Warning: Permanently added '[localhost]:47902' (ECDSA) to the list of known hosts. 2022/10/05 11:59:34 fuzzer started 2022/10/05 11:59:35 dialing manager at localhost:37193 syzkaller login: [ 40.261931] cgroup: Unknown subsys name 'net' [ 40.381290] cgroup: Unknown subsys name 'rlimit' 2022/10/05 11:59:49 syscalls: 2215 2022/10/05 11:59:49 code coverage: enabled 2022/10/05 11:59:49 comparison tracing: enabled 2022/10/05 11:59:49 extra coverage: enabled 2022/10/05 11:59:49 setuid sandbox: enabled 2022/10/05 11:59:49 namespace sandbox: enabled 2022/10/05 11:59:49 Android sandbox: enabled 2022/10/05 11:59:49 fault injection: enabled 2022/10/05 11:59:49 leak checking: enabled 2022/10/05 11:59:49 net packet injection: enabled 2022/10/05 11:59:49 net device setup: enabled 2022/10/05 11:59:49 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/05 11:59:49 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/05 11:59:49 USB emulation: enabled 2022/10/05 11:59:49 hci packet injection: enabled 2022/10/05 11:59:49 wifi device emulation: failed to parse kernel version (6.0.0-next-20221005) 2022/10/05 11:59:49 802.15.4 emulation: enabled 2022/10/05 11:59:49 fetching corpus: 0, signal 0/2000 (executing program) 2022/10/05 11:59:49 fetching corpus: 50, signal 22412/25871 (executing program) 2022/10/05 11:59:49 fetching corpus: 100, signal 37728/42447 (executing program) 2022/10/05 11:59:49 fetching corpus: 150, signal 45795/51738 (executing program) 2022/10/05 11:59:49 fetching corpus: 200, signal 48866/56109 (executing program) 2022/10/05 11:59:49 fetching corpus: 250, signal 55151/63397 (executing program) 2022/10/05 11:59:50 fetching corpus: 300, signal 63223/72176 (executing program) 2022/10/05 11:59:50 fetching corpus: 350, signal 67014/76918 (executing program) 2022/10/05 11:59:50 fetching corpus: 400, signal 70521/81294 (executing program) 2022/10/05 11:59:50 fetching corpus: 450, signal 74148/85659 (executing program) 2022/10/05 11:59:50 fetching corpus: 500, signal 79243/91269 (executing program) 2022/10/05 11:59:50 fetching corpus: 550, signal 83606/96118 (executing program) 2022/10/05 11:59:50 fetching corpus: 600, signal 85801/98999 (executing program) 2022/10/05 11:59:50 fetching corpus: 650, signal 87511/101460 (executing program) 2022/10/05 11:59:50 fetching corpus: 700, signal 89288/103925 (executing program) 2022/10/05 11:59:51 fetching corpus: 750, signal 91158/106455 (executing program) 2022/10/05 11:59:51 fetching corpus: 800, signal 93326/109133 (executing program) 2022/10/05 11:59:51 fetching corpus: 850, signal 95357/111691 (executing program) 2022/10/05 11:59:51 fetching corpus: 900, signal 97502/114319 (executing program) 2022/10/05 11:59:51 fetching corpus: 950, signal 99310/116571 (executing program) 2022/10/05 11:59:51 fetching corpus: 1000, signal 101614/119149 (executing program) 2022/10/05 11:59:51 fetching corpus: 1050, signal 103956/121716 (executing program) 2022/10/05 11:59:51 fetching corpus: 1100, signal 105336/123501 (executing program) 2022/10/05 11:59:51 fetching corpus: 1150, signal 107151/125650 (executing program) 2022/10/05 11:59:52 fetching corpus: 1200, signal 108368/127310 (executing program) 2022/10/05 11:59:52 fetching corpus: 1250, signal 109755/129071 (executing program) 2022/10/05 11:59:52 fetching corpus: 1300, signal 112199/131556 (executing program) 2022/10/05 11:59:52 fetching corpus: 1350, signal 113318/133025 (executing program) 2022/10/05 11:59:52 fetching corpus: 1400, signal 116296/135715 (executing program) 2022/10/05 11:59:52 fetching corpus: 1450, signal 117352/137062 (executing program) 2022/10/05 11:59:52 fetching corpus: 1500, signal 118287/138339 (executing program) 2022/10/05 11:59:53 fetching corpus: 1550, signal 119798/139933 (executing program) 2022/10/05 11:59:53 fetching corpus: 1600, signal 120943/141271 (executing program) 2022/10/05 11:59:53 fetching corpus: 1650, signal 122928/143081 (executing program) 2022/10/05 11:59:53 fetching corpus: 1700, signal 124329/144530 (executing program) 2022/10/05 11:59:53 fetching corpus: 1750, signal 127641/147067 (executing program) 2022/10/05 11:59:53 fetching corpus: 1800, signal 129316/148564 (executing program) 2022/10/05 11:59:53 fetching corpus: 1850, signal 131269/150182 (executing program) 2022/10/05 11:59:53 fetching corpus: 1900, signal 132019/151099 (executing program) 2022/10/05 11:59:53 fetching corpus: 1950, signal 133105/152101 (executing program) 2022/10/05 11:59:53 fetching corpus: 2000, signal 134495/153319 (executing program) 2022/10/05 11:59:54 fetching corpus: 2050, signal 135698/154403 (executing program) 2022/10/05 11:59:54 fetching corpus: 2100, signal 136403/155225 (executing program) 2022/10/05 11:59:54 fetching corpus: 2150, signal 138251/156657 (executing program) 2022/10/05 11:59:54 fetching corpus: 2200, signal 139033/157421 (executing program) 2022/10/05 11:59:54 fetching corpus: 2250, signal 139939/158286 (executing program) 2022/10/05 11:59:54 fetching corpus: 2300, signal 140781/159049 (executing program) 2022/10/05 11:59:54 fetching corpus: 2350, signal 141754/159905 (executing program) 2022/10/05 11:59:54 fetching corpus: 2400, signal 142698/160681 (executing program) 2022/10/05 11:59:54 fetching corpus: 2450, signal 143620/161460 (executing program) 2022/10/05 11:59:54 fetching corpus: 2500, signal 144763/162278 (executing program) 2022/10/05 11:59:55 fetching corpus: 2550, signal 146331/163273 (executing program) 2022/10/05 11:59:55 fetching corpus: 2600, signal 147449/164083 (executing program) 2022/10/05 11:59:55 fetching corpus: 2650, signal 148846/165054 (executing program) 2022/10/05 11:59:55 fetching corpus: 2700, signal 149444/165576 (executing program) 2022/10/05 11:59:55 fetching corpus: 2750, signal 150342/166199 (executing program) 2022/10/05 11:59:55 fetching corpus: 2800, signal 150858/166662 (executing program) 2022/10/05 11:59:55 fetching corpus: 2850, signal 152383/167468 (executing program) 2022/10/05 11:59:55 fetching corpus: 2900, signal 153641/168226 (executing program) 2022/10/05 11:59:56 fetching corpus: 2950, signal 154717/168927 (executing program) 2022/10/05 11:59:56 fetching corpus: 3000, signal 155834/169513 (executing program) 2022/10/05 11:59:56 fetching corpus: 3050, signal 157320/170193 (executing program) 2022/10/05 11:59:56 fetching corpus: 3100, signal 158336/170815 (executing program) 2022/10/05 11:59:56 fetching corpus: 3150, signal 159297/171281 (executing program) 2022/10/05 11:59:56 fetching corpus: 3200, signal 159835/171601 (executing program) 2022/10/05 11:59:56 fetching corpus: 3250, signal 160329/171926 (executing program) 2022/10/05 11:59:56 fetching corpus: 3300, signal 160952/172231 (executing program) 2022/10/05 11:59:56 fetching corpus: 3350, signal 161569/172544 (executing program) 2022/10/05 11:59:56 fetching corpus: 3400, signal 162100/172837 (executing program) 2022/10/05 11:59:57 fetching corpus: 3450, signal 162766/173123 (executing program) 2022/10/05 11:59:57 fetching corpus: 3500, signal 163576/173400 (executing program) 2022/10/05 11:59:57 fetching corpus: 3550, signal 164282/173656 (executing program) 2022/10/05 11:59:57 fetching corpus: 3600, signal 164674/173849 (executing program) 2022/10/05 11:59:57 fetching corpus: 3650, signal 165409/174103 (executing program) 2022/10/05 11:59:57 fetching corpus: 3700, signal 165957/174323 (executing program) 2022/10/05 11:59:57 fetching corpus: 3750, signal 166295/174483 (executing program) 2022/10/05 11:59:57 fetching corpus: 3800, signal 166889/174668 (executing program) 2022/10/05 11:59:58 fetching corpus: 3850, signal 168372/175021 (executing program) 2022/10/05 11:59:58 fetching corpus: 3900, signal 168850/175169 (executing program) 2022/10/05 11:59:58 fetching corpus: 3950, signal 169832/175326 (executing program) 2022/10/05 11:59:58 fetching corpus: 4000, signal 170351/175416 (executing program) 2022/10/05 11:59:58 fetching corpus: 4050, signal 171093/175543 (executing program) 2022/10/05 11:59:58 fetching corpus: 4074, signal 171394/175597 (executing program) 2022/10/05 11:59:58 fetching corpus: 4074, signal 171394/175644 (executing program) 2022/10/05 11:59:58 fetching corpus: 4074, signal 171394/175692 (executing program) 2022/10/05 11:59:58 fetching corpus: 4074, signal 171394/175742 (executing program) 2022/10/05 