Warning: Permanently added '[localhost]:28746' (ECDSA) to the list of known hosts. 2026/01/13 08:36:21 fuzzer started 2026/01/13 08:36:21 dialing manager at localhost:38155 syzkaller login: [ 51.909357] cgroup: Unknown subsys name 'net' [ 51.977027] cgroup: Unknown subsys name 'cpuset' [ 51.989441] cgroup: Unknown subsys name 'rlimit' 2026/01/13 08:36:32 syscalls: 2214 2026/01/13 08:36:32 code coverage: enabled 2026/01/13 08:36:32 comparison tracing: enabled 2026/01/13 08:36:32 extra coverage: enabled 2026/01/13 08:36:32 setuid sandbox: enabled 2026/01/13 08:36:32 namespace sandbox: enabled 2026/01/13 08:36:32 Android sandbox: enabled 2026/01/13 08:36:32 fault injection: enabled 2026/01/13 08:36:32 leak checking: enabled 2026/01/13 08:36:32 net packet injection: enabled 2026/01/13 08:36:32 net device setup: enabled 2026/01/13 08:36:32 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/13 08:36:32 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/13 08:36:32 USB emulation: enabled 2026/01/13 08:36:32 hci packet injection: enabled 2026/01/13 08:36:32 wifi device emulation: enabled 2026/01/13 08:36:32 802.15.4 emulation: enabled 2026/01/13 08:36:32 fetching corpus: 0, signal 0/2000 (executing program) 2026/01/13 08:36:32 fetching corpus: 38, signal 19771/23361 (executing program) 2026/01/13 08:36:32 fetching corpus: 86, signal 35618/40510 (executing program) 2026/01/13 08:36:33 fetching corpus: 136, signal 45585/51667 (executing program) 2026/01/13 08:36:33 fetching corpus: 186, signal 50473/57734 (executing program) 2026/01/13 08:36:33 fetching corpus: 236, signal 57715/65925 (executing program) 2026/01/13 08:36:33 fetching corpus: 286, signal 61139/70479 (executing program) 2026/01/13 08:36:33 fetching corpus: 336, signal 67438/77589 (executing program) 2026/01/13 08:36:33 fetching corpus: 385, signal 72182/83134 (executing program) 2026/01/13 08:36:33 fetching corpus: 435, signal 76309/88058 (executing program) 2026/01/13 08:36:33 fetching corpus: 485, signal 81088/93436 (executing program) 2026/01/13 08:36:34 fetching corpus: 535, signal 84206/97241 (executing program) 2026/01/13 08:36:34 fetching corpus: 585, signal 87934/101530 (executing program) 2026/01/13 08:36:34 fetching corpus: 635, signal 90723/104953 (executing program) 2026/01/13 08:36:34 fetching corpus: 685, signal 93024/107879 (executing program) 2026/01/13 08:36:34 fetching corpus: 735, signal 95175/110670 (executing program) 2026/01/13 08:36:34 fetching corpus: 785, signal 98398/114260 (executing program) 2026/01/13 08:36:34 fetching corpus: 834, signal 101358/117596 (executing program) 2026/01/13 08:36:34 fetching corpus: 884, signal 104241/120801 (executing program) 2026/01/13 08:36:35 fetching corpus: 934, signal 106170/123173 (executing program) 2026/01/13 08:36:35 fetching corpus: 984, signal 108689/126002 (executing program) 2026/01/13 08:36:35 fetching corpus: 1034, signal 110336/128094 (executing program) 2026/01/13 08:36:35 fetching corpus: 1084, signal 111864/130090 (executing program) 2026/01/13 08:36:35 fetching corpus: 1134, signal 113635/132204 (executing program) 2026/01/13 08:36:35 fetching corpus: 1184, signal 114996/133952 (executing program) 2026/01/13 08:36:35 fetching corpus: 1234, signal 115912/135325 (executing program) 2026/01/13 08:36:35 fetching corpus: 1284, signal 117242/136996 (executing program) 2026/01/13 08:36:36 fetching corpus: 1334, signal 118109/138316 (executing program) 2026/01/13 08:36:36 fetching corpus: 1384, signal 119459/139984 (executing program) 2026/01/13 08:36:36 fetching corpus: 1432, signal 120505/141425 (executing program) 2026/01/13 08:36:36 fetching corpus: 1482, signal 121560/142810 (executing program) 2026/01/13 08:36:36 fetching corpus: 1532, signal 123755/144947 (executing program) 2026/01/13 08:36:36 fetching corpus: 1581, signal 124878/146355 (executing program) 2026/01/13 08:36:36 fetching corpus: 1631, signal 125763/147603 (executing program) 2026/01/13 08:36:36 fetching corpus: 1681, signal 127153/149173 (executing program) 2026/01/13 08:36:37 fetching corpus: 1731, signal 128363/150525 (executing program) 2026/01/13 08:36:37 fetching corpus: 1781, signal 130032/152139 (executing program) 2026/01/13 08:36:37 fetching corpus: 1831, signal 131255/153594 (executing program) 2026/01/13 08:36:37 fetching corpus: 1881, signal 132058/154624 (executing program) 2026/01/13 08:36:37 fetching corpus: 1931, signal 133597/156092 (executing program) 2026/01/13 08:36:37 fetching corpus: 1981, signal 134295/157023 (executing program) 2026/01/13 08:36:37 fetching corpus: 2031, signal 135623/158297 (executing program) 2026/01/13 08:36:37 fetching corpus: 2081, signal 136462/159264 (executing program) 2026/01/13 08:36:38 fetching corpus: 2131, signal 137455/160311 (executing program) 2026/01/13 08:36:38 fetching corpus: 2181, signal 138532/161392 (executing program) 2026/01/13 08:36:38 fetching corpus: 2230, signal 139610/162511 (executing program) 2026/01/13 08:36:38 fetching corpus: 2280, signal 140620/163501 (executing program) 2026/01/13 08:36:38 fetching corpus: 2330, signal 141463/164443 (executing program) 2026/01/13 08:36:38 fetching corpus: 2380, signal 142437/165411 (executing program) 2026/01/13 08:36:38 fetching corpus: 2429, signal 142985/166194 (executing program) 2026/01/13 08:36:38 fetching corpus: 2479, signal 143908/167091 (executing program) 2026/01/13 08:36:39 fetching corpus: 2529, signal 144572/167835 (executing program) 2026/01/13 08:36:39 fetching corpus: 2579, signal 145866/168790 (executing program) 2026/01/13 08:36:39 fetching corpus: 2629, signal 146977/169703 (executing program) 2026/01/13 08:36:39 fetching corpus: 2679, signal 148007/170534 (executing program) 2026/01/13 08:36:39 fetching corpus: 2729, signal 149195/171417 (executing program) 2026/01/13 08:36:39 fetching corpus: 2779, signal 149935/172098 (executing program) 2026/01/13 08:36:39 fetching corpus: 2829, signal 150591/172739 (executing program) 2026/01/13 08:36:39 fetching corpus: 2878, signal 151593/173501 (executing program) 2026/01/13 08:36:39 fetching corpus: 2928, signal 152230/174124 (executing program) 2026/01/13 08:36:40 fetching corpus: 2977, signal 152975/174699 (executing program) 2026/01/13 08:36:40 fetching corpus: 3027, signal 153795/175315 (executing program) 2026/01/13 08:36:40 fetching corpus: 3077, signal 154291/175837 (executing program) 2026/01/13 08:36:40 fetching corpus: 3126, signal 155060/176472 (executing program) 2026/01/13 08:36:40 fetching corpus: 3176, signal 155756/176991 (executing program) 2026/01/13 08:36:40 fetching corpus: 3225, signal 156568/177568 (executing program) 2026/01/13 08:36:40 fetching corpus: 3275, signal 157563/178141 (executing program) 2026/01/13 08:36:40 fetching corpus: 3325, signal 158075/178603 (executing program) 2026/01/13 08:36:40 fetching corpus: 3375, signal 158731/179075 (executing program) 2026/01/13 08:36:41 fetching corpus: 3425, signal 159488/179598 (executing program) 2026/01/13 08:36:41 fetching corpus: 3475, signal 160014/180015 (executing program) 2026/01/13 08:36:41 fetching corpus: 3525, signal 161244/180593 (executing program) 2026/01/13 08:36:41 fetching corpus: 3575, signal 161992/181019 (executing program) 2026/01/13 08:36:41 fetching corpus: 3625, signal 162442/181379 (executing program) 2026/01/13 08:36:41 fetching corpus: 3674, signal 163017/181770 (executing program) 2026/01/13 08:36:41 fetching corpus: 3724, signal 163876/182148 (executing program) 2026/01/13 08:36:41 fetching corpus: 3773, signal 164644/182518 (executing program) 2026/01/13 08:36:42 fetching corpus: 3822, signal 165179/182877 (executing program) 2026/01/13 08:36:42 fetching corpus: 3872, signal 165700/183185 (executing program) 2026/01/13 08:36:42 fetching corpus: 3920, signal 166210/183515 (executing program) 2026/01/13 08:36:42 fetching corpus: 3970, signal 167044/183858 (executing program) 2026/01/13 08:36:42 fetching corpus: 4020, signal 167693/184168 (executing program) 2026/01/13 08:36:42 fetching corpus: 4070, signal 168272/184421 (executing program) 2026/01/13 08:36:42 fetching corpus: 4120, signal 168699/184655 (executing program) 2026/01/13 08:36:42 fetching corpus: 4170, signal 169138/184895 (executing program) 2026/01/13 08:36:42 fetching corpus: 4220, signal 169692/185143 (executing program) 2026/01/13 08:36:43 fetching corpus: 4269, signal 170078/185343 (executing program) 2026/01/13 08:36:43 fetching corpus: 4319, signal 170470/185520 (executing program) 2026/01/13 08:36:43 fetching corpus: 4369, signal 171062/185724 (executing program) 2026/01/13 08:36:43 fetching corpus: 4419, signal 171628/185901 (executing program) 2026/01/13 08:36:43 fetching corpus: 4469, signal 172152/186074 (executing program) 2026/01/13 08:36:43 fetching corpus: 4519, signal 172661/186207 (executing program) 2026/01/13 08:36:43 fetching corpus: 4569, signal 173141/186261 (executing program) 2026/01/13 08:36:43 fetching corpus: 4619, signal 173592/186261 (executing program) 2026/01/13 08:36:44 fetching corpus: 4669, signal 174272/186264 (executing program) 2026/01/13 08:36:44 fetching corpus: 4719, signal 174774/186291 (executing program) 2026/01/13 08:36:44 fetching corpus: 4769, signal 175191/186291 (executing program) 2026/01/13 08:36:44 fetching corpus: 4819, signal 175768/186291 (executing program) 2026/01/13 08:36:44 fetching corpus: 4869, signal 176122/186301 (executing program) 2026/01/13 08:36:44 fetching corpus: 4919, signal 176715/186312 (executing program) 2026/01/13 08:36:44 fetching corpus: 4969, signal 177217/186312 (executing program) 2026/01/13 08:36:44 fetching corpus: 5019, signal 177868/186312 (executing program) 2026/01/13 08:36:44 fetching corpus: 5069, signal 178352/186312 (executing program) 2026/01/13 08:36:45 fetching corpus: 5119, signal 178694/186312 (executing program) 2026/01/13 08:36:45 fetching corpus: 5169, signal 179267/186312 (executing program) 2026/01/13 08:36:45 fetching corpus: 5219, signal 179873/186312 (executing program) 2026/01/13 08:36:45 fetching corpus: 5269, signal 180415/186326 (executing program) 2026/01/13 08:36:45 fetching corpus: 5319, signal 180840/186326 (executing program) 2026/01/13 08:36:45 fetching corpus: 5369, signal 181202/186326 (executing program) 2026/01/13 08:36:45 fetching corpus: 5419, signal 181562/186326 (executing program) 2026/01/13 08:36:45 fetching corpus: 5469, signal 182010/186331 (executing program) 2026/01/13 08:36:45 fetching corpus: 5518, signal 182538/186340 (executing program) 2026/01/13 08:36:46 fetching corpus: 5568, signal 182928/186340 (executing program) 2026/01/13 08:36:46 fetching corpus: 5618, signal 183512/186346 (executing program) 2026/01/13 08:36:46 fetching corpus: 5668, signal 183850/186346 (executing program) 2026/01/13 08:36:46 fetching corpus: 5718, signal 184182/186348 (executing program) 2026/01/13 08:36:46 fetching corpus: 5768, signal 184457/186354 (executing program) 2026/01/13 08:36:46 fetching corpus: 5818, signal 184861/186375 (executing program) 2026/01/13 08:36:46 fetching corpus: 5830, signal 184976/186382 (executing program) 2026/01/13 08:36:46 fetching corpus: 5830, signal 184976/186382 (executing program) 2026/01/13 08:36:48 starting 8 fuzzer processes 08:36:48 executing program 0: io_setup(0x4, &(0x7f0000000040)=0x0) r1 = memfd_create(&(0x7f0000000000)='-&!\'\x00\x11w\xc7\r\xa4\f=\xce\xce\xd8R\xc4\x81\xca\x03\x06G\xac', 0x0) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, 0x0, 0xb) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x21}]) 08:36:48 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1ff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000140)) 08:36:48 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) bind$802154_dgram(r1, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000140), 0x14) 08:36:48 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) ioctl$EVIOCSMASK(r1, 0x40044591, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 77.604975] audit: type=1400 audit(1768293408.987:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:36:49 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff7000/0x3000)=nil) 08:36:49 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000040), 0x0) 08:36:49 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@data_err_abort}]}) 08:36:49 executing program 6: io_setup(0x400, &(0x7f0000000000)=0x0) r1 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) [ 78.714405] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.717438] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.719663] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.724595] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.729394] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.761649] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.764826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.767489] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.775429] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.792198] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.954228] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.956805] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.961555] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.965914] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.971360] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.972248] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.976825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.978755] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.983137] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.987904] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.024152] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.025850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.031141] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.059173] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.061160] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.090980] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 