f00000059c0)={0x0, 0x0, 0x0}, 0x2062) 03:33:23 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000100)) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x63}], 0xff2f) 03:33:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {0x22}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) 03:33:23 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f00000000c0)) keyctl$KEYCTL_RESTRICT_KEYRING(0x5, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 03:33:23 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x8, 0x2c, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @mcast2, {[], @echo_request}}}}}, 0x0) 03:33:23 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x1c, 0x3a, 0x0, @empty, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x0, 0x0, @private0}}}}}}, 0x0) 03:33:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {0x22}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) 03:33:23 executing program 7: rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7}, 0xfffffffffffffe02, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xffffffffffffffff) 03:33:23 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x1) [ 131.375657] audit: type=1400 audit(2000000003.120:14): avc: denied { write } for pid=4395 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 03:33:23 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x1c, 0x3a, 0x0, @empty, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x0, 0x0, @private0}}}}}}, 0x0) 03:33:23 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295", 0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) 03:33:23 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f00000000c0)) keyctl$KEYCTL_RESTRICT_KEYRING(0x5, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 03:33:23 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0}, {r1, 0x14}], 0x2, 0x0, 0x0, 0x0) 03:33:23 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x1) 03:33:23 executing program 7: rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7}, 0xfffffffffffffe02, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xffffffffffffffff) 03:33:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r0, 0x4b45, 0x3) 03:33:23 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x1c, 0x3a, 0x0, @empty, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x0, 0x0, @private0}}}}}}, 0x0) 03:33:23 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295", 0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfdef) 03:33:23 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x1) 03:33:23 executing program 6: rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7}, 0xfffffffffffffe02, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xffffffffffffffff) 03:33:23 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x1c, 0x3a, 0x0, @empty, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x0, 0x0, @private0}}}}}}, 0x0) 03:33:23 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f00000000c0)) keyctl$KEYCTL_RESTRICT_KEYRING(0x5, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 03:33:23 executing program 5: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x9}}]}) 03:33:23 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000480), 0x0, 0xa0d02) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) [ 131.824478] EXT4-fs: Invalid want_extra_isize 9 [ 131.828645] EXT4-fs: Invalid want_extra_isize 9 03:33:23 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000001800), 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401070ca, 0x0) 03:33:23 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x1) 03:33:23 executing program 7: rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7}, 0xfffffffffffffe02, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xffffffffffffffff) 03:33:23 executing program 5: syz_emit_ethernet(0x3a, &(0x7f0000000280)={@local, @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @dev}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}, 0x0) 03:33:23 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = getpgrp(0x0) r1 = gettid() tgkill(r0, r1, 0x0) 03:33:23 executing program 1: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000001840)={{0x3, 0xffffffffffffffff}}) 03:33:23 executing program 6: rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7}, 0xfffffffffffffe02, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xffffffffffffffff) 03:33:23 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private0}}}], 0x28}}], 0x1, 0x0) 03:33:23 executing program 5: r0 = fsopen(&(0x7f0000001100)='msdos\x00', 0x0) readv(r0, &(0x7f0000002480)=[{&(0x7f0000001140)=""/16, 0x10}], 0x1) 03:33:23 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 03:33:23 executing program 1: io_setup(0x572, &(0x7f0000000140)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() r3 = pidfd_open(r2, 0x0) dup2(r3, r1) io_submit(r0, 0x3, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 03:33:23 executing program 7: rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7}, 0xfffffffffffffe02, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xffffffffffffffff) 03:33:23 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f00000000c0)) keyctl$KEYCTL_RESTRICT_KEYRING(0x5, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 03:33:23 executing program 2: shmget(0x2, 0x2000, 0x5ae3738473693fce, &(0x7f0000ffe000/0x2000)=nil) 03:33:23 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 03:33:23 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x4b3c, 0x0) 03:33:23 executing program 6: rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7}, 0xfffffffffffffe02, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xffffffffffffffff) 03:33:23 executing program 5: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 03:33:23 executing program 2: fsopen(&(0x7f00000000c0)='nfs4\x00', 0x0) 03:33:24 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 03:33:24 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0) fcntl$setstatus(r0, 0x4, 0x68c00) 03:33:24 executing program 2: creat(&(0x7f0000000300)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000700)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0) lchown(&(0x7f0000000180)='./file0\x00', 0xee00, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 03:33:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x4b3c, 0x0) 03:33:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x4b3c, 0x0) 03:33:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)={0x38, 0x2, 0x1, 0x3, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xc8}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private}}}]}]}, 0x38}}, 0x0) 03:33:24 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x541b, 0xfffffffffffffffe) 03:33:24 executing program 1: sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000020000100000000000000000002"], 0x28}], 0x1}, 0x0) 03:33:24 executing program 6: syslog(0x3, &(0x7f0000000800)=""/39, 0x27) 03:33:24 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 03:33:24 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145c02, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x14, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 03:33:24 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) acct(&(0x7f0000000000)='./file0\x00') 03:33:24 executing program 4: clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) process_madvise(r0, 0x0, 0x0, 0x0, 0x0) 03:33:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x4b3c, 0x0) [ 132.465703] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 132.467604] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 132.470233] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 132.470787] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 132.473319] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x4000 phys_seg 25 prio class 2 [ 132.485410] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 132.487183] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 