11:59:58 fetching corpus: 4074, signal 171394/175790 (executing program) 2022/10/05 11:59:58 fetching corpus: 4074, signal 171394/175794 (executing program) 2022/10/05 11:59:58 fetching corpus: 4074, signal 171394/175794 (executing program) 2022/10/05 12:00:01 starting 8 fuzzer processes 12:00:01 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0x0, 0x2}, 0x6) 12:00:01 executing program 1: symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') lsetxattr$security_ima(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540), &(0x7f0000000100)=ANY=[@ANYBLOB], 0x9, 0x0) unlink(&(0x7f0000000040)='./file0\x00') 12:00:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x1987) 12:00:01 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x7) 12:00:01 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f00000012c0)='smaps_rollup\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) sendmmsg(r3, &(0x7f00000082c0)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="05", 0x1}], 0x1}}, {{&(0x7f0000003780)=@nl=@proc={0x10, 0x0, 0x25dfdbfe}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003800)="1b", 0x1}], 0x1}}], 0x2, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f000000c340)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000001340)=ANY=[@ANYBLOB="140a0000190001000000000000000000020a008058f4db24ff596a629b0dc8a7e568fe2b0f23f18e2f6d4200b3bdabe512e9c9a79d7b673561a300cc1f5694f4e0e8edd8fa1829bea57f735eaabf87d23701a0c5d56732c4c3de5887f348e70e191fe2f34ac416912f79e7c5329c9702be9412211b0ebcbcde9e9a595a67b11894c0f50e34dfe57cd7c969d110d4bedb65cca183e4dc9b68f69212be0afbee3499f56f57d3dc094fbf58ef1b5f6313a9fe4d0d07dc2b0c06648590788b2a6747b5b9d61fd60b4cf93bd59896ba08000000", @ANYRES32=0x0, @ANYBLOB="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"/2362], 0xa14}], 0x1}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) [ 66.676144] audit: type=1400 audit(1664971201.653:6): avc: denied { execmem } for pid=284 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:00:01 executing program 7: r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f0000001080)=[{0x0, 0x8}, {}], 0x2, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0) 12:00:01 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, 0x0) 12:00:01 executing program 6: openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x26000, 0x0) [ 68.014861] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.017710] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.019381] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.021721] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.025869] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.027754] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.029407] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.032147] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.033645] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.035392] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.040027] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.041740] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.044441] Bluetooth: hci0: HCI_REQ-0x0c1a [ 68.049204] Bluetooth: hci1: HCI_REQ-0x0c1a [ 68.098625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 68.102282] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 68.104828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 68.109259] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 68.119529] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.120877] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.122515] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.124830] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 68.126228] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 68.127930] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.128985] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.130414] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.131743] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 68.132799] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 68.133923] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.135227] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.136375] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.137670] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 68.138745] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 68.147874] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.151999] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.153650] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.156390] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.157523] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.157779] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 68.159838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.161025] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.161372] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.169059] Bluetooth: hci2: HCI_REQ-0x0c1a [ 68.172488] Bluetooth: hci4: HCI_REQ-0x0c1a [ 68.173130] Bluetooth: hci3: HCI_REQ-0x0c1a [ 68.197791] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 68.198639] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 68.200468] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 68.200567] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 68.203004] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 68.203046] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 68.210914] Bluetooth: hci6: HCI_REQ-0x0c1a [ 68.210913] Bluetooth: hci7: HCI_REQ-0x0c1a [ 68.239150] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 68.241024] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 68.246878] Bluetooth: hci5: HCI_REQ-0x0c1a [ 70.093826] Bluetooth: hci1: command 0x0409 tx timeout [ 70.093842] Bluetooth: hci0: command 0x0409 tx timeout [ 70.221390] Bluetooth: hci3: command 0x0409 tx timeout [ 70.222394] Bluetooth: hci6: command 0x0409 tx timeout [ 70.222484] Bluetooth: hci2: command 0x0409 tx timeout [ 70.222870] Bluetooth: hci4: command 0x0409 tx timeout [ 70.285405] Bluetooth: hci5: command 0x0409 tx timeout [ 70.285438] Bluetooth: hci7: command 0x0409 tx timeout [ 72.141480] Bluetooth: hci0: command 0x041b tx timeout [ 72.142667] Bluetooth: hci1: command 0x041b tx timeout [ 72.269457] Bluetooth: hci2: command 0x041b tx timeout [ 72.270253] Bluetooth: hci6: command 0x041b tx timeout [ 72.271136] Bluetooth: hci4: command 0x041b tx timeout [ 72.271930] Bluetooth: hci3: command 0x041b tx timeout [ 72.333385] Bluetooth: hci7: command 0x041b tx timeout [ 72.334152] Bluetooth: hci5: command 0x041b tx timeout [ 74.189370] Bluetooth: hci1: command 0x040f tx timeout [ 74.189802] Bluetooth: hci0: command 0x040f tx timeout [ 74.317375] Bluetooth: hci3: command 0x040f tx timeout [ 74.317811] Bluetooth: hci4: command 0x040f tx timeout [ 74.318201] Bluetooth: hci6: command 0x040f tx timeout [ 74.318638] Bluetooth: hci2: command 0x040f tx timeout [ 74.381375] Bluetooth: hci5: command 0x040f tx timeout [ 74.381818] Bluetooth: hci7: command 0x040f tx timeout [ 76.237368] Bluetooth: hci0: command 0x0419 tx timeout [ 76.237816] Bluetooth: hci1: command 0x0419 tx timeout [ 76.365437] Bluetooth: hci2: command 0x0419 tx timeout [ 76.365876] Bluetooth: hci6: command 0x0419 tx timeout [ 76.366247] Bluetooth: hci4: command 0x0419 tx timeout [ 76.366706] Bluetooth: hci3: command 0x0419 tx timeout [ 76.429395] Bluetooth: hci7: command 0x0419 tx timeout [ 76.429838] Bluetooth: hci5: command 0x0419 tx timeout 12:00:55 executing program 7: r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f0000001080)=[{0x0, 0x8}, {}], 0x2, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0) 12:00:55 executing program 7: r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f0000001080)=[{0x0, 0x8}, {}], 0x2, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0) 12:00:55 executing program 7: r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f0000001080)=[{0x0, 0x8}, {}], 0x2, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0) 12:00:56 executing program 7: r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f0000001080)=[{0x0, 0x8}, {}], 0x2, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0) [ 122.171834] audit: type=1400 audit(1664971257.149:7): avc: denied { open } for pid=3935 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 122.173240] audit: type=1400 audit(1664971257.149:8): avc: denied { kernel } for pid=3935 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 122.189317] ------------[ cut here ]------------ [ 122.189340] [ 122.189343] ====================================================== [ 122.189347] WARNING: possible circular locking dependency detected [ 122.189351] 6.0.0-next-20221005 #1 Not tainted [ 122.189357] ------------------------------------------------------ [ 122.189361] syz-executor.4/3937 is trying to acquire lock: [ 122.189367] ffffffff853faaf8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 122.189409] [ 122.189409] but task is already holding lock: [ 122.189411] ffff88800e6d3420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 122.189438] [ 122.189438] which lock already depends on the new lock. [ 122.189438] [ 122.189441] [ 122.189441] the existing dependency chain (in reverse order) is: [ 122.189444] [ 122.189444] -> #3 (&ctx->lock){....