79.093699] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 79.096020] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 79.097614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 79.098736] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 79.100093] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 79.106250] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 79.109770] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 79.118648] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 79.124222] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 79.126424] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 79.131894] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 79.134572] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 79.148134] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 79.195248] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 80.794981] Bluetooth: hci0: command tx timeout [ 80.857997] Bluetooth: hci1: command tx timeout [ 81.050096] Bluetooth: hci3: command tx timeout [ 81.050102] Bluetooth: hci2: command tx timeout [ 81.178403] Bluetooth: hci4: command tx timeout [ 81.179901] Bluetooth: hci7: command tx timeout [ 81.243074] Bluetooth: hci6: command tx timeout [ 81.306958] Bluetooth: hci5: command tx timeout [ 82.843725] Bluetooth: hci0: command tx timeout [ 82.906980] Bluetooth: hci1: command tx timeout [ 83.098993] Bluetooth: hci3: command tx timeout [ 83.099311] Bluetooth: hci2: command tx timeout [ 83.225986] Bluetooth: hci4: command tx timeout [ 83.226020] Bluetooth: hci7: command tx timeout [ 83.290709] Bluetooth: hci6: command tx timeout [ 83.354232] Bluetooth: hci5: command tx timeout [ 84.890965] Bluetooth: hci0: command tx timeout [ 84.954323] Bluetooth: hci1: command tx timeout [ 85.146041] Bluetooth: hci2: command tx timeout [ 85.147386] Bluetooth: hci3: command tx timeout [ 85.273970] Bluetooth: hci4: command tx timeout [ 85.275215] Bluetooth: hci7: command tx timeout [ 85.338230] Bluetooth: hci6: command tx timeout [ 85.402972] Bluetooth: hci5: command tx timeout [ 86.940444] Bluetooth: hci0: command tx timeout [ 87.003562] Bluetooth: hci1: command tx timeout [ 87.196093] Bluetooth: hci3: command tx timeout [ 87.196150] Bluetooth: hci2: command tx timeout [ 87.322961] Bluetooth: hci7: command tx timeout [ 87.322990] Bluetooth: hci4: command tx timeout [ 87.387044] Bluetooth: hci6: command tx timeout [ 87.450004] Bluetooth: hci5: command tx timeout [ 111.369830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.370503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.600621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.603957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.944724] audit: type=1400 audit(1768293443.326:8): avc: denied { open } for pid=3783 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 111.952908] audit: type=1400 audit(1768293443.334:9): avc: denied { kernel } for pid=3783 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 08:37:23 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) ioctl$EVIOCSMASK(r1, 0x40044591, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:37:23 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) ioctl$EVIOCSMASK(r1, 0x40044591, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:37:23 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) ioctl$EVIOCSMASK(r1, 0x40044591, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 112.481648] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.482351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:37:23 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) ioctl$EVIOCSMASK(r1, 0x40044591, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 112.589226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.589829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.664053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.664671] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:37:24 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) ioctl$EVIOCSMASK(r1, 0x40044591, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 08:37:24 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) ioctl$EVIOCSMASK(r1, 0x40044591, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 112.794122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.794775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.807909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.808983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:37:24 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev(r0, &(0x7f0000002780), 0x0, 0x8001, 0x0) [ 112.943068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.943709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:37:24 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfff}) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) write$hidraw(r0, &(0x7f0000000080)='M', 0x1) [ 112.976959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.977583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.045542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.046185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.101799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.102438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.109834] No source specified [ 113.110822] No source specified [ 113.142457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.143759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.184038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.184665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.277369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.278357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.337800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.338754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.357622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.358216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:37:24 executing program 0: io_setup(0x4, &(0x7f0000000040)=0x0) r1 = memfd_create(&(0x7f0000000000)='-&!\'\x00\x11w\xc7\r\xa4\f=\xce\xce\xd8R\xc4\x81\xca\x03\x06G\xac', 0x0) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, 0x0, 0xb) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x21}]) 08:37:24 executing program 6: io_setup(0x400, &(0x7f0000000000)=0x0) r1 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 08:37:24 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfff}) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) write$hidraw(r0, &(0x7f0000000080)='M', 0x1) 08:37:24 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1ff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000140)) 08:37:24 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000040), 0x0) 08:37:24 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff7000/0x3000)=nil) 08:37:24 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) bind$802154_dgram(r1, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000140), 0x14) 08:37:24 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfff}) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) write$hidraw(r0, &(0x7f0000000080)='M', 0x1) 08:37:24 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff7000/0x3000)=nil) 08:37:24 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000040), 0x0) 08:37:24 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfff}) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) write$hidraw(r0, &(0x7f0000000080)='M', 0x1) 08:37:24 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1ff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000140)) 08:37:24 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfff}) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) write$hidraw(r0, &(0x7f0000000080)='M', 0x1) 08:37:25 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfff}) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) write$hidraw(r0, &(0x7f0000000080)='M', 0x1) 08:37:25 executing program 6: io_setup(0x400, &(0x7f0000000000)=0x0) r1 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 08:37:25 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) bind$802154_dgram(r1, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000140), 0x14) 08:37:25 executing program 0: io_setup(0x4, &(0x7f0000000040)=0x0) r1 = memfd_create(&(0x7f0000000000)='-&!\'\x00\x11w\xc7\r\xa4\f=\xce\xce\xd8R\xc4\x81\xca\x03\x06G\xac', 0x0) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, 0x0, 0xb) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x21}]) 08:37:25 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff7000/0x3000)=nil) 08:37:25 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1ff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000140)) 08:37:25 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfff}) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) write$hidraw(r0, &(0x7f0000000080)='M', 0x1) 08:37:25 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000040), 0x0) 08:37:25 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) bind$802154_dgram(r1, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000140), 0x14) 08:37:25 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) bind$802154_dgram(r1, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000140), 0x14) 08:37:25 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfff}) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) write$hidraw(r0, &(0x7f0000000080)='M', 0x1) 08:37:25 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x2342, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x11) 08:37:25 executing program 6: io_setup(0x400, &(0x7f0000000000)=0x0) r1 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 08:37:25 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) bind$802154_dgram(r1, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000140), 0x14) 08:37:25 executing program 0: io_setup(0x4, &(0x7f0000000040)=0x0) r1 = memfd_create(&(0x7f0000000000)='-&!\'\x00\x11w\xc7\r\xa4\f=\xce\xce\xd8R\xc4\x81\xca\x03\x06G\xac', 0x0) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0'}, 0xb) write$binfmt_script(r1, 0x0, 0xb) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x21}]) 08:37:25 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {0xe}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x0) 08:37:25 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) bind$802154_dgram(r1, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000140), 0x14) 08:37:25 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfff}) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) write$hidraw(r0, &(0x7f0000000080)='M', 0x1) 08:37:25 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, 0x0, 0x0) 08:37:25 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) bind$802154_dgram(r1, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000140), 0x14) 08:37:25 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x2342, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x11) 08:37:25 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x2342, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x11) 08:37:25 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfff}) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) write$hidraw(r0, &(0x7f0000000080)='M', 0x1) 08:37:25 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) bind$802154_dgram(r1, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000140), 0x14) 08:37:25 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, 0x0, 0x0) 08:37:25 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x2342, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x11) 08:37:25 executing program 0: rename(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') 08:37:25 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) bind$802154_dgram(r1, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000140), 0x14) 08:37:25 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {0xe}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x0) 08:37:25 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x2342, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x11) 08:37:25 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, 0x0, 0x0) 08:37:25 executing program 0: rename(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') 08:37:25 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {0xe}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x0) 08:37:25 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, 0x0, 0x0) 08:37:25 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_gettime(0x0, &(0x7f00000004c0)) 08:37:25 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x2342, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x11) 08:37:25 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @broadcast, @multicast, @multicast2}}}}, 0x0) 08:37:25 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_gettime(0x0, &(0x7f00000004c0)) 08:37:25 executing program 0: rename(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') 08:37:25 executing program 7: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_gettime(0x0, &(0x7f00000004c0)) 08:37:25 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {0xe}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x0) 08:37:25 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x2342, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x11) 08:37:25 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x10, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 08:37:25 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @broadcast, @multicast, @multicast2}}}}, 0x0) 08:37:25 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_gettime(0x0, &(0x7f00000004c0)) 08:37:25 executing program 0: rename(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') 08:37:25 executing program 7: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_gettime(0x0, &(0x7f00000004c0)) 08:37:25 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @broadcast, @multicast, @multicast2}}}}, 0x0) 08:37:25 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_gettime(0x0, &(0x7f00000004c0)) 08:37:25 executing program 0: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x105002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x40000014100) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x10) 08:37:25 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x10, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 08:37:25 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @broadcast, @multicast, @multicast2}}}}, 0x0) 08:37:25 executing program 3: r0 = memfd_create(&(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00\x14~\xfe\x9a!