132.487757] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 132.488376] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 40 00 00 40 00 [ 132.489322] I/O error, dev sr0, sector 256 op 0x0:(READ) flags 0x4000 phys_seg 3 prio class 2 [ 132.510242] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 132.511747] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 132.513963] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 132.514543] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 80 00 00 40 00 [ 132.515394] Process accounting resumed [ 132.520543] I/O error, dev sr0, sector 512 op 0x0:(READ) flags 0x4000 phys_seg 3 prio class 2 [ 132.537724] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 132.538512] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 132.539121] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 132.539633] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 c0 00 00 40 00 [ 132.540239] I/O error, dev sr0, sector 768 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 03:33:24 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$bind(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x82021, 0x0) chmod(&(0x7f00000000c0)='./file0\x00', 0x0) 03:33:24 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x3, &(0x7f0000000380)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000085f42d27379e44ba9a8dcb77402e9f71010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000013e00)) 03:33:24 executing program 6: syslog(0x3, &(0x7f0000000800)=""/39, 0x27) 03:33:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r1) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x2c}}, 0x0) 03:33:24 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) acct(&(0x7f0000000000)='./file0\x00') 03:33:24 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000012200)) 03:33:24 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 03:33:24 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145c02, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x14, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) [ 132.600757] set_capacity_and_notify: 6 callbacks suppressed [ 132.600772] loop4: detected capacity change from 0 to 128 [ 132.605786] audit: type=1326 audit(2000000004.350:15): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4527 comm="syz-executor.3" exe="/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6154420b19 code=0x0 [ 132.610292] loop2: detected capacity change from 0 to 2048 [ 132.617925] Process accounting resumed [ 132.623415] isofs_fill_super: bread failed, dev=loop4, iso_blknum=32, block=64 [ 132.625237] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (46507!=0) [ 132.626364] loop4: detected capacity change from 0 to 128 03:33:24 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) acct(&(0x7f0000000000)='./file0\x00') 03:33:24 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145c02, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x14, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) [ 132.631909] EXT4-fs (loop2): group descriptors corrupted! [ 132.647528] loop2: detected capacity change from 0 to 2048 [ 132.651779] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 132.652826] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (46507!=0) [ 132.653722] EXT4-fs (loop2): group descriptors corrupted! [ 132.655191] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 132.655747] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 132.655986] isofs_fill_super: bread failed, dev=loop4, iso_blknum=32, block=64 03:33:24 executing program 0: r0 = getpid() r1 = pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000000)="f7", 0x1}], 0x2, 0x0, 0x0) [ 132.658968] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 132.659599] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x4000 phys_seg 8 prio class 2 [ 132.666541] Process accounting resumed 03:33:24 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) acct(&(0x7f0000000000)='./file0\x00') [ 132.680927] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 132.681680] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 132.688565] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 132.689532] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 40 00 00 40 00 [ 132.691678] I/O error, dev sr0, sector 256 op 0x0:(READ) flags 0x4000 phys_seg 3 prio class 2 [ 132.706195] Process accounting resumed [ 132.715395] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 132.716932] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 132.717494] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 132.721094] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 80 00 00 40 00 [ 132.721704] I/O error, dev sr0, sector 512 op 0x0:(READ) flags 0x4000 phys_seg 3 prio class 2 03:33:24 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000012200)) [ 132.733639] loop4: detected capacity change from 0 to 128 [ 132.738973] isofs_fill_super: bread failed, dev=loop4, iso_blknum=32, block=64 [ 132.754563] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 132.755366] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 132.757164] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 132.757709] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 c0 00 00 40 00 [ 132.758901] I/O error, dev sr0, sector 768 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 133.439021] audit: type=1326 audit(2000000005.183:16): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4527 comm="syz-executor.3" exe="/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6154420b19 code=0x0 03:33:25 executing program 0: setregid(0x0, 0xee01) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fchown(r0, 0x0, 0x0) 03:33:25 executing program 6: syslog(0x3, &(0x7f0000000800)=""/39, 0x27) 03:33:25 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x3, &(0x7f0000000380)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000085f42d27379e44ba9a8dcb77402e9f71010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f0000013e00)) 03:33:25 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x28, 0x11, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x28}], 0x1}, 0x0) 03:33:25 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000012200)) [ 133.473587] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 03:33:25 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145c02, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x14, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x80000}]) 03:33:25 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) uname(&(0x7f0000000400)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote}, &(0x7f00000002c0)=0x1c) pread64(r1, &(0x7f0000000300)=""/188, 0xbc, 0xda) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f000 VM DIAGNOSIS: 15:08:14 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88806cf3d280 RCX=ffffffff8169dc2a RDX=ffff888016081b80 RSI=ffffffff8169dc04 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff8880146376d8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed100d9e7a51 R13=ffff88806cf3d288 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff81758268 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555562af2400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f96fdad95e0 CR3=000000000bd6b000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82975135 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff88804818f488 R8 =0000000000000000 R9 =ffffed10015f1046 R10=0000000000000034 R11=666666203a332320 R12=0000000000000034 R13=0000000000000010 R14=ffffffff889c19a0 R15=ffffffff82975120 RIP=ffffffff8297518d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555593a5c400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe5800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa22514c540 CR3=000000001c1db000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000ff0000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000