}-{2:2}: [ 122.189458] _raw_spin_lock+0x2a/0x40 [ 122.189470] __perf_event_task_sched_out+0x53b/0x18d0 [ 122.189481] __schedule+0xedd/0x2470 [ 122.189496] schedule+0xda/0x1b0 [ 122.189510] futex_wait_queue+0xf5/0x1e0 [ 122.189523] futex_wait+0x28e/0x690 [ 122.189533] do_futex+0x2ff/0x380 [ 122.189542] __x64_sys_futex+0x1c6/0x4d0 [ 122.189553] do_syscall_64+0x3b/0x90 [ 122.189562] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 122.189576] [ 122.189576] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 122.189590] _raw_spin_lock_nested+0x30/0x40 [ 122.189601] raw_spin_rq_lock_nested+0x1e/0x30 [ 122.189614] task_fork_fair+0x63/0x4d0 [ 122.189631] sched_cgroup_fork+0x3d0/0x540 [ 122.189645] copy_process+0x4183/0x6e20 [ 122.189656] kernel_clone+0xe7/0x890 [ 122.189666] user_mode_thread+0xad/0xf0 [ 122.189676] rest_init+0x24/0x250 [ 122.189689] arch_call_rest_init+0xf/0x14 [ 122.189708] start_kernel+0x4c6/0x4eb [ 122.189725] secondary_startup_64_no_verify+0xe0/0xeb [ 122.189740] [ 122.189740] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 122.189753] _raw_spin_lock_irqsave+0x39/0x60 [ 122.189764] try_to_wake_up+0xab/0x1930 [ 122.189777] up+0x75/0xb0 [ 122.189792] __up_console_sem+0x6e/0x80 [ 122.189808] console_unlock+0x46a/0x590 [ 122.189824] do_con_write+0xc05/0x1d50 [ 122.189836] con_write+0x21/0x40 [ 122.189845] n_tty_write+0x4d4/0xfe0 [ 122.189857] file_tty_write.constprop.0+0x455/0x8a0 [ 122.189870] vfs_write+0x9c3/0xd90 [ 122.189886] ksys_write+0x127/0x250 [ 122.189902] do_syscall_64+0x3b/0x90 [ 122.189911] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 122.189925] [ 122.189925] -> #0 ((console_sem).lock){....}-{2:2}: [ 122.189938] __lock_acquire+0x2a02/0x5e70 [ 122.189956] lock_acquire+0x1a2/0x530 [ 122.189972] _raw_spin_lock_irqsave+0x39/0x60 [ 122.189983] down_trylock+0xe/0x70 [ 122.189999] __down_trylock_console_sem+0x3b/0xd0 [ 122.190015] vprintk_emit+0x16b/0x560 [ 122.190031] vprintk+0x84/0xa0 [ 122.190046] _printk+0xba/0xf1 [ 122.190059] report_bug.cold+0x72/0xab [ 122.190076] handle_bug+0x3c/0x70 [ 122.190085] exc_invalid_op+0x14/0x50 [ 122.190094] asm_exc_invalid_op+0x16/0x20 [ 122.190107] group_sched_out.part.0+0x2c7/0x460 [ 122.190125] ctx_sched_out+0x8f1/0xc10 [ 122.190142] __perf_event_task_sched_out+0x6d0/0x18d0 [ 122.190152] __schedule+0xedd/0x2470 [ 122.190167] schedule+0xda/0x1b0 [ 122.190181] futex_wait_queue+0xf5/0x1e0 [ 122.190192] futex_wait+0x28e/0x690 [ 122.190202] do_futex+0x2ff/0x380 [ 122.190211] __x64_sys_futex+0x1c6/0x4d0 [ 122.190221] do_syscall_64+0x3b/0x90 [ 122.190230] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 122.190243] [ 122.190243] other info that might help us debug this: [ 122.190243] [ 122.190246] Chain exists of: [ 122.190246] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 122.190246] [ 122.190261] Possible unsafe locking scenario: [ 122.190261] [ 122.190263] CPU0 CPU1 [ 122.190265] ---- ---- [ 122.190268] lock(&ctx->lock); [ 122.190273] lock(&rq->__lock); [ 122.190280] lock(&ctx->lock); [ 122.190286] lock((console_sem).lock); [ 122.190291] [ 122.190291] *** DEADLOCK *** [ 122.190291] [ 122.190293] 2 locks held by syz-executor.4/3937: [ 122.190300] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 122.190330] #1: ffff88800e6d3420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 122.190356] [ 122.190356] stack backtrace: [ 122.190359] CPU: 0 PID: 3937 Comm: syz-executor.4 Not tainted 6.0.0-next-20221005 #1 [ 122.190372] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 122.190378] Call Trace: [ 122.190382] [ 122.190386] dump_stack_lvl+0x8b/0xb3 [ 122.190406] check_noncircular+0x263/0x2e0 [ 122.190422] ? format_decode+0x26c/0xb50 [ 122.190441] ? print_circular_bug+0x450/0x450 [ 122.190458] ? simple_strtoul+0x30/0x30 [ 122.190475] ? format_decode+0x26c/0xb50 [ 122.190493] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 122.190511] __lock_acquire+0x2a02/0x5e70 [ 122.190533] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 122.190556] lock_acquire+0x1a2/0x530 [ 122.190573] ? down_trylock+0xe/0x70 [ 122.190591] ? lock_release+0x750/0x750 [ 122.190612] ? vprintk+0x84/0xa0 [ 122.190630] _raw_spin_lock_irqsave+0x39/0x60 [ 122.190642] ? down_trylock+0xe/0x70 [ 122.190659] down_trylock+0xe/0x70 [ 122.190676] ? vprintk+0x84/0xa0 [ 122.190693] __down_trylock_console_sem+0x3b/0xd0 [ 122.190711] vprintk_emit+0x16b/0x560 [ 122.190730] vprintk+0x84/0xa0 [ 122.190748] _printk+0xba/0xf1 [ 122.190760] ? record_print_text.cold+0x16/0x16 [ 122.190777] ? report_bug.cold+0x66/0xab [ 122.190796] ? group_sched_out.part.0+0x2c7/0x460 [ 122.190814] report_bug.cold+0x72/0xab [ 122.190834] handle_bug+0x3c/0x70 [ 122.190844] exc_invalid_op+0x14/0x50 [ 122.190855] asm_exc_invalid_op+0x16/0x20 [ 122.190869] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 122.190890] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 2b 08 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 122.190901] RSP: 0018:ffff88803fcdf8f8 EFLAGS: 00010006 [ 122.190911] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 122.190918] RDX: ffff888010003580 RSI: ffffffff81566da7 RDI: 0000000000000005 [ 122.190926] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 122.190933] R10: 0000000000000000 R11: ffffffff865b601b R12: ffff88800e6d3400 [ 122.190957] R13: ffff88806ce3d2c0 R14: ffffffff8547d040 R15: 0000000000000002 [ 122.190968] ? group_sched_out.part.0+0x2c7/0x460 [ 122.190988] ? group_sched_out.part.0+0x2c7/0x460 [ 122.191008] ctx_sched_out+0x8f1/0xc10 [ 122.191027] __perf_event_task_sched_out+0x6d0/0x18d0 [ 122.191042] ? lock_is_held_type+0xd7/0x130 [ 122.191056] ? __perf_cgroup_move+0x160/0x160 [ 122.191067] ? set_next_entity+0x304/0x550 [ 122.191087] ? lock_is_held_type+0xd7/0x130 [ 122.191101] __schedule+0xedd/0x2470 [ 122.191119] ? io_schedule_timeout+0x150/0x150 [ 122.191135] ? futex_wait_setup+0x166/0x230 [ 122.191150] schedule+0xda/0x1b0 [ 122.191165] futex_wait_queue+0xf5/0x1e0 [ 122.191178] futex_wait+0x28e/0x690 [ 122.191190] ? futex_wait_setup+0x230/0x230 [ 122.191204] ? wake_up_q+0x8b/0xf0 [ 122.191217] ? do_raw_spin_unlock+0x4f/0x220 [ 122.191236] ? futex_wake+0x158/0x490 [ 122.191252] ? fd_install+0x1f9/0x640 [ 122.191268] do_futex+0x2ff/0x380 [ 122.191279] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 122.191295] __x64_sys_futex+0x1c6/0x4d0 [ 122.191308] ? __x64_sys_futex_time32+0x480/0x480 [ 122.191321] ? syscall_enter_from_user_mode+0x1d/0x50 [ 122.191336] ? syscall_enter_from_user_mode+0x1d/0x50 [ 122.191352] do_syscall_64+0x3b/0x90 [ 122.191362] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 122.191376] RIP: 0033:0x7f49b820ab19 [ 122.191384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 122.191395] RSP: 002b:00007f49b5780218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 122.191406] RAX: ffffffffffffffda RBX: 00007f49b831df68 RCX: 00007f49b820ab19 [ 122.191414] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f49b831df68 [ 122.191421] RBP: 00007f49b831df60 R08: 0000000000000000 R09: 0000000000000000 [ 122.191428] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f49b831df6c [ 122.191435] R13: 00007fff4f32cbcf R14: 00007f49b5780300 R15: 0000000000022000 [ 122.191448] [ 122.252027] WARNING: CPU: 0 PID: 3937 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 122.252658] Modules linked in: [ 