\xb2\xb73h\xd2oR\arV(C\xe7\xbb\xd3\x83\xd4\x9b\xb7\xc8t_X\xf0\xcb\xba_\x82qgk\xcbW\xe7\xcd\x87\xf9\xb2\x89\xb94\x06s\xa1B\x96\xc4\x17\x11\xba\xae\xba/N~%\xaf\xcbw\xa4\xd99\xab)\x8f\x1b2\x1bJ\x86\xb1\xee\x8d;\x12\xd4\x7fT\x06\xaakm^\x85\xd1\xd1\xcd\x98L2\xe3\x14\xb7v\xbb\x94x\x82\xab\xc1dK(\x99/9\xc6\xbe\xcd?\xd6-%\x8b\xbeiSA\xdc\xaa\xec\xban3\xbf\x8ew\xee\x91SB\xb0\xb5\xc4,f\xf0\xca\xb3\xb0\xa5\x02\x1f\xd4\xf8\xe7_A\xf0b\xa4\xec\xe8\xeed\xaf\xdf\xdf-w]_\xe4\xb8\x9850\xcd\x8f*\xb5\x98>Y\xef.5\xfd\xcbC\xf0(=\'\xaa^kD\xf5\x81f\xd0 i\x84\xb2\xc5\x1d\x96\xa5\v\xaf\x18w|J\xdbE\x80\x97\xe9U\xd8\x01[A\xaa\xc1%\xa95^X\xea\x17\x1f&]K\xc4\xe6\x17\x00\x04\xfe\x12o\xf0\xad\xfa\xa8\x81\xdd\xe8\t\xa12P\xfc@\x1a\xea\x92|\x04W\xd6-\xb22S`[oUAY\xa8\x93\xc5H\xbe\xc4\x95\x87\x9b\x05\x80\xfc\xec1\xcd\xe4\x8e\xb8\xb0\xdf\xfd\xd2\x19\xf0\x0e\x98{\x9f\f\xd3\xc3\x8e\xdb\xdf\x86$\x8a\xf1\t\x8a\xa8}\xf27\x9c6\xe5\x05\xe5\t\xb8', 0x0) fallocate(r0, 0x0, 0x0, 0x3f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x9) 08:37:25 executing program 7: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_gettime(0x0, &(0x7f00000004c0)) 08:37:25 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigpending(0x0, 0x0) 08:37:25 executing program 2: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000003300)=[{&(0x7f0000003000)="a7", 0x1, 0x29ea2927}], 0x0, 0x0) 08:37:25 executing program 5: rseq(0x0, 0x0, 0xfffffffffffffffd, 0x0) 08:37:26 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x10, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) [ 114.634156] loop2: detected capacity change from 0 to 105001 08:37:26 executing program 5: rseq(0x0, 0x0, 0xfffffffffffffffd, 0x0) 08:37:26 executing program 3: r0 = memfd_create(&(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00\x14~\xfe\x9a!\xb2\xb73h\xd2oR\arV(C\xe7\xbb\xd3\x83\xd4\x9b\xb7\xc8t_X\xf0\xcb\xba_\x82qgk\xcbW\xe7\xcd\x87\xf9\xb2\x89\xb94\x06s\xa1B\x96\xc4\x17\x11\xba\xae\xba/N~%\xaf\xcbw\xa4\xd99\xab)\x8f\x1b2\x1bJ\x86\xb1\xee\x8d;\x12\xd4\x7fT\x06\xaakm^\x85\xd1\xd1\xcd\x98L2\xe3\x14\xb7v\xbb\x94x\x82\xab\xc1dK(\x99/9\xc6\xbe\xcd?\xd6-%\x8b\xbeiSA\xdc\xaa\xec\xban3\xbf\x8ew\xee\x91SB\xb0\xb5\xc4,f\xf0\xca\xb3\xb0\xa5\x02\x1f\xd4\xf8\xe7_A\xf0b\xa4\xec\xe8\xeed\xaf\xdf\xdf-w]_\xe4\xb8\x9850\xcd\x8f*\xb5\x98>Y\xef.5\xfd\xcbC\xf0(=\'\xaa^kD\xf5\x81f\xd0 i\x84\xb2\xc5\x1d\x96\xa5\v\xaf\x18w|J\xdbE\x80\x97\xe9U\xd8\x01[A\xaa\xc1%\xa95^X\xea\x17\x1f&]K\xc4\xe6\x17\x00\x04\xfe\x12o\xf0\xad\xfa\xa8\x81\xdd\xe8\t\xa12P\xfc@\x1a\xea\x92|\x04W\xd6-\xb22S`[oUAY\xa8\x93\xc5H\xbe\xc4\x95\x87\x9b\x05\x80\xfc\xec1\xcd\xe4\x8e\xb8\xb0\xdf\xfd\xd2\x19\xf0\x0e\x98{\x9f\f\xd3\xc3\x8e\xdb\xdf\x86$\x8a\xf1\t\x8a\xa8}\xf27\x9c6\xe5\x05\xe5\t\xb8', 0x0) fallocate(r0, 0x0, 0x0, 0x3f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x9) 08:37:26 executing program 2: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000003300)=[{&(0x7f0000003000)="a7", 0x1, 0x29ea2927}], 0x0, 0x0) 08:37:26 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigpending(0x0, 0x0) 08:37:26 executing program 7: r0 = memfd_create(&(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00\x14~\xfe\x9a!\xb2\xb73h\xd2oR\arV(C\xe7\xbb\xd3\x83\xd4\x9b\xb7\xc8t_X\xf0\xcb\xba_\x82qgk\xcbW\xe7\xcd\x87\xf9\xb2\x89\xb94\x06s\xa1B\x96\xc4\x17\x11\xba\xae\xba/N~%\xaf\xcbw\xa4\xd99\xab)\x8f\x1b2\x1bJ\x86\xb1\xee\x8d;\x12\xd4\x7fT\x06\xaakm^\x85\xd1\xd1\xcd\x98L2\xe3\x14\xb7v\xbb\x94x\x82\xab\xc1dK(\x99/9\xc6\xbe\xcd?\xd6-%\x8b\xbeiSA\xdc\xaa\xec\xban3\xbf\x8ew\xee\x91SB\xb0\xb5\xc4,f\xf0\xca\xb3\xb0\xa5\x02\x1f\xd4\xf8\xe7_A\xf0b\xa4\xec\xe8\xeed\xaf\xdf\xdf-w]_\xe4\xb8\x9850\xcd\x8f*\xb5\x98>Y\xef.5\xfd\xcbC\xf0(=\'\xaa^kD\xf5\x81f\xd0 i\x84\xb2\xc5\x1d\x96\xa5\v\xaf\x18w|J\xdbE\x80\x97\xe9U\xd8\x01[A\xaa\xc1%\xa95^X\xea\x17\x1f&]K\xc4\xe6\x17\x00\x04\xfe\x12o\xf0\xad\xfa\xa8\x81\xdd\xe8\t\xa12P\xfc@\x1a\xea\x92|\x04W\xd6-\xb22S`[oUAY\xa8\x93\xc5H\xbe\xc4\x95\x87\x9b\x05\x80\xfc\xec1\xcd\xe4\x8e\xb8\xb0\xdf\xfd\xd2\x19\xf0\x0e\x98{\x9f\f\xd3\xc3\x8e\xdb\xdf\x86$\x8a\xf1\t\x8a\xa8}\xf27\x9c6\xe5\x05\xe5\t\xb8', 0x0) fallocate(r0, 0x0, 0x0, 0x3f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x9) 08:37:26 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x10, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 08:37:26 executing program 0: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x105002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x40000014100) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x10) 08:37:26 executing program 5: rseq(0x0, 0x0, 0xfffffffffffffffd, 0x0) 08:37:26 executing program 3: r0 = memfd_create(&(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00\x14~\xfe\x9a!\xb2\xb73h\xd2oR\arV(C\xe7\xbb\xd3\x83\xd4\x9b\xb7\xc8t_X\xf0\xcb\xba_\x82qgk\xcbW\xe7\xcd\x87\xf9\xb2\x89\xb94\x06s\xa1B\x96\xc4\x17\x11\xba\xae\xba/N~%\xaf\xcbw\xa4\xd99\xab)\x8f\x1b2\x1bJ\x86\xb1\xee\x8d;\x12\xd4\x7fT\x06\xaakm^\x85\xd1\xd1\xcd\x98L2\xe3\x14\xb7v\xbb\x94x\x82\xab\xc1dK(\x99/9\xc6\xbe\xcd?\xd6-%\x8b\xbeiSA\xdc\xaa\xec\xban3\xbf\x8ew\xee\x91SB\xb0\xb5\xc4,f\xf0\xca\xb3\xb0\xa5\x02\x1f\xd4\xf8\xe7_A\xf0b\xa4\xec\xe8\xeed\xaf\xdf\xdf-w]_\xe4\xb8\x9850\xcd\x8f*\xb5\x98>Y\xef.5\xfd\xcbC\xf0(=\'\xaa^kD\xf5\x81f\xd0 i\x84\xb2\xc5\x1d\x96\xa5\v\xaf\x18w|J\xdbE\x80\x97\xe9U\xd8\x01[A\xaa\xc1%\xa95^X\xea\x17\x1f&]K\xc4\xe6\x17\x00\x04\xfe\x12o\xf0\xad\xfa\xa8\x81\xdd\xe8\t\xa12P\xfc@\x1a\xea\x92|\x04W\xd6-\xb22S`[oUAY\xa8\x93\xc5H\xbe\xc4\x95\x87\x9b\x05\x80\xfc\xec1\xcd\xe4\x8e\xb8\xb0\xdf\xfd\xd2\x19\xf0\x0e\x98{\x9f\f\xd3\xc3\x8e\xdb\xdf\x86$\x8a\xf1\t\x8a\xa8}\xf27\x9c6\xe5\x05\xe5\t\xb8', 0x0) fallocate(r0, 0x0, 0x0, 0x3f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x9) [ 114.767672] [ 114.767857] ===================================== [ 114.768245] WARNING: bad unlock balance detected! [ 114.768625] 6.19.0-rc5-next-20260113 #1 Not tainted [ 114.769023] ------------------------------------- [ 114.769399] syz-executor.6/4069 is trying to release lock (rcu_read_lock) at: [ 114.769973] [] __wait_on_freeing_inode+0x105/0x350 [ 114.771223] but there are no more locks to release! [ 114.772469] [ 114.772469] other info that might help us debug this: [ 114.773824] 4 locks held by syz-executor.6/4069: [ 114.774827] #0: ffff88800f7503f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 114.776879] #1: ffff888045e46330 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 114.779038] #2: ffff88800a7f8950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 114.779767] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 114.780493] [ 114.780493] stack backtrace: [ 114.780850] CPU: 0 UID: 0 PID: 4069 Comm: syz-executor.6 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 114.780864] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 114.780871] Call Trace: [ 114.780875] [ 114.780879] dump_stack_lvl+0xca/0x120 [ 114.780909] ? __wait_on_freeing_inode+0x105/0x350 [ 114.780923] print_unlock_imbalance_bug+0x118/0x130 [ 114.780939] ? __wait_on_freeing_inode+0x105/0x350 [ 114.780953] lock_release+0x1ee/0x270 [ 114.780968] __wait_on_freeing_inode+0x10a/0x350 [ 114.780983] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 114.780999] ? __pfx_var_wake_function+0x10/0x10 [ 114.781017] ? lock_is_held_type+0x9e/0x120 [ 114.781029] insert_inode_locked+0x25f/0x890 [ 114.781046] __ext4_new_inode+0x223d/0x4cd0 [ 114.781064] ? __pfx___ext4_new_inode+0x10/0x10 [ 114.781078] ? __pfx___dquot_initialize+0x10/0x10 [ 114.781097] ? __pfx_avc_has_perm+0x10/0x10 [ 114.781114] ext4_symlink+0x406/0xb40 [ 114.781133] ? __pfx_ext4_symlink+0x10/0x10 [ 114.781149] ? security_inode_permission+0x72/0xe0 [ 114.781162] vfs_symlink+0x44b/0x840 [ 114.781179] do_symlinkat+0x153/0x440 [ 114.781193] ? __pfx_do_symlinkat+0x10/0x10 [ 114.781206] ? strncpy_from_user+0x21b/0x2f0 [ 114.781224] __x64_sys_symlink+0x79/0xa0 [ 114.781238] do_syscall_64+0xbf/0x420 [ 114.781251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.781263] RIP: 0033:0x7ffa27ccd427 [ 114.781272] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 114.781283] RSP: 002b:00007ffc7c74c6c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 114.781293] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ffa27ccd427 [ 114.781301] RDX: 00007ffc7c74c7a7 RSI: 00007ffa27d28019 RDI: 00007ffc7c74c790 [ 114.781308] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc7c74c560 [ 114.781315] R10: 00007ffc7c74c417 R11: 0000000000000202 R12: 0000000000000001 [ 114.781322] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc7c74c790 [ 114.781332] [ 114.795705] ------------[ cut here ]------------ [ 114.828912] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#0: syz-executor.6/4069 [ 114.870622] Modules linked in: [ 114.886238] CPU: 0 UID: 0 PID: 4069 Comm: syz-executor.6 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 114.907375] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 114.926693] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 114.941469] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 a6 bb de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 89 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 61 f9 73 03 e8 0c 88 56 00 e9 [ 114.957424] RSP: 0018:ffff88805499f9a0 EFLAGS: 00010286 [ 114.957822] RAX: 00000000ffffffff RBX: ffff888046d08000 RCX: ffffffff815664c7 [ 114.972348] RDX: 0000000000000000 RSI: ffffffff815664d0 RDI: ffff888046d083fc [ 114.972875] RBP: ffff888046d08000 R08: 0000000000000000 R09: fffffbfff0ba6ff4 [ 114.988144] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888046d08000 [ 114.988675] R13: 0000000000000001 R14: ffffffff85c0c890 R15: ffff888045ea0318 [ 115.012652] FS: 00005555630c5400(0000) GS:ffff8880e5342000(0000) knlGS:0000000000000000 [ 115.041470] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.043403] CR2: 00007ffa27d4d546 CR3: 0000000051755000 CR4: 0000000000350ef0 [ 115.043999] Call Trace: [ 115.044232] [ 115.044839] __wait_on_freeing_inode+0x10f/0x350 [ 115.045516] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 115.046535] ? __pfx_var_wake_function+0x10/0x10 [ 115.047717] ? lock_is_held_type+0x9e/0x120 [ 115.048758] insert_inode_locked+0x25f/0x890 [ 115.050306] __ext4_new_inode+0x223d/0x4cd0 [ 115.052627] ? __pfx___ext4_new_inode+0x10/0x10 [ 115.053800] ? __pfx___dquot_initialize+0x10/0x10 [ 115.054552] ? __pfx_avc_has_perm+0x10/0x10 [ 115.056249] ext4_symlink+0x406/0xb40 [ 115.058348] ? __pfx_ext4_symlink+0x10/0x10 [ 115.059366] ? security_inode_permission+0x72/0xe0 [ 115.060882] vfs_symlink+0x44b/0x840 [ 115.062125] do_symlinkat+0x153/0x440 [ 115.063154] ? __pfx_do_symlinkat+0x10/0x10 [ 115.063823] ? strncpy_from_user+0x21b/0x2f0 [ 115.065590] __x64_sys_symlink+0x79/0xa0 [ 115.066301] do_syscall_64+0xbf/0x420 [ 115.067071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.068390] RIP: 0033:0x7ffa27ccd427 [ 115.068749] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 115.070808] RSP: 002b:00007ffc7c74c6c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 115.071466] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ffa27ccd427 [ 115.072066] RDX: 00007ffc7c74c7a7 RSI: 00007ffa27d28019 RDI: 00007ffc7c74c790 [ 115.072627] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc7c74c560 [ 115.073277] R10: 00007ffc7c74c417 R11: 0000000000000202 R12: 0000000000000001 [ 115.073843] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc7c74c790 [ 115.076338] [ 115.076533] irq event stamp: 171 [ 115.076793] hardirqs last enabled at (171): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 115.077584] hardirqs last disabled at (170): [] _raw_spin_lock_irqsave+0x53/0x60 [ 115.078342] softirqs last enabled at (166): [] kernel_fpu_end+0x59/0x70 [ 115.079048] softirqs last disabled at (164): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 115.079784] ---[ end trace 0000000000000000 ]--- 08:37:26 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigpending(0x0, 0x0) 08:37:26 executing program 4: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x105002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x40000014100) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x10) 08:37:26 executing program 7: r0 = memfd_create(&(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00\x14~\xfe\x9a!