122.252883] CPU: 0 PID: 3937 Comm: syz-executor.4 Not tainted 6.0.0-next-20221005 #1 [ 122.253399] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 122.253957] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 122.254333] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 2b 08 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 122.255551] RSP: 0018:ffff88803fcdf8f8 EFLAGS: 00010006 [ 122.255913] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 122.256394] RDX: ffff888010003580 RSI: ffffffff81566da7 RDI: 0000000000000005 [ 122.256882] RBP: ffff8880086605c8 R08: 0000000000000005 R09: 0000000000000001 [ 122.257369] R10: 0000000000000000 R11: ffffffff865b601b R12: ffff88800e6d3400 [ 122.257854] R13: ffff88806ce3d2c0 R14: ffffffff8547d040 R15: 0000000000000002 [ 122.258337] FS: 00007f49b5780700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 122.258883] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.259285] CR2: 0000555556734c58 CR3: 000000001b674000 CR4: 0000000000350ef0 [ 122.259778] Call Trace: [ 122.259962] [ 122.260124] ctx_sched_out+0x8f1/0xc10 [ 122.260403] __perf_event_task_sched_out+0x6d0/0x18d0 [ 122.260759] ? lock_is_held_type+0xd7/0x130 [ 122.261065] ? __perf_cgroup_move+0x160/0x160 [ 122.261381] ? set_next_entity+0x304/0x550 [ 122.261687] ? lock_is_held_type+0xd7/0x130 [ 122.261984] __schedule+0xedd/0x2470 [ 122.262248] ? io_schedule_timeout+0x150/0x150 [ 122.262569] ? futex_wait_setup+0x166/0x230 [ 122.262867] schedule+0xda/0x1b0 [ 122.263132] futex_wait_queue+0xf5/0x1e0 [ 122.263425] futex_wait+0x28e/0x690 [ 122.263686] ? futex_wait_setup+0x230/0x230 [ 122.263990] ? wake_up_q+0x8b/0xf0 [ 122.264244] ? do_raw_spin_unlock+0x4f/0x220 [ 122.264556] ? futex_wake+0x158/0x490 [ 122.264831] ? fd_install+0x1f9/0x640 [ 122.265102] do_futex+0x2ff/0x380 [ 122.265346] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 122.265751] __x64_sys_futex+0x1c6/0x4d0 [ 122.266038] ? __x64_sys_futex_time32+0x480/0x480 [ 122.266372] ? syscall_enter_from_user_mode+0x1d/0x50 [ 122.266736] ? syscall_enter_from_user_mode+0x1d/0x50 [ 122.267112] do_syscall_64+0x3b/0x90 [ 122.267370] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 122.267732] RIP: 0033:0x7f49b820ab19 [ 122.267988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 122.269211] RSP: 002b:00007f49b5780218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 122.269732] RAX: ffffffffffffffda RBX: 00007f49b831df68 RCX: 00007f49b820ab19 [ 122.270218] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f49b831df68 [ 122.270705] RBP: 00007f49b831df60 R08: 0000000000000000 R09: 0000000000000000 [ 122.271208] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f49b831df6c [ 122.271705] R13: 00007fff4f32cbcf R14: 00007f49b5780300 R15: 0000000000022000 [ 122.272197] [ 122.272364] irq event stamp: 642 [ 122.272601] hardirqs last enabled at (641): [] syscall_enter_from_user_mode+0x1d/0x50 [ 122.273239] hardirqs last disabled at (642): [] __schedule+0x1225/0x2470 [ 122.273808] softirqs last enabled at (340): [] __irq_exit_rcu+0x11b/0x180 [ 122.274399] softirqs last disabled at (331): [] __irq_exit_rcu+0x11b/0x180 [ 122.274983] ---[ end trace 0000000000000000 ]--- 12:00:57 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0x0, 0x2}, 0x6) 12:00:57 executing program 7: r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f0000001080)=[{0x0, 0x8}, {}], 0x2, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0) 12:00:57 executing program 4: r0 = io_uring_setup(0x7c54, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 12:00:57 executing program 6: openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x26000, 0x0) 12:00:57 executing program 3: waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x4, 0x0) r0 = getpgrp(0x0) waitid(0x2, r0, &(0x7f0000000080), 0x0, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000100), 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000001640)='ns/ipc\x00') socket$inet6_tcp(0xa, 0x1, 0x0) fork() mlockall(0x5) 12:00:57 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mount$9p_tcp(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)) 12:00:57 executing program 2: pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12:00:57 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000e40)='fdinfo/4\x00') [ 122.576342] 9pnet_fd: p9_fd_create_tcp (3974): problem connecting socket to 127.0.0.1 12:00:57 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0x0, 0x2}, 0x6) 12:00:57 executing program 4: r0 = syz_io_uring_setup(0x4efe, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, 0x0}, 0x101) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0xf57, 0x0, 0x0, 0x0, 0x0) 12:00:57 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000e40)='fdinfo/4\x00') 12:00:57 executing program 6: openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x26000, 0x0) 12:00:57 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000008b40), 0x1, 0x0, &(0x7f0000008b80)={0x77359400}, 0x0, 0x0) 12:00:57 executing program 7: r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f0000001080)=[{0x0, 0x8}, {}], 0x2, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7fff}], 0x1, 0x0) 12:00:57 executing program 5: syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) 12:00:57 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000e40)='fdinfo/4\x00') 12:00:57 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0x0, 0x2}, 0x6) 12:00:57 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000008b40), 0x1, 0x0, &(0x7f0000008b80)={0x77359400}, 0x0, 0x0) 12:00:57 executing program 6: openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x26000, 0x0) 12:00:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x28}}, 0x0) 12:00:57 executing program 3: waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x4, 0x0) r0 = getpgrp(0x0) waitid(0x2, r0, &(0x7f0000000080), 0x0, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000100), 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000001640)='ns/ipc\x00') socket$inet6_tcp(0xa, 0x1, 0x0) fork() mlockall(0x5) 12:00:57 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @mss], 0x2000000000000145) 12:00:57 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000e40)='fdinfo/4\x00') 12:00:57 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:useradd_exec_t:s0\x00', 0x24) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000003480)={@private0}, 0x14) 12:00:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x28}}, 0x0) 12:00:57 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000008b40), 0x1, 0x0, &(0x7f0000008b80)={0x77359400}, 0x0, 0x0) 12:00:57 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6(0xa, 0x3, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff) io_setup(0x3, &(0x7f0000000440)) io_uring_setup(0x46ca, &(0x7f0000000480)) io_submit(0x0, 0x2, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000500)="7716e5cd34", 0x5, 0x100000001}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) 12:00:57 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getgroups(0x0, 0x0) [ 122.844089] audit: type=1400 audit(1664971257.821:9): avc: denied { create } for pid=4025 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:useradd_exec_t:s0 tclass=rawip_socket permissive=1 [ 122.847041] audit: type=1400 audit(1664971257.824:10): avc: denied { setopt } for pid=4025 comm="syz-executor.5" lport=58 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:useradd_exec_t:s0 tclass=rawip_socket permissive=1 12:00:57 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000008b40), 0x1, 0x0, &(0x7f0000008b80)={0x77359400}, 0x0, 0x0) 12:00:57 executing program 6: waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x4, 0x0) r0 = getpgrp(0x0) waitid(0x2, r0, &(0x7f0000000080), 0x0, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000100), 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000001640)='ns/ipc\x00') socket$inet6_tcp(0xa, 0x1, 0x0) fork() mlockall(0x5) 12:00:57 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getgroups(0x0, 0x0) 12:00:57 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x28}}, 0x0) 12:00:57 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:useradd_exec_t:s0\x00', 0x24) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000003480)={@private0}, 0x14) 12:00:57 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:useradd_exec_t:s0\x00', 0x24) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000003480)={@private0}, 0x14) 12:00:57 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000001080), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) 12:00:57 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getgroups(0x0, 0x0) 12:00:58 executing program 3: waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x4, 0x0) r0 = getpgrp(0x0) waitid(0x2, r0, &(0x7f0000000080), 0x0, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000100), 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000001640)='ns/ipc\x00') socket$inet6_tcp(0xa, 0x1, 0x0) fork() mlockall(0x5) 12:00:58 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000001080), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) 12:00:58 executing program 6: waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x4, 0x0) r0 = getpgrp(0x0) waitid(0x2, r0, &(0x7f0000000080), 0x0, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000100), 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000001640)='ns/ipc\x00') socket$inet6_tcp(0xa, 0x1, 0x0) fork() mlockall(0x5) 12:00:58 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:useradd_exec_t:s0\x00', 0x24) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000003480)={@private0}, 0x14) 12:00:58 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:useradd_exec_t:s0\x00', 0x24) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000003480)={@private0}, 0x14) 12:00:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x28}}, 0x0) 12:00:58 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6(0xa, 0x3, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff) io_setup(0x3, &(0x7f0000000440)) io_uring_setup(0x46ca, &(0x7f0000000480)) io_submit(0x0, 0x2, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000500)="7716e5cd34", 0x5, 0x100000001}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) 12:00:58 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getgroups(0x0, 0x0) 12:00:58 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000001080), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) 12:00:58 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:useradd_exec_t:s0\x00', 0x24) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000003480)={@private0}, 0x14) 12:00:58 executing program 0: mq_open(0x0, 0x0, 0x0, &(0x7f00000004c0)) 12:00:58 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:useradd_exec_t:s0\x00', 0x24) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000003480)={@private0}, 0x14) 12:00:58 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000001080), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) 12:00:58 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="840ed7cb019cc4c626bd522b9b297ab0228f"}, {&(0x7f0000000440)="f117c9546fdf673e848c4c40aae7d578e6a70ca6261a43b646cf390b39b5b5f8e490cbc2954c666512f0df544eee3737d7dfed7d929427a7110deb7349410be3c1ce5c55ab6187bb39dc6908fd34b3b34203a5184310cdcb173d03bad191e46181"}, {&(0x7f0000000300)="9fb8735a86"}]}}], 0x63, 0x24048894) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 12:00:58 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='autofs\x00', 0x0, &(0x7f00000001c0)='\x00') 12:00:58 executing program 3: waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x4, 0x0) r0 = getpgrp(0x0) waitid(0x2, r0, &(0x7f0000000080), 0x0, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000100), 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000001640)='ns/ipc\x00') socket$inet6_tcp(0xa, 0x1, 0x0) fork() mlockall(0x5) 12:00:58 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$vga_arbiter(r0, 0x0, 0x0) [ 123.436365] autofs4:pid:4085:autofs_fill_super: called with bogus options 12:00:58 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x0, @local}, {0x2, 0x4e20, @broadcast}, 0x186, 0x0, 0x0, 0x0, 0x100, 0x0, 0x80000000, 0x9, 0xfffe}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)=0x5e, 0xfffffffffffffe2e) sendto(r0, &(0x7f0000000280)="ee3bc48c71ffa43c048897aef8d277337f04332ffb70654305187a1a01f94cf6a3218494667c7b5693e61b624e4a6a2de76244610545c7daa91f32b2550409e9e430359ba094da74e03f64690a8cb3ac93f1e81a26c00a8796b42d46a77d17267a923f700d2c4f69bae83624692d7cd3f5c8df9cf0cfa2873de584b66c4840b22c2365d9208c98d91c668a2862d689d0cb8cb39e", 0x94, 0xc010, &(0x7f0000000340)=@caif=@rfm={0x25, 0x5, "01770911920fa6b0cf9a6f6b2b34fce1"}, 0x80) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='/#\x00', &(0x7f0000000040)=')\x00', 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880), 0x4000101, 0x0) 12:00:58 executing program 6: waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x4, 0x0) r0 = getpgrp(0x0) waitid(0x2, r0, &(0x7f0000000080), 0x0, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000100), 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000001640)='ns/ipc\x00') socket$inet6_tcp(0xa, 0x1, 0x0) fork() mlockall(0x5) 12:00:58 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6(0xa, 0x3, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff) io_setup(0x3, &(0x7f0000000440)) io_uring_setup(0x46ca, &(0x7f0000000480)) io_submit(0x0, 0x2, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000500)="7716e5cd34", 0x5, 0x100000001}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) 12:00:58 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x0, 0x0, 0x0) 12:00:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r1, &(0x7f0000000200)='x', 0x1, 0x0) fallocate(r0, 0x0, 0x0, 0x8001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1}) 12:00:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d0001"], 0x1c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x0) 12:00:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '#\x00\b', 0xc, 0x11, 0x0, @empty, @local, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 123.574543] audit: type=1400 audit(1664971258.551:11): avc: denied { write } for pid=4086 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 123.588524] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 12:00:58 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x0, @local}, {0x2, 0x4e20, @broadcast}, 0x186, 0x0, 0x0, 0x0, 0x100, 0x0, 0x80000000, 0x9, 0xfffe}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)=0x5e, 0xfffffffffffffe2e) sendto(r0, &(0x7f0000000280)="ee3bc48c71ffa43c048897aef8d277337f04332ffb70654305187a1a01f94cf6a3218494667c7b5693e61b624e4a6a2de76244610545c7daa91f32b2550409e9e430359ba094da74e03f64690a8cb3ac93f1e81a26c00a8796b42d46a77d17267a923f700d2c4f69bae83624692d7cd3f5c8df9cf0cfa2873de584b66c4840b22c2365d9208c98d91c668a2862d689d0cb8cb39e", 0x94, 0xc010, &(0x7f0000000340)=@caif=@rfm={0x25, 0x5, "01770911920fa6b0cf9a6f6b2b34fce1"}, 0x80) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='/#\x00', &(0x7f0000000040)=')\x00', 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880), 0x4000101, 0x0) 12:00:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r1, &(0x7f0000000200)='x', 0x1, 0x0) fallocate(r0, 0x0, 0x0, 0x8001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1}) 12:00:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfd, 0x8000}, 0xc) 12:00:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d0001"], 0x1c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x0) [ 123.719407] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 12:00:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r1, &(0x7f0000000200)='x', 0x1, 0x0) fallocate(r0, 0x0, 0x0, 0x8001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1}) 12:00:58 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6(0xa, 0x3, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff) io_setup(0x3, &(0x7f0000000440)) io_uring_setup(0x46ca, &(0x7f0000000480)) io_submit(0x0, 0x2, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000500)="7716e5cd34", 0x5, 0x100000001}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) 12:00:58 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d0001"], 0x1c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x0) [ 123.835749] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 123.842153] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 12:00:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r1, &(0x7f0000000200)='x', 0x1, 0x0) fallocate(r0, 0x0, 0x0, 