\xb2\xb73h\xd2oR\arV(C\xe7\xbb\xd3\x83\xd4\x9b\xb7\xc8t_X\xf0\xcb\xba_\x82qgk\xcbW\xe7\xcd\x87\xf9\xb2\x89\xb94\x06s\xa1B\x96\xc4\x17\x11\xba\xae\xba/N~%\xaf\xcbw\xa4\xd99\xab)\x8f\x1b2\x1bJ\x86\xb1\xee\x8d;\x12\xd4\x7fT\x06\xaakm^\x85\xd1\xd1\xcd\x98L2\xe3\x14\xb7v\xbb\x94x\x82\xab\xc1dK(\x99/9\xc6\xbe\xcd?\xd6-%\x8b\xbeiSA\xdc\xaa\xec\xban3\xbf\x8ew\xee\x91SB\xb0\xb5\xc4,f\xf0\xca\xb3\xb0\xa5\x02\x1f\xd4\xf8\xe7_A\xf0b\xa4\xec\xe8\xeed\xaf\xdf\xdf-w]_\xe4\xb8\x9850\xcd\x8f*\xb5\x98>Y\xef.5\xfd\xcbC\xf0(=\'\xaa^kD\xf5\x81f\xd0 i\x84\xb2\xc5\x1d\x96\xa5\v\xaf\x18w|J\xdbE\x80\x97\xe9U\xd8\x01[A\xaa\xc1%\xa95^X\xea\x17\x1f&]K\xc4\xe6\x17\x00\x04\xfe\x12o\xf0\xad\xfa\xa8\x81\xdd\xe8\t\xa12P\xfc@\x1a\xea\x92|\x04W\xd6-\xb22S`[oUAY\xa8\x93\xc5H\xbe\xc4\x95\x87\x9b\x05\x80\xfc\xec1\xcd\xe4\x8e\xb8\xb0\xdf\xfd\xd2\x19\xf0\x0e\x98{\x9f\f\xd3\xc3\x8e\xdb\xdf\x86$\x8a\xf1\t\x8a\xa8}\xf27\x9c6\xe5\x05\xe5\t\xb8', 0x0) fallocate(r0, 0x0, 0x0, 0x3f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x9) 08:37:26 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, 0x0) 08:37:26 executing program 5: rseq(0x0, 0x0, 0xfffffffffffffffd, 0x0) 08:37:26 executing program 3: r0 = memfd_create(&(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00\x14~\xfe\x9a!\xb2\xb73h\xd2oR\arV(C\xe7\xbb\xd3\x83\xd4\x9b\xb7\xc8t_X\xf0\xcb\xba_\x82qgk\xcbW\xe7\xcd\x87\xf9\xb2\x89\xb94\x06s\xa1B\x96\xc4\x17\x11\xba\xae\xba/N~%\xaf\xcbw\xa4\xd99\xab)\x8f\x1b2\x1bJ\x86\xb1\xee\x8d;\x12\xd4\x7fT\x06\xaakm^\x85\xd1\xd1\xcd\x98L2\xe3\x14\xb7v\xbb\x94x\x82\xab\xc1dK(\x99/9\xc6\xbe\xcd?\xd6-%\x8b\xbeiSA\xdc\xaa\xec\xban3\xbf\x8ew\xee\x91SB\xb0\xb5\xc4,f\xf0\xca\xb3\xb0\xa5\x02\x1f\xd4\xf8\xe7_A\xf0b\xa4\xec\xe8\xeed\xaf\xdf\xdf-w]_\xe4\xb8\x9850\xcd\x8f*\xb5\x98>Y\xef.5\xfd\xcbC\xf0(=\'\xaa^kD\xf5\x81f\xd0 i\x84\xb2\xc5\x1d\x96\xa5\v\xaf\x18w|J\xdbE\x80\x97\xe9U\xd8\x01[A\xaa\xc1%\xa95^X\xea\x17\x1f&]K\xc4\xe6\x17\x00\x04\xfe\x12o\xf0\xad\xfa\xa8\x81\xdd\xe8\t\xa12P\xfc@\x1a\xea\x92|\x04W\xd6-\xb22S`[oUAY\xa8\x93\xc5H\xbe\xc4\x95\x87\x9b\x05\x80\xfc\xec1\xcd\xe4\x8e\xb8\xb0\xdf\xfd\xd2\x19\xf0\x0e\x98{\x9f\f\xd3\xc3\x8e\xdb\xdf\x86$\x8a\xf1\t\x8a\xa8}\xf27\x9c6\xe5\x05\xe5\t\xb8', 0x0) fallocate(r0, 0x0, 0x0, 0x3f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x9) [ 115.242912] loop2: detected capacity change from 0 to 105001 08:37:26 executing program 2: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000003300)=[{&(0x7f0000003000)="a7", 0x1, 0x29ea2927}], 0x0, 0x0) [ 115.292904] loop2: detected capacity change from 0 to 105001 08:37:26 executing program 0: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x105002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x40000014100) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x10) [ 115.432169] loop5: detected capacity change from 0 to 512 [ 115.434781] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended 08:37:26 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000140)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004a7bcd9fa6f", 0x22, 0x11080}], 0x0, &(0x7f0000013c00)=ANY=[]) 08:37:26 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, 0x0) 08:37:26 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigpending(0x0, 0x0) 08:37:26 executing program 7: r0 = memfd_create(&(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00\x14~\xfe\x9a!\xb2\xb73h\xd2oR\arV(C\xe7\xbb\xd3\x83\xd4\x9b\xb7\xc8t_X\xf0\xcb\xba_\x82qgk\xcbW\xe7\xcd\x87\xf9\xb2\x89\xb94\x06s\xa1B\x96\xc4\x17\x11\xba\xae\xba/N~%\xaf\xcbw\xa4\xd99\xab)\x8f\x1b2\x1bJ\x86\xb1\xee\x8d;\x12\xd4\x7fT\x06\xaakm^\x85\xd1\xd1\xcd\x98L2\xe3\x14\xb7v\xbb\x94x\x82\xab\xc1dK(\x99/9\xc6\xbe\xcd?\xd6-%\x8b\xbeiSA\xdc\xaa\xec\xban3\xbf\x8ew\xee\x91SB\xb0\xb5\xc4,f\xf0\xca\xb3\xb0\xa5\x02\x1f\xd4\xf8\xe7_A\xf0b\xa4\xec\xe8\xeed\xaf\xdf\xdf-w]_\xe4\xb8\x9850\xcd\x8f*\xb5\x98>Y\xef.5\xfd\xcbC\xf0(=\'\xaa^kD\xf5\x81f\xd0 i\x84\xb2\xc5\x1d\x96\xa5\v\xaf\x18w|J\xdbE\x80\x97\xe9U\xd8\x01[A\xaa\xc1%\xa95^X\xea\x17\x1f&]K\xc4\xe6\x17\x00\x04\xfe\x12o\xf0\xad\xfa\xa8\x81\xdd\xe8\t\xa12P\xfc@\x1a\xea\x92|\x04W\xd6-\xb22S`[oUAY\xa8\x93\xc5H\xbe\xc4\x95\x87\x9b\x05\x80\xfc\xec1\xcd\xe4\x8e\xb8\xb0\xdf\xfd\xd2\x19\xf0\x0e\x98{\x9f\f\xd3\xc3\x8e\xdb\xdf\x86$\x8a\xf1\t\x8a\xa8}\xf27\x9c6\xe5\x05\xe5\t\xb8', 0x0) fallocate(r0, 0x0, 0x0, 0x3f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x9) 08:37:26 executing program 2: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000003300)=[{&(0x7f0000003000)="a7", 0x1, 0x29ea2927}], 0x0, 0x0) 08:37:26 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000840)={'\x00', 0x0, 0xe5e4, 0x1}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) io_setup(0xfff, 0x0) 08:37:26 executing program 4: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x105002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x40000014100) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x10) [ 115.449754] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.463288] loop2: detected capacity change from 0 to 105001 [ 115.467388] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. 08:37:26 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000140)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004a7bcd9fa6f", 0x22, 0x11080}], 0x0, &(0x7f0000013c00)=ANY=[]) 08:37:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)={0x34, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x34}}, 0x0) 08:37:26 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@time_offset={'time_offset', 0x3d, 0x2000}}]}) [ 115.612451] loop5: detected capacity change from 0 to 512 08:37:27 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, 0x0) 08:37:27 executing program 7: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0x402c5342, &(0x7f0000000080)={0x0, 0x0, 0x4000}) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc0c0583b, &(0x7f0000000000)) 08:37:27 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000840)={'\x00', 0x0, 0xe5e4, 0x1}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) io_setup(0xfff, 0x0) [ 115.636312] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 115.679128] blktrace: Concurrent blktraces are not allowed on sg0 08:37:27 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@time_offset={'time_offset', 0x3d, 0x2000}}]}) [ 115.808131] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.850545] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. 08:37:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)={0x34, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x34}}, 0x0) 08:37:27 executing program 0: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x105002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x40000014100) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x10) 08:37:27 executing program 4: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x105002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x40000014100) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x10) 08:37:27 executing program 7: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0x402c5342, &(0x7f0000000080)={0x0, 0x0, 0x4000}) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc0c0583b, &(0x7f0000000000)) 08:37:27 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@time_offset={'time_offset', 0x3d, 0x2000}}]}) 08:37:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000140)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004a7bcd9fa6f", 0x22, 0x11080}], 0x0, &(0x7f0000013c00)=ANY=[]) 08:37:27 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, 0x0) 08:37:27 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000840)={'\x00', 0x0, 0xe5e4, 0x1}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) io_setup(0xfff, 0x0) [ 115.894341] blktrace: Concurrent blktraces are not allowed on sg0 [ 115.901175] loop5: detected capacity change from 0 to 512 [ 115.915060] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended 08:37:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)={0x34, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x34}}, 0x0) [ 115.931807] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 08:37:27 executing program 7: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0x402c5342, &(0x7f0000000080)={0x0, 0x0, 0x4000}) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc0c0583b, &(0x7f0000000000)) 08:37:27 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@time_offset={'time_offset', 0x3d, 0x2000}}]}) 08:37:27 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000840)={'\x00', 0x0, 0xe5e4, 0x1}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) io_setup(0xfff, 0x0) 08:37:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000000140)="ed41000000080000d0f4655fd2f4655fd2f4655f000000000000040004a7bcd9fa6f", 0x22, 0x11080}], 0x0, &(0x7f0000013c00)=ANY=[]) [ 116.026573] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. 08:37:27 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x1) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c07, 0x0) 08:37:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)={0x34, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x34}}, 0x0) 08:37:27 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) [ 116.078555] loop5: detected capacity change from 0 to 512 [ 116.082358] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 116.085850] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.094949] blktrace: Concurrent blktraces are not allowed on sg0 08:37:27 executing program 7: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0x402c5342, &(0x7f0000000080)={0x0, 0x0, 0x4000}) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc0c0583b, &(0x7f0000000000)) 08:37:27 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) sync_file_range(r0, 0x0, 0x0, 0x0) [ 116.148994] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.958666] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 116.959650] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 116.962621] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 116.967657] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 116.968618] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 116.971722] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 116.974736] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 116.976093] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 116.979558] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 116.983757] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 116.984752] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 116.987583] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 116.991769] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 116.992743] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 116.995617] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 116.998619] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 116.999572] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 117.003595] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 117.006608] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 117.007804] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 117.010486] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 117.020114] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 117.021151] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 117.024516] Bluetooth: hci7: Opcode 0x0406 failed: -4 08:37:28 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_secret(0x0) openat$incfs(r1, &(0x7f0000000580)='.pending_reads\x00', 0x0, 0xac) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) r2 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), 0x0) openat2(r1, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000800), 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000840)=ANY=[]) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x4003000}], 0x0) 08:37:28 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) sync_file_range(r0, 0x0, 0x0, 0x0) 08:37:28 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendfile(r0, r1, 0x0, 0xffd0) 08:37:28 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x40e5, &(0x7f0000000100), &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r2 = fcntl$dupfd(r1, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000640)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1) 08:37:28 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f00000000c0)) socket$inet6_udp(0xa, 0x2, 0x0) 08:37:28 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x1) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c07, 0x0) 08:37:28 executing program 3: mlock2(&(0x7f0000fee000/0x1000)=nil, 0x1000, 0x2) 08:37:28 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x80605414, &(0x7f0000000040)) [ 117.097116] audit: type=1400 audit(1768293448.479:10): avc: denied { write } for pid=4184 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 08:37:28 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x1) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c07, 0x0) 08:37:28 executing program 3: mlock2(&(0x7f0000fee000/0x1000)=nil, 0x1000, 0x2) 08:37:28 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) sync_file_range(r0, 0x0, 0x0, 0x0) 08:37:28 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f00000000c0)) socket$inet6_udp(0xa, 0x2, 0x0) 08:37:28 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendfile(r0, r1, 0x0, 0xffd0) 08:37:28 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x1) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c07, 0x0) 08:37:28 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x40e5, &(0x7f0000000100), &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r2 = fcntl$dupfd(r1, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000640)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1) 08:37:28 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_secret(0x0) openat$incfs(r1, &(0x7f0000000580)='.pending_reads\x00', 0x0, 0xac) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) r2 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), 0x0) openat2(r1, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000800), 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000840)=ANY=[]) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x4003000}], 0x0) 08:37:28 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x80605414, &(0x7f0000000040)) 08:37:28 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendfile(r0, r1, 0x0, 0xffd0) 08:37:28 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) sync_file_range(r0, 0x0, 0x0, 0x0) 08:37:28 executing program 3: mlock2(&(0x7f0000fee000/0x1000)=nil, 0x1000, 0x2) 08:37:28 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f00000000c0)) socket$inet6_udp(0xa, 0x2, 0x0) 08:37:28 executing program 3: mlock2(&(0x7f0000fee000/0x1000)=nil, 0x1000, 0x2) 08:37:28 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_secret(0x0) openat$incfs(r1, &(0x7f0000000580)='.pending_reads\x00', 0x0, 0xac) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) r2 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), 0x0) openat2(r1, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000800), 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000840)=ANY=[]) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x4003000}], 0x0) 08:37:28 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendfile(r0, r1, 0x0, 0xffd0) 08:37:28 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_secret(0x0) openat$incfs(r1, &(0x7f0000000580)='.pending_reads\x00', 0x0, 0xac) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) r2 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), 0x0) openat2(r1, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000800), 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000840)=ANY=[]) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x4003000}], 0x0) 08:37:28 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x80605414, &(0x7f0000000040)) 08:37:28 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_secret(0x0) openat$incfs(r1, &(0x7f0000000580)='.pending_reads\x00', 0x0, 0xac) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) r2 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), 0x0) openat2(r1, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000800), 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000840)=ANY=[]) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x4003000}], 0x0) 08:37:28 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f00000000c0)) socket$inet6_udp(0xa, 0x2, 0x0) 08:37:29 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f00000000c0)) socket$inet6_udp(0xa, 0x2, 0x0) 08:37:29 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_secret(0x0) openat$incfs(r1, &(0x7f0000000580)='.pending_reads\x00', 0x0, 0xac) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) r2 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), 0x0) openat2(r1, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000800), 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000840)=ANY=[]) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x4003000}], 0x0) 08:37:29 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x40e5, &(0x7f0000000100), &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r2 = fcntl$dupfd(r1, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000640)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1) 08:37:29 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_secret(0x0) openat$incfs(r1, &(0x7f0000000580)='.pending_reads\x00', 0x0, 0xac) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) r2 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), 0x0) openat2(r1, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000800), 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000840)=ANY=[]) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x4003000}], 0x0) 08:37:29 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x80605414, &(0x7f0000000040)) 08:37:29 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f00000000c0)) socket$inet6_udp(0xa, 0x2, 0x0) 08:37:29 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendfile(r0, r1, 0x0, 0xffd0) 08:37:29 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f00000000c0)) socket$inet6_udp(0xa, 0x2, 0x0) 08:37:29 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_secret(0x0) openat$incfs(r1, &(0x7f0000000580)='.pending_reads\x00', 0x0, 0xac) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) r2 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), 0x0) openat2(r1, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000800), 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000840)=ANY=[]) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x4003000}], 0x0) 08:37:29 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x40e5, &(0x7f0000000100), &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r2 = fcntl$dupfd(r1, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000640)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1) 08:37:29 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f00000000c0)) socket$inet6_udp(0xa, 0x2, 0x0) 08:37:29 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_secret(0x0) openat$incfs(r1, &(0x7f0000000580)='.pending_reads\x00', 0x0, 0xac) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) r2 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), 0x0) openat2(r1, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000800), 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000840)=ANY=[]) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x4003000}], 0x0) 08:37:29 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x3ffd}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00f78622783d23fc238afc2047c1c4ef60e4073b654e3f052cdb0fbc7316bbe0abaceaeb810000007184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038a38eafdc71"]) mkdirat(r1, &(0x7f0000000240)='./file0\x00', 0xa4) r2 = perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x20, 0x9, 0x7, 0x0, 0x0, 0x6, 0x42000, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x1a9, 0x6, 0x1, 0x9, 0x6, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x10, r0, 0x2) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/31) fchown(r1, 0x0, 0x0) renameat(r1, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = signalfd4(r1, &(0x7f0000000140)={[0x8]}, 0x8, 0x80000) dup3(r2, r3, 0x0) mknodat$null(r3, &(0x7f0000000180)='./file0\x00', 0x8000, 0x103) fchown(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x12, r4, 0x0) syz_io_uring_submit(r5, 0x0, 0x0, 0x0) fork() 08:37:29 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendfile(r0, r1, 0x0, 0xffd0) 08:37:29 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f00000000c0)) socket$inet6_udp(0xa, 0x2, 0x0) [ 117.919224] loop0: detected capacity change from 0 to 63 [ 117.923377] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 117.965347] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 117.966160] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 117.966695] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present 08:37:29 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f00000000c0)) socket$inet6_udp(0xa, 0x2, 0x0) 08:37:29 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f00000002c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\xf9\xff\xff\xff\xff\xff\xff\xff\x00'/124, 0x40, 0x0, 0x0) r1 = dup2(r0, r0) mq_notify(r1, 0x0) 08:37:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000040)=[{0x24}, {0x6}]}, 0x10) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0xd, 0xa, 0x101}, 0x14}}, 0x0) [ 117.982982] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 06 00 [ 117.983583] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 3 prio class 2 [ 117.984465] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 117.984902] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 117.985596] Buffer I/O error on dev sr0, logical block 0, async page read [ 117.986219] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 117.986653] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 117.987375] Buffer I/O error on dev sr0, logical block 1, async page read [ 117.988341] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 117.988780] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 117.989476] Buffer I/O error on dev sr0, logical block 2, async page read [ 117.992688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 117.993227] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 08:37:29 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_secret(0x0) openat$incfs(r1, &(0x7f0000000580)='.pending_reads\x00', 0x0, 0xac) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) r2 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), 0x0) openat2(r1, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000800), 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000840)=ANY=[]) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x4003000}], 0x0) [ 117.995977] Buffer I/O error on dev sr0, logical block 3, async page read [ 117.996536] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 117.996964] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 117.997612] Buffer I/O error on dev sr0, logical block 4, async page read [ 118.002209] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.002623] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.011100] Buffer I/O error on dev sr0, logical block 5, async page read [ 118.011687] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 08:37:29 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendfile(r0, r1, 0x0, 0xffd0) [ 118.017096] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.017745] Buffer I/O error on dev sr0, logical block 6, async page read [ 118.018329] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.018738] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.022969] Buffer I/O error on dev sr0, logical block 7, async page read 08:37:29 executing program 3: mbind(&(0x7f0000875000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x7, 0x5, 0x0) mlock(&(0x7f0000872000/0x2000)=nil, 0x2000) mbind(&(0x7f0000873000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000875000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000872000/0x3000)=nil, 0x3000) [ 118.075357] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.075798] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.079794] Buffer I/O error on dev sr0, logical block 0, async page read [ 118.080405] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.080818] Buffer I/O error on dev sr0, logical block 1, async page read [ 118.084747] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.089025] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.089474] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 08:37:29 executing program 3: mbind(&(0x7f0000875000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x7, 0x5, 0x0) mlock(&(0x7f0000872000/0x2000)=nil, 0x2000) mbind(&(0x7f0000873000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000875000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000872000/0x3000)=nil, 0x3000) [ 118.098996] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.099822] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.100384] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.106691] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.138339] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.138834] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.141531] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.142045] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.142489] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 08:37:29 executing program 6: mbind(&(0x7f0000875000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x7, 0x5, 0x0) mlock(&(0x7f0000872000/0x2000)=nil, 0x2000) mbind(&(0x7f0000873000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000875000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000872000/0x3000)=nil, 0x3000) 08:37:29 executing program 3: mbind(&(0x7f0000875000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x7, 0x5, 0x0) mlock(&(0x7f0000872000/0x2000)=nil, 0x2000) mbind(&(0x7f0000873000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000875000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000872000/0x3000)=nil, 0x3000) 08:37:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000040)=[{0x24}, {0x6}]}, 0x10) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0xd, 0xa, 0x101}, 0x14}}, 0x0) 08:37:29 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="f8", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="a0", 0x1}], 0x1}}], 0x1, 0x0) [ 118.161029] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.161551] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 08:37:29 