0x8001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1}) 12:00:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfd, 0x8000}, 0xc) 12:00:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d0001"], 0x1c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x0) 12:00:58 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x0, @local}, {0x2, 0x4e20, @broadcast}, 0x186, 0x0, 0x0, 0x0, 0x100, 0x0, 0x80000000, 0x9, 0xfffe}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)=0x5e, 0xfffffffffffffe2e) sendto(r0, &(0x7f0000000280)="ee3bc48c71ffa43c048897aef8d277337f04332ffb70654305187a1a01f94cf6a3218494667c7b5693e61b624e4a6a2de76244610545c7daa91f32b2550409e9e430359ba094da74e03f64690a8cb3ac93f1e81a26c00a8796b42d46a77d17267a923f700d2c4f69bae83624692d7cd3f5c8df9cf0cfa2873de584b66c4840b22c2365d9208c98d91c668a2862d689d0cb8cb39e", 0x94, 0xc010, &(0x7f0000000340)=@caif=@rfm={0x25, 0x5, "01770911920fa6b0cf9a6f6b2b34fce1"}, 0x80) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='/#\x00', &(0x7f0000000040)=')\x00', 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880), 0x4000101, 0x0) 12:00:58 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty, @local, @empty}}}}, 0x0) 12:00:58 executing program 3: getpriority(0x0, 0xffffffffffffffff) 12:00:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfd, 0x8000}, 0xc) 12:00:58 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x0, @local}, {0x2, 0x4e20, @broadcast}, 0x186, 0x0, 0x0, 0x0, 0x100, 0x0, 0x80000000, 0x9, 0xfffe}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)=0x5e, 0xfffffffffffffe2e) sendto(r0, &(0x7f0000000280)="ee3bc48c71ffa43c048897aef8d277337f04332ffb70654305187a1a01f94cf6a3218494667c7b5693e61b624e4a6a2de76244610545c7daa91f32b2550409e9e430359ba094da74e03f64690a8cb3ac93f1e81a26c00a8796b42d46a77d17267a923f700d2c4f69bae83624692d7cd3f5c8df9cf0cfa2873de584b66c4840b22c2365d9208c98d91c668a2862d689d0cb8cb39e", 0x94, 0xc010, &(0x7f0000000340)=@caif=@rfm={0x25, 0x5, "01770911920fa6b0cf9a6f6b2b34fce1"}, 0x80) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='/#\x00', &(0x7f0000000040)=')\x00', 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880), 0x4000101, 0x0) 12:00:58 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d0001"], 0x1c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x0) 12:00:58 executing program 3: r0 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000500)={{}, r1, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000000)=0x59b) sendfile(r3, r4, 0x0, 0x5) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000002680)=ANY=[@ANYBLOB="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"]) mq_timedsend(r2, &(0x7f0000000180)="846a34816a6da7b6348cf5487fd246a7c603e99ddfc62a407d4f0a2c40434437573601db883a6e819dcb5ef55f0a796671683e914f317679bda1cd3a464662a51f7185ec0f4cbda7b9bf2234914b5c7bc2b2ac1b5c14c52434a66df9a4a87869a8b6c2a21310763151b158c8e0e9696619e607786d908413ebb92ca73407a915", 0x80, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x862a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f0000000100)="791b7d2577ec32834a9a9aafee0def956e242de950d5fb727f8252a2dc6dddf0b7989216f868d4bb30764ab9b8b02c", 0x2f, 0x59, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x810, 0xffffffffffffffff, 0x0) accept$unix(r2, 0x0, &(0x7f0000000200)) fork() 12:00:58 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x4) 12:00:58 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000180)={0x0, 0x0, 0x11, &(0x7f0000000080)="d4eba84a3f13edfbf79f0b9601a47366eb"}) 12:00:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d0001"], 0x1c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x0) [ 124.010375] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 12:00:58 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f000000c340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)={0x13, 0x32, 0xe21, 0x0, 0x0, "", [@generic="8e"]}, 0x14}], 0x1}, 0x0) 12:00:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfd, 0x8000}, 0xc) [ 124.038913] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 12:00:59 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x4) 12:00:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, &(0x7f0000002300)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x20044000) 12:00:59 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d0001"], 0x1c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x0) 12:00:59 executing program 4: openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) fchmodat(0xffffffffffffffff, &(0x7f00000038c0)='./file1\x00', 0x0) 12:00:59 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x4) 12:00:59 executing program 0: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000340)) fcntl$getown(r0, 0x9) 12:00:59 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000180)={0x0, 0x0, 0x11, &(0x7f0000000080)="d4eba84a3f13edfbf79f0b9601a47366eb"}) 12:00:59 executing program 7: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000740)={{}, {0x1}}) 12:00:59 executing program 2: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x8) [ 124.174085] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 12:00:59 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6596b417a9502097) [ 124.434312] hrtimer: interrupt took 15058 ns 12:01:00 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000180)={0x0, 0x0, 0x11, &(0x7f0000000080)="d4eba84a3f13edfbf79f0b9601a47366eb"}) 12:01:00 executing program 2: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x8) 12:01:00 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) setresgid(0xee00, 0x0, 0x0) 12:01:00 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x82242, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@unlock_all, 0xb) 12:01:00 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, 0x0, 0x0) 12:01:00 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x4) 12:01:00 executing program 3: r0 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000500)={{}, r1, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000000)=0x59b) sendfile(r3, r4, 0x0, 0x5) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000002680)=ANY=[@ANYBLOB="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"]) mq_timedsend(r2, &(0x7f0000000180)="846a34816a6da7b6348cf5487fd246a7c603e99ddfc62a407d4f0a2c40434437573601db883a6e819dcb5ef55f0a796671683e914f317679bda1cd3a464662a51f7185ec0f4cbda7b9bf2234914b5c7bc2b2ac1b5c14c52434a66df9a4a87869a8b6c2a21310763151b158c8e0e9696619e607786d908413ebb92ca73407a915", 0x80, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x862a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f0000000100)="791b7d2577ec32834a9a9aafee0def956e242de950d5fb727f8252a2dc6dddf0b7989216f868d4bb30764ab9b8b02c", 0x2f, 0x59, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x810, 0xffffffffffffffff, 0x0) accept$unix(r2, 0x0, &(0x7f0000000200)) fork() 12:01:00 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000180)={0x0, 0x0, 0x11, &(0x7f0000000080)="d4eba84a3f13edfbf79f0b9601a47366eb"}) 12:01:00 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14}, 0x14}}, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000b00)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1, 0x0, 0xffffffffffffffff, 0x0) 12:01:00 executing program 2: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x8) 12:01:00 executing program 4: syz_io_uring_setup(0x7137, &(0x7f0000000000), &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0, 0x0, 0xff0f0045) 12:01:00 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) 12:01:00 executing program 1: nanosleep(&(0x7f0000000080)={0x0, 0x989680}, 0x0) 12:01:00 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000080)='./file0\x00') [ 125.365194] mmap: syz-executor.4 (4242) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. 12:01:00 executing program 2: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x8) 12:01:00 executing program 5: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000008c0)) 12:01:00 executing program 1: nanosleep(&(0x7f0000000080)={0x0, 0x989680}, 0x0) 12:01:00 executing program 4: syz_io_uring_setup(0x7137, &(0x7f0000000000), &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0, 0x0, 0xff0f0045) 12:01:00 executing program 7: mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x123008, 0x0) mount$9p_unix(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x140000, 0x0) 12:01:00 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000080)='./file0\x00') 12:01:00 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r1, r0, 0xee00) 12:01:00 executing program 3: r0 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000500)={{}, r1, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000000)=0x59b) sendfile(r3, r4, 0x0, 0x5) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000002680)=ANY=[@ANYBLOB="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"]) mq_timedsend(r2, &(0x7f0000000180)="846a34816a6da7b6348cf5487fd246a7c603e99ddfc62a407d4f0a2c40434437573601db883a6e819dcb5ef55f0a796671683e914f317679bda1cd3a464662a51f7185ec0f4cbda7b9bf2234914b5c7bc2b2ac1b5c14c52434a66df9a4a87869a8b6c2a21310763151b158c8e0e9696619e607786d908413ebb92ca73407a915", 0x80, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x862a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f0000000100)="791b7d2577ec32834a9a9aafee0def956e242de950d5fb727f8252a2dc6dddf0b7989216f868d4bb30764ab9b8b02c", 0x2f, 0x59, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x810, 0xffffffffffffffff, 0x0) accept$unix(r2, 0x0, &(0x7f0000000200)) fork() 12:01:00 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fallocate(r1, 0x0, 0x0, 0x6) write$9p(r1, &(0x7f0000000280)='S', 0x1) 12:01:00 executing program 5: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000008c0)) 12:01:00 executing program 1: nanosleep(&(0x7f0000000080)={0x0, 0x989680}, 0x0) 12:01:00 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) 12:01:00 executing program 4: syz_io_uring_setup(0x7137, &(0x7f0000000000), &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0, 0x0, 0xff0f0045) 12:01:00 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000080)='./file0\x00') 12:01:00 executing program 5: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000008c0)) 12:01:00 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fallocate(r1, 0x0, 0x0, 0x6) write$9p(r1, &(0x7f0000000280)='S', 0x1) 12:01:00 executing program 1: nanosleep(&(0x7f0000000080)={0x0, 0x989680}, 0x0) 12:01:00 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000080)='./file0\x00') 12:01:00 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fallocate(r1, 0x0, 0x0, 0x6) write$9p(r1, &(0x7f0000000280)='S', 0x1) 12:01:00 executing program 5: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000008c0)) 12:01:00 executing program 3: r0 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000500)={{}, r1, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000000)=0x59b) sendfile(r3, r4, 0x0, 0x5) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000002680)=ANY=[@ANYBLOB="0300c8bf0b3d03ea3bfc00674f590e19a751c86a2d7f6298523412aa34bc235ae8731b1dc2d21e7ab5f4cfa7cbcf37b4427ac15297d730e6ceacddf84a3d44eaa99810264dee3d3dcb7fb564f58804a8bc8fb642d103e6c23bcd62147cc78f37bcef182ed139ae6f306cdc8177cd2d1bd02f77c25278ce99cdcaaf5974dc4072fdda2aa1fd90b56511777be0ff4722405644f6084b6c483b340dd4b9d44c6d69f028a683f78584282fe9f0063df4cfd6379220f8b39f037437b9db96f5def476dd4640bc25c8e7458e351609cdc19206f18218cbffc278715227b39a22b1b470d133fc85a440fe33d3d4441cf140bddac9acd9c75743a3ffd78b5bf6c0a67f6ec7e61468cd58f697677189e0378b9153230076b20121b72f8033e09a8ea396d420ef766fb41e49889283387a49543cdfa7857634aa8b894b1f9bb2f827b9013252ba79cab8ef92a5b21cdc25eb9e5fd33fc8a39baa8a4cdeba54e86464e4773e1989b87e5b4a44c1f69019c8d5cf47c000"]) mq_timedsend(r2, &(0x7f0000000180)="846a34816a6da7b6348cf5487fd246a7c603e99ddfc62a407d4f0a2c40434437573601db883a6e819dcb5ef55f0a796671683e914f317679bda1cd3a464662a51f7185ec0f4cbda7b9bf2234914b5c7bc2b2ac1b5c14c52434a66df9a4a87869a8b6c2a21310763151b158c8e0e9696619e607786d908413ebb92ca73407a915", 0x80, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x862a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f0000000100)="791b7d2577ec32834a9a9aafee0def956e242de950d5fb727f8252a2dc6dddf0b7989216f868d4bb30764ab9b8b02c", 0x2f, 0x59, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x810, 0xffffffffffffffff, 0x0) accept$unix(r2, 0x0, &(0x7f0000000200)) fork() 12:01:00 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fallocate(r1, 0x0, 0x0, 0x6) write$9p(r1, &(0x7f0000000280)='S', 0x1) 12:01:00 executing program 7: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fallocate(r1, 0x0, 0x0, 0x6) write$9p(r1, &(0x7f0000000280)='S', 0x1) 12:01:00 executing program 4: syz_io_uring_setup(0x7137, &(0x7f0000000000), &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0, 0x0, 0xff0f0045) 12:01:00 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 12:01:00 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fallocate(r1, 0x0, 0x0, 0x6) write$9p(r1, &(0x7f0000000280)='S', 0x1) 12:01:00 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fallocate(r1, 0x0, 0x0, 0x6) write$9p(r1, &(0x7f0000000280)='S', 0x1) 12:01:00 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) 12:01:00 executing program 7: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fallocate(r1, 0x0, 0x0, 0x6) write$9p(r1, &(0x7f0000000280)='S', 0x1) 12:01:00 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fallocate(r1, 0x0, 0x0, 0x6) write$9p(r1, &(0x7f0000000280)='S', 0x1) 12:01:00 executing program 4: syz_mount_image$iso9660(&(0x7f0000001840), &(0x7f0000001880)='./file1\x00', 0x0, 0x0, &(0x7f0000001900), 0x0, &(0x7f0000001940)={[{@sbsector}, {@check_strict}]}) 12:01:00 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000040)) 12:01:00 executing program 5: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 125.904063] ISOFS: Unable to identify CD-ROM format. [ 125.930782] ISOFS: Unable to identify CD-ROM format. 12:01:00 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 12:01:00 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 12:01:00 executing program 7: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fallocate(r1, 0x0, 0x0, 0x6) write$9p(r1, &(0x7f0000000280)='S', 0x1) 12:01:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='F', 0x1, 0x7fffffffffffffff) 12:01:00 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000002600), 0xbb, 0x82001) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000002640)=""/169) r1 = fork() sendmsg$unix(0xffffffffffffffff, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000002780)="dc0e6648f71eaaa9abf997159b1ed59f8928c0fc7dbac1462feaf571a36a5011b2cbd982e1c7530c598848117c24bbabf54c31f6d65d85953fb972780a91c185e354390954ee40c56fd27233979f0e2c4bc748aabc4dba89db43d14f6aff74911034a2c7ce44163746118d", 0x6b}, {&(0x7f0000002800)="4ba6cc4649c6593a22f4c9915009d0c38357caee1ac22dc8d386df912cb3033119232bbc85cbdfb84fde61a17874b2a8ea025ecb6361f4075c8116293f2d184ec5d1b7fcef493e0b3f8e3a6cb603ed5e1ff7fe7392d5b29d63c4e260d4c037ccfda16e6609b677c88eb9ce20bbb67a8396c98a84201b9ee28fd53d9ce104f856c040aadf057136", 0x87}, {&(0x7f00000028c0)="e269812ec675130bdcdbb00d857b8a794f3cdd1db359397213d336e7d6379b81fc80e4c713cd557e87b48d083b8521cfc8a3726ccaf3c2aadc8c7d24c6d1656559174a049b4dc962622f77d1835737b66a1964b7", 0x54}], 0x3, &(0x7f0000002a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xffffffffffffffff, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r0, r0]}}], 0xc0, 0x48080}, 0xc040000) migrate_pages(r1, 0xfff, &(0x7f0000002bc0)=0x5, &(0x7f0000002c00)=0x8) io_uring_enter(0xffffffffffffffff, 0x6c78, 0x0, 0x1, &(0x7f0000003b00)={[0x1000]}, 0x8) 12:01:00 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000500), 0x0, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, 0x0) 12:01:00 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000080)="01", 0x41030) [ 125.982621] audit: type=1400 audit(1664971260.959:12): avc: denied { read } for pid=4331 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 12:01:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCADDRT(r0, 0x80108906, 0x0) 12:01:00 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 12:01:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='F', 0x1, 0x7fffffffffffffff) 12:01:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 12:01:01 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000009c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000055040)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x3, "bc386eff17b8c9"}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001ec0)=0x80000000, 