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000001c0)) [ 118.163953] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.164478] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.164971] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.165444] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.187595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.192217] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.192707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.197244] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.197721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 08:37:29 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x3ffd}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00f78622783d23fc238afc2047c1c4ef60e4073b654e3f052cdb0fbc7316bbe0abaceaeb810000007184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038a38eafdc71"]) mkdirat(r1, &(0x7f0000000240)='./file0\x00', 0xa4) r2 = perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x20, 0x9, 0x7, 0x0, 0x0, 0x6, 0x42000, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x1a9, 0x6, 0x1, 0x9, 0x6, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x10, r0, 0x2) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/31) fchown(r1, 0x0, 0x0) renameat(r1, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = signalfd4(r1, &(0x7f0000000140)={[0x8]}, 0x8, 0x80000) dup3(r2, r3, 0x0) mknodat$null(r3, &(0x7f0000000180)='./file0\x00', 0x8000, 0x103) fchown(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x12, r4, 0x0) syz_io_uring_submit(r5, 0x0, 0x0, 0x0) fork() 08:37:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000040)=[{0x24}, {0x6}]}, 0x10) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0xd, 0xa, 0x101}, 0x14}}, 0x0) 08:37:29 executing program 6: mbind(&(0x7f0000875000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x7, 0x5, 0x0) mlock(&(0x7f0000872000/0x2000)=nil, 0x2000) mbind(&(0x7f0000873000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000875000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000872000/0x3000)=nil, 0x3000) 08:37:29 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f00000002c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\xf9\xff\xff\xff\xff\xff\xff\xff\x00'/124, 0x40, 0x0, 0x0) r1 = dup2(r0, r0) mq_notify(r1, 0x0) 08:37:29 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000001c0)) 08:37:29 executing program 3: mbind(&(0x7f0000875000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x7, 0x5, 0x0) mlock(&(0x7f0000872000/0x2000)=nil, 0x2000) mbind(&(0x7f0000873000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000875000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000872000/0x3000)=nil, 0x3000) 08:37:29 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000001c0)) [ 118.310301] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.310779] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.311257] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.311716] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.312265] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.312707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.325023] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.325487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.335830] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.337748] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.342242] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.342759] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.343298] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.343800] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 08:37:29 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000001c0)) 08:37:29 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000001c0)) 08:37:29 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f00000002c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\xf9\xff\xff\xff\xff\xff\xff\xff\x00'/124, 0x40, 0x0, 0x0) r1 = dup2(r0, r0) mq_notify(r1, 0x0) 08:37:29 executing program 6: mbind(&(0x7f0000875000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x7, 0x5, 0x0) mlock(&(0x7f0000872000/0x2000)=nil, 0x2000) mbind(&(0x7f0000873000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000875000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000872000/0x3000)=nil, 0x3000) 08:37:29 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x3ffd}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00f78622783d23fc238afc2047c1c4ef60e4073b654e3f052cdb0fbc7316bbe0abaceaeb810000007184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038a38eafdc71"]) mkdirat(r1, &(0x7f0000000240)='./file0\x00', 0xa4) r2 = perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x20, 0x9, 0x7, 0x0, 0x0, 0x6, 0x42000, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x1a9, 0x6, 0x1, 0x9, 0x6, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x10, r0, 0x2) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/31) fchown(r1, 0x0, 0x0) renameat(r1, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = signalfd4(r1, &(0x7f0000000140)={[0x8]}, 0x8, 0x80000) dup3(r2, r3, 0x0) mknodat$null(r3, &(0x7f0000000180)='./file0\x00', 0x8000, 0x103) fchown(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x12, r4, 0x0) syz_io_uring_submit(r5, 0x0, 0x0, 0x0) fork() [ 118.382201] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.382774] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 08:37:29 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x3ffd}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00f78622783d23fc238afc2047c1c4ef60e4073b654e3f052cdb0fbc7316bbe0abaceaeb810000007184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038a38eafdc71"]) mkdirat(r1, &(0x7f0000000240)='./file0\x00', 0xa4) r2 = perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x20, 0x9, 0x7, 0x0, 0x0, 0x6, 0x42000, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x1a9, 0x6, 0x1, 0x9, 0x6, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x10, r0, 0x2) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/31) fchown(r1, 0x0, 0x0) renameat(r1, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = signalfd4(r1, &(0x7f0000000140)={[0x8]}, 0x8, 0x80000) dup3(r2, r3, 0x0) mknodat$null(r3, &(0x7f0000000180)='./file0\x00', 0x8000, 0x103) fchown(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x12, r4, 0x0) syz_io_uring_submit(r5, 0x0, 0x0, 0x0) fork() [ 118.421489] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.426049] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.426594] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.433547] loop4: detected capacity change from 0 to 63 [ 118.436169] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 118.470912] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.471879] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.473726] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 118.503822] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.505393] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.506538] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.508017] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.508574] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.635662] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.645039] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.645530] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.668119] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.668693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.669490] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.669955] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.670402] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.670863] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.673016] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.673463] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.673901] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.675254] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.675718] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.676183] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.676646] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.679085] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.679570] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.680210] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.680655] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.681274] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.681714] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.682471] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.682907] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.688167] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.688610] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.703305] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.703899] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.709026] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.709488] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.710391] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.710846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.717059] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.717632] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.718189] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.718716] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.719299] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.719838] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.720422] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.721629] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.722302] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.724031] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.724563] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.725273] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 08:37:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000040)=[{0x24}, {0x6}]}, 0x10) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0xd, 0xa, 0x101}, 0x14}}, 0x0) 08:37:30 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f00000002c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\xf9\xff\xff\xff\xff\xff\xff\xff\x00'/124, 0x40, 0x0, 0x0) r1 = dup2(r0, r0) mq_notify(r1, 0x0) 08:37:30 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f00000002c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\xf9\xff\xff\xff\xff\xff\xff\xff\x00'/124, 0x40, 0x0, 0x0) r1 = dup2(r0, r0) mq_notify(r1, 0x0) 08:37:30 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000001c0)) 08:37:30 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000001c0)) 08:37:30 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x3ffd}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00f78622783d23fc238afc2047c1c4ef60e4073b654e3f052cdb0fbc7316bbe0abaceaeb810000007184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038a38eafdc71"]) mkdirat(r1, &(0x7f0000000240)='./file0\x00', 0xa4) r2 = perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x20, 0x9, 0x7, 0x0, 0x0, 0x6, 0x42000, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x1a9, 0x6, 0x1, 0x9, 0x6, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x10, r0, 0x2) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/31) fchown(r1, 0x0, 0x0) renameat(r1, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = signalfd4(r1, &(0x7f0000000140)={[0x8]}, 0x8, 0x80000) dup3(r2, r3, 0x0) mknodat$null(r3, &(0x7f0000000180)='./file0\x00', 0x8000, 0x103) fchown(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x12, r4, 0x0) syz_io_uring_submit(r5, 0x0, 0x0, 0x0) fork() 08:37:30 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x3ffd}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00f78622783d23fc238afc2047c1c4ef60e4073b654e3f052cdb0fbc7316bbe0abaceaeb810000007184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038a38eafdc71"]) mkdirat(r1, &(0x7f0000000240)='./file0\x00', 0xa4) r2 = perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x20, 0x9, 0x7, 0x0, 0x0, 0x6, 0x42000, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x1a9, 0x6, 0x1, 0x9, 0x6, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x10, r0, 0x2) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/31) fchown(r1, 0x0, 0x0) renameat(r1, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = signalfd4(r1, &(0x7f0000000140)={[0x8]}, 0x8, 0x80000) dup3(r2, r3, 0x0) mknodat$null(r3, &(0x7f0000000180)='./file0\x00', 0x8000, 0x103) fchown(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x12, r4, 0x0) syz_io_uring_submit(r5, 0x0, 0x0, 0x0) fork() 08:37:30 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x3ffd}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00f78622783d23fc238afc2047c1c4ef60e4073b654e3f052cdb0fbc7316bbe0abaceaeb810000007184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038a38eafdc71"]) mkdirat(r1, &(0x7f0000000240)='./file0\x00', 0xa4) r2 = perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x20, 0x9, 0x7, 0x0, 0x0, 0x6, 0x42000, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x1a9, 0x6, 0x1, 0x9, 0x6, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x10, r0, 0x2) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/31) fchown(r1, 0x0, 0x0) renameat(r1, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = signalfd4(r1, &(0x7f0000000140)={[0x8]}, 0x8, 0x80000) dup3(r2, r3, 0x0) mknodat$null(r3, &(0x7f0000000180)='./file0\x00', 0x8000, 0x103) fchown(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x12, r4, 