0x5) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r5, r0, 0x0, 0xfffffdef) [ 126.089746] loop4: detected capacity change from 0 to 40 12:01:01 executing program 5: clock_gettime(0x2, &(0x7f0000000180)) 12:01:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCADDRT(r0, 0x80108906, 0x0) 12:01:01 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000380), 0x4) [ 126.172634] syz-executor.4: attempt to access beyond end of device [ 126.172634] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 126.174100] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 126.184068] syz-executor.4: attempt to access beyond end of device [ 126.184068] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 126.185494] Buffer I/O error on dev loop4, logical block 10, lost async page write 12:01:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='F', 0x1, 0x7fffffffffffffff) 12:01:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCADDRT(r0, 0x80108906, 0x0) 12:01:01 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 12:01:01 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000080)="01", 0x41030) 12:01:01 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000080)="01", 0x41030) 12:01:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 12:01:01 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000009c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000055040)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x3, "bc386eff17b8c9"}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001ec0)=0x80000000, 0x5) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r5, r0, 0x0, 0xfffffdef) 12:01:01 executing program 5: clock_gettime(0x2, &(0x7f0000000180)) [ 126.244850] loop4: detected capacity change from 0 to 40 12:01:01 executing program 5: clock_gettime(0x2, &(0x7f0000000180)) 12:01:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='F', 0x1, 0x7fffffffffffffff) 12:01:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCADDRT(r0, 0x80108906, 0x0) 12:01:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000009c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000055040)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x3, "bc386eff17b8c9"}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001ec0)=0x80000000, 0x5) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r5, r0, 0x0, 0xfffffdef) [ 126.315871] loop3: detected capacity change from 0 to 40 12:01:01 executing program 5: clock_gettime(0x2, &(0x7f0000000180)) [ 126.337970] syz-executor.4: attempt to access beyond end of device [ 126.337970] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 126.339127] Buffer I/O error on dev loop4, logical block 10, lost async page write [ 126.380270] syz-executor.3: attempt to access beyond end of device [ 126.380270] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 126.381288] Buffer I/O error on dev loop3, logical block 10, lost async page write 12:01:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000009c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000055040)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x3, "bc386eff17b8c9"}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001ec0)=0x80000000, 0x5) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r5, r0, 0x0, 0xfffffdef) 12:01:01 executing program 6: getpriority(0xf0eacb5a58f48eee, 0x0) 12:01:01 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000080)="01", 0x41030) 12:01:01 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000009c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000055040)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x3, "bc386eff17b8c9"}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001ec0)=0x80000000, 0x5) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r5, r0, 0x0, 0xfffffdef) 12:01:01 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000080)="01", 0x41030) 12:01:01 executing program 5: syz_emit_ethernet(0x233, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x225, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @dev, {[@timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"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"}}}}}}, 0x0) 12:01:01 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000080)="01", 0x41030) 12:01:01 executing program 2: syz_mount_image$nfs4(&(0x7f0000001fc0), &(0x7f0000002000)='./file0\x00', 0x0, 0x3, &(0x7f0000003540)=[{&(0x7f0000002040)="de", 0x1}, {&(0x7f00000020c0)="fc", 0x1}, {0x0}], 0x509b66f1b417291c, &(0x7f0000003640)={[{'mcast_rejoin_count\x00'}], [{@permit_directio}, {@fsname={'fsname', 0x3d, '\\'}}]}) [ 126.435647] loop3: detected capacity change from 0 to 40 [ 126.438595] loop4: detected capacity change from 0 to 40 12:01:01 executing program 6: getpriority(0xf0eacb5a58f48eee, 0x0) 12:01:01 executing program 2: mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f00000013c0)=0xffffffffff91c6ff, 0xfff, 0x0) 12:01:01 executing program 5: syz_emit_ethernet(0x233, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x225, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @dev, {[@timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"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"}}}}}}, 0x0) [ 126.523615] syz-executor.3: attempt to access beyond end of device [ 126.523615] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 126.524785] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 126.532161] syz-executor.4: attempt to access beyond end of device [ 126.532161] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 126.533173] Buffer I/O error on dev loop4, logical block 10, lost async page write 12:01:01 executing program 6: getpriority(0xf0eacb5a58f48eee, 0x0) 12:01:01 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000080)="01", 0x41030) 12:01:01 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000080)="01", 0x41030) 12:01:01 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000006680), 0x900, 0x0) 12:01:01 executing program 5: syz_emit_ethernet(0x233, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x225, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @dev, {[@timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"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"}}}}}}, 0x0) 12:01:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000009c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000055040)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x3, "bc386eff17b8c9"}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001ec0)=0x80000000, 0x5) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r5, r0, 0x0, 0xfffffdef) 12:01:01 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x2, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000009c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000055040)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x3, "bc386eff17b8c9"}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001ec0)=0x80000000, 0x5) write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r5, r0, 0x0, 0xfffffdef) [ 126.632913] loop3: detected capacity change from 0 to 40 12:01:01 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000080)="01", 0x41030) 12:01:01 executing program 6: getpriority(0xf0eacb5a58f48eee, 0x0) [ 126.655158] loop4: detected capacity change from 0 to 40 12:01:01 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) fcntl$lock(r0, 0x26, &(0x7f0000000040)) 12:01:01 executing program 5: syz_emit_ethernet(0x233, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x225, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @dev, {[@timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"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"}}}}}}, 0x0) [ 126.696816] syz-executor.3: attempt to access beyond end of device [ 126.696816] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 126.697904] Buffer I/O error on dev loop3, logical block 10, lost async page write [ 126.738937] syz-executor.4: attempt to access beyond end of device [ 126.738937] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 126.739866] Buffer I/O error on dev loop4, logical block 10, lost async page write 12:01:01 executing program 6: syz_read_part_table(0x0, 0x1, &(0x7f0000000600)=[{0x0, 0x0, 0xb41f}]) [ 126.765852] loop6: detected capacity change from 0 to 180 [ 126.778257] loop6: detected capacity change