0x0) syz_io_uring_submit(r5, 0x0, 0x0, 0x0) fork() [ 118.806758] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.807280] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.807770] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 08:37:30 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f00000002c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\xf9\xff\xff\xff\xff\xff\xff\xff\x00'/124, 0x40, 0x0, 0x0) r1 = dup2(r0, r0) mq_notify(r1, 0x0) 08:37:30 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(0x0, 0x3, &(0x7f0000001dc0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x3, r1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000001c80), 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000001d40)="ca89937d4e952a160f0bc03c0d7baf456ce192399307d638518fe301c4fc0f3193f7c121e9d5ec75ac61980051eb640d13f0cd6f2e7f56af52f25ee21bfa493c00f7b7665855d5e21a41c7799f80ae8c8da3564e043114333114da0a85dfcca925d628d88f2cb931db6241bca7a3", 0x6e, 0x7, 0x0, 0x5786b8b3bb35287d}]) io_setup(0x0, &(0x7f00000000c0)=0x0) io_destroy(r2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfdef) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) [ 118.832055] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 08:37:30 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x2) [ 118.895365] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 118.896134] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 118.896654] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 118.904958] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 118.905772] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.906365] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.906859] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.963058] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.966418] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.967042] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.967611] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.982080] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.982637] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.983587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 118.984571] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.002001] Bluetooth: hci5: command 0x0c1a tx timeout [ 119.002209] Bluetooth: hci4: command 0x0c1a tx timeout [ 119.002493] Bluetooth: hci3: command 0x0c1a tx timeout [ 119.002947] Bluetooth: hci2: command 0x0c1a tx timeout [ 119.003855] Bluetooth: hci1: command 0x0c1a tx timeout [ 119.014035] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.014630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.021552] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.022159] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.022699] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.033786] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.034341] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.034827] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.038010] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.038588] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.045598] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.053570] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.058661] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.059501] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.060595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.076134] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.076632] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.079963] Bluetooth: hci7: command 0x0c1a tx timeout [ 119.080379] Bluetooth: hci6: command 0x0c1a tx timeout 08:37:30 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x3ffd}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00f78622783d23fc238afc2047c1c4ef60e4073b654e3f052cdb0fbc7316bbe0abaceaeb810000007184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038a38eafdc71"]) mkdirat(r1, &(0x7f0000000240)='./file0\x00', 0xa4) r2 = perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x20, 0x9, 0x7, 0x0, 0x0, 0x6, 0x42000, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x1a9, 0x6, 0x1, 0x9, 0x6, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x10, r0, 0x2) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/31) fchown(r1, 0x0, 0x0) renameat(r1, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = signalfd4(r1, &(0x7f0000000140)={[0x8]}, 0x8, 0x80000) dup3(r2, r3, 0x0) mknodat$null(r3, &(0x7f0000000180)='./file0\x00', 0x8000, 0x103) fchown(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x12, r4, 0x0) syz_io_uring_submit(r5, 0x0, 0x0, 0x0) fork() 08:37:30 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x3ffd}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00f78622783d23fc238afc2047c1c4ef60e4073b654e3f052cdb0fbc7316bbe0abaceaeb810000007184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038a38eafdc71"]) mkdirat(r1, &(0x7f0000000240)='./file0\x00', 0xa4) r2 = perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x20, 0x9, 0x7, 0x0, 0x0, 0x6, 0x42000, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x1a9, 0x6, 0x1, 0x9, 0x6, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x10, r0, 0x2) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/31) fchown(r1, 0x0, 0x0) renameat(r1, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = signalfd4(r1, &(0x7f0000000140)={[0x8]}, 0x8, 0x80000) dup3(r2, r3, 0x0) mknodat$null(r3, &(0x7f0000000180)='./file0\x00', 0x8000, 0x103) fchown(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x12, r4, 0x0) syz_io_uring_submit(r5, 0x0, 0x0, 0x0) fork() 08:37:30 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r2, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x12, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x0, &(0x7f0000000000), 0x0, 0x4) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) 08:37:30 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x3ffd}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00f78622783d23fc238afc2047c1c4ef60e4073b654e3f052cdb0fbc7316bbe0abaceaeb810000007184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038a38eafdc71"]) mkdirat(r1, &(0x7f0000000240)='./file0\x00', 0xa4) r2 = perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x20, 0x9, 0x7, 0x0, 0x0, 0x6, 0x42000, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x1a9, 0x6, 0x1, 0x9, 0x6, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x10, r0, 0x2) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/31) fchown(r1, 0x0, 0x0) renameat(r1, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r3 = signalfd4(r1, &(0x7f0000000140)={[0x8]}, 0x8, 0x80000) dup3(r2, r3, 0x0) mknodat$null(r3, &(0x7f0000000180)='./file0\x00', 0x8000, 0x103) fchown(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x12, r4, 0x0) syz_io_uring_submit(r5, 0x0, 0x0, 0x0) fork() 08:37:30 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x8, 0x73, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, {[], @echo_request}}}}}, 0x0) 08:37:30 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f00000002c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\xf9\xff\xff\xff\xff\xff\xff\xff\x00'/124, 0x40, 0x0, 0x0) r1 = dup2(r0, r0) mq_notify(r1, 0x0) 08:37:30 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x2) 08:37:30 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x805fe7, &(0x7f0000000280)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000680)) 08:37:30 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x8, 0x73, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, {[], @echo_request}}}}}, 0x0) 08:37:30 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x2) 08:37:30 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r2, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x12, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x0, &(0x7f0000000000), 0x0, 0x4) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) 08:37:30 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r2, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x12, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x0, &(0x7f0000000000), 0x0, 0x4) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) 08:37:30 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r2, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x12, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x0, &(0x7f0000000000), 0x0, 0x4) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) 08:37:30 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x805fe7, &(0x7f0000000280)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000680)) [ 119.262329] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 119.263196] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 119.263803] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 119.278471] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 119.325937] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 119.326777] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 119.328024] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 119.329856] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 119.344677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.346284] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.346766] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.347321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.347789] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.362057] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.362581] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.363263] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.363855] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.364390] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.364852] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.374008] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.374503] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.375000] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.375478] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.378150] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.378654] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.379160] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.379634] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.381625] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.382124] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.382576] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.385172] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.385645] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.386668] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.388030] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.388509] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.393034] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.393487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.394812] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.395344] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 119.395800] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 08:37:30 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x2) 08:37:30 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r2, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x12, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x0, &(0x7f0000000000), 0x0, 0x4) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) 08:37:30 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x8, 0x73, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, {[], @echo_request}}}}}, 0x0) 08:37:30 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r2, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x12, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x0, &(0x7f0000000000), 0x0, 0x4) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) 08:37:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000780)) 08:37:30 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x805fe7, &(0x7f0000000280)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000680)) 08:37:30 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000002900000000000029252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011700)='\"', 0x1, 0xf000}], 0x0, &(0x7f0000000000)={[{@check_strict}, {@overriderock}]}) 08:37:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x200000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736616e0ca00088020000400000004f80000200040000300000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000010100)='RRaA\x00'/32, 0x20, 0x800}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010300)="601c6d6b646f736616e0ca00088020000400000004f80000200040000300000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10800}, {&(0x7f0000010600)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x11000}, {&(0x7f0000010700)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x11800}, {&(0x7f0000010800)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100061ec70325132510000ec70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200061ec70325132510000ec70325105000a00000041660069006c00650032000f00140000ffffffffffffffffffff0000ffffffff46494c4532202020202020200062ec70325132510000ec70325106002823000041660069006c0065002e000f00d263006f006c0064000000ffff0000ffffffff46494c457e312020434f4c200062ec70325132510000ec703251070064000000", 0x120, 0x12000}, {&(0x7f0000010a00)="2e20202020202020202020100061ec70325132510000ec7032510300000000002e2e202020202020202020100061ec70325132510000ec70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200061ec70325132510000ec70325104001a040000", 0x80, 0x52000}, {&(0x7f0000010b00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x92000}, {&(0x7f0000011000)='syzkallers\x00'/32, 0x20, 0xd2000}, {&(0x7f0000011100)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x152000}], 0x0, &(0x7f0000011200)) 08:37:30 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x8, 0x73, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, {[], @echo_request}}}}}, 0x0) 08:37:30 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x805fe7, &(0x7f0000000280)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000680)) 08:37:30 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r2, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x12, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x0, &(0x7f0000000000), 0x0, 0x4) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15) 08:37:30 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000680)=0x1f, 0x4) 08:37:30 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000100)={'gre0\x00'}) 08:37:30 executing program 1: mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000525000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000f93000/0x4000)=nil, 0x4000) mlock2(&(0x7f00007df000/0x3000)=nil, 0x3000, 0x0) munmap(&(0x7f00004a2000/0x1000)=nil, 0x1000) mlock(&(0x7f00005bf000/0x4000)=nil, 0x4000) mlock(&(0x7f0000926000/0x4000)=nil, 0x4000) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) 08:37:30 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getpeername(r0, 0x0, &(0x7f00000001c0)) 08:37:30 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='vfat\x00', 0x0, 0x0) [ 119.607130] FAT-fs (loop5): unable to read boot sector 08:37:31 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getpeername(r0, 0x0, &(0x7f00000001c0)) 08:37:31 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000680)=0x1f, 0x4) 08:37:31 executing program 1: mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000525000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000f93000/0x4000)=nil, 0x4000) mlock2(&(0x7f00007df000/0x3000)=nil, 0x3000, 0x0) munmap(&(0x7f00004a2000/0x1000)=nil, 0x1000) mlock(&(0x7f00005bf000/0x4000)=nil, 0x4000) mlock(&(0x7f0000926000/0x4000)=nil, 0x4000) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) 08:37:31 executing program 7: syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{0x0, 0x0, 0x78ac}], 0x0, &(0x7f0000000480)={[{@nocompress}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@map_acorn}, {@session}]}) 08:37:31 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000100)={'gre0\x00'}) 08:37:31 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='vfat\x00', 0x0, 0x0) 08:37:31 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) ioprio_set$pid(0x1, 0x0, 0x4000) 08:37:31 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read(r0, &(0x7f0000000380)=""/250, 0xfa) [ 119.741441] set_capacity_and_notify: 1 callbacks suppressed [ 119.741453] loop7: detected capacity change from 0 to 120 [ 119.752723] isofs_fill_super: bread failed, dev=loop7, iso_blknum=30, block=60 [ 119.755242] FAT-fs (loop5): unable to read boot sector 08:37:31 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) ioprio_set$pid(0x1, 0x0, 0x4000) 08:37:31 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getpeername(r0, 0x0, &(0x7f00000001c0)) 08:37:31 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000680)=0x1f, 0x4) [ 119.762767] loop7: detected capacity change from 0 to 120 08:37:31 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='vfat\x00', 0x0, 0x0) [ 119.768228] isofs_fill_super: bread failed, dev=loop7, iso_blknum=30, block=60 08:37:31 executing program 7: io_setup(0x1, &(0x7f00000001c0)=0x0) io_getevents(r0, 0x5, 0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}], &(0x7f0000000040)={0x0, 0x3938700}) 08:37:31 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000680)=0x1f, 0x4) 08:37:31 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getpeername(r0, 0x0, &(0x7f00000001c0)) 08:37:31 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) ioprio_set$pid(0x1, 0x0, 0x4000) [ 119.827879] FAT-fs (loop5): unable to read boot sector 08:37:31 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) ioprio_set$pid(0x1, 0x0, 0x4000) 08:37:31 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000100)={'gre0\x00'}) 08:37:31 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='vfat\x00', 0x0, 0x0) 08:37:31 executing program 0: r0 = socket$inet(0x2, 0x80003, 0xff) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x5dc, 0x0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) 08:37:31 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, 0x0) 08:37:31 executing program 1: mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000525000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000f93000/0x4000)=nil, 0x4000) mlock2(&(0x7f00007df000/0x3000)=nil, 0x3000, 0x0) munmap(&(0x7f00004a2000/0x1000)=nil, 0x1000) mlock(&(0x7f00005bf000/0x4000)=nil, 0x4000) mlock(&(0x7f0000926000/0x4000)=nil, 0x4000) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) 08:37:31 executing program 7: io_setup(0x1, &(0x7f00000001c0)=0x0) io_getevents(r0, 0x5, 0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}], &(0x7f0000000040)={0x0, 0x3938700}) 08:37:31 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read(r0, &(0x7f0000000380)=""/250, 0xfa) 08:37:31 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)) 08:37:31 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000100)={'gre0\x00'}) [ 120.024372] FAT-fs (loop5): unable to read boot sector 08:37:31 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)) 08:37:31 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)) 08:37:31 executing program 1: mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000525000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000f93000/0x4000)=nil, 0x4000) mlock2(&(0x7f00007df000/0x3000)=nil, 0x3000, 0x0) munmap(&(0x7f00004a2000/0x1000)=nil, 0x1000) mlock(&(0x7f00005bf000/0x4000)=nil, 0x4000) mlock(&(0x7f0000926000/0x4000)=nil, 0x4000) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) 08:37:31 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00') pread64(r0, &(0x7f00000001c0)=""/159, 0x9f, 0x2) 08:37:31 executing program 0: r0 = socket$inet(0x2, 0x80003, 0xff) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x5dc, 0x0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) 08:37:31 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read(r0, &(0x7f0000000380)=""/250, 0xfa) 08:37:31 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xee01) 08:37:31 executing program 7: io_setup(0x1, &(0x7f00000001c0)=0x0) io_getevents(r0, 0x5, 0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}], &(0x7f0000000040)={0x0, 0x3938700}) 08:37:31 executing program 0: r0 = socket$inet(0x2, 0x80003, 0xff) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x5dc, 0x0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) [ 120.157061] Bluetooth: hci0: command 0x0c1a tx timeout 08:37:31 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)) 08:37:31 executing program 6: timer_create(0x0, 0x0, &(0x7f0000000040)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) timer_getoverrun(0x0) 08:37:31 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00') pread64(r0, &(0x7f00000001c0)=""/159, 0x9f, 0x2) 08:37:31 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read(r0, &(0x7f0000000380)=""/250, 0xfa) 08:37:31 executing program 6: timer_create(0x0, 0x0, &(0x7f0000000040)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) timer_getoverrun(0x0) [ 120.208010] audit: type=1326 audit(1768293451.590:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4543 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f56d746db19 code=0x0 [ 121.039316] audit: type=1326 audit(1768293452.421:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4543 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f56d746db19 code=0x0 [ 121.049971] Bluetooth: hci3: command 0x0c1a tx timeout [ 121.051971] Bluetooth: hci1: command 0x0c1a tx timeout [ 121.051993] Bluetooth: hci4: command 0x0c1a tx timeout [ 121.052872] Bluetooth: hci2: command 0x0c1a tx timeout [ 121.052973] Bluetooth: hci5: command 0x0c1a tx timeout 08:37:32 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)) 08:37:32 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)) 08:37:32 executing program 6: timer_create(0x0, 0x0, &(0x7f0000000040)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) timer_getoverrun(0x0) 08:37:32 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00') pread64(r0, &(0x7f00000001c0)=""/159, 0x9f, 0x2) 08:37:32 executing program 7: io_setup(0x1, &(0x7f00000001c0)=0x0) io_getevents(r0, 0x5, 0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}], &(0x7f0000000040)={0x0, 0x3938700}) 08:37:32 executing program 4: io_setup(0x572, &(0x7f0000000140)=0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x17}]) write$eventfd(r1, &(0x7f0000000180), 0x8) 08:37:32 executing program 0: r0 = socket$inet(0x2, 0x80003, 0xff) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x5dc, 0x0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) 08:37:32 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xee01) [ 121.077985] audit: type=1326 audit(1768293452.459:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4553 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f56d746db19 code=0x0 08:37:32 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xee01) [ 121.113998] Bluetooth: hci6: command 0x0c1a tx timeout [ 121.114790] Bluetooth: hci7: command 0x0c1a tx timeout 08:37:33 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)) 08:37:33 executing program 6: timer_create(0x0, 0x0, &(0x7f0000000040)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) timer_getoverrun(0x0) 08:37:33 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30, 0x30]}}}}]}) 08:37:33 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xee01) 08:37:33 executing program 4: io_setup(0x572, &(0x7f0000000140)=0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x17}]) write$eventfd(r1, &(0x7f0000000180), 0x8) 08:37:33 executing program 0: io_setup(0x572, &(0x7f0000000140)=0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x17}]) write$eventfd(r1, &(0x7f0000000180), 0x8) 08:37:33 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000180)=0x1f, 0x4) 08:37:33 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00') pread64(r0, &(0x7f00000001c0)=""/159, 0x9f, 0x2) [ 121.965772] audit: type=1326 audit(1768293453.347:14): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4588 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f56d746db19 code=0x0 08:37:33 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000180)=0x1f, 0x4) 08:37:33 executing program 5: syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@timestamp={0x44, 0x4}]}}, @echo_reply={0x2b}}}}}, 0x0) 08:37:33 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000100)=@chain) add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="ba", 0x1, r0) 08:37:33 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002000028", 0x5d, 0x400}, {0x0, 0x0, 0x1000}], 0x1, &(0x7f0000013a00)) 08:37:33 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30, 0x30]}}}}]}) [ 122.003567] loop6: detected capacity change from 0 to 16 [ 122.009128] EXT4-fs (loop6): bad geometry: block count 64 exceeds size of device (2 blocks) [ 122.039043] loop6: detected capacity change from 0 to 16 [ 122.049224] EXT4-fs (loop6): bad geometry: block count 64 exceeds size of device (2 blocks) [ 122.201987] Bluetooth: hci0: command 0x0c1a tx timeout 08:37:34 executing program 4: io_setup(0x572, &(0x7f0000000140)=0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x17}]) write$eventfd(r1, &(0x7f0000000180), 0x8) 08:37:34 executing program 3: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000100)=@chain) add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="ba", 0x1, r0) 08:37:34 executing program 6: syz_mount_image$ext4(&(0x7f00 VM DIAGNOSIS: 08:37:26 Registers: info registers vcpu 0 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff82977eb0 RDI=ffffffff889c1a00 RBP=ffffffff889c19c0 RSP=ffff88805499f490 R8 =0000000000000001 R9 =ffffed100a933e83 R10=0000000000000000 R11=666666203a302320 R12=0000000000000060 R13=ffffffff889c1a10 R14=ffffffff889c19c0 R15=ffffffff889c1c80 RIP=ffffffff82977f05 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555630c5400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe3b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffa27d4d546 CR3=0000000051755000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000ff0000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1527e RDX=fffffbfff0b82d11 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88801624fb50 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff11002c49f6b R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88801624fb88 RIP=ffffffff84d15410 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055559119a400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555564e15c58 CR3=000000000a9c6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffff0000ff00000000000000 XMM02=000000000000012100736576616c732f XMM03=7269762f736563697665642f7379732f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=000055c7931f4eb0000055c7931cac40 XMM06=000055c7931bbf000000000300000002 XMM07=00000000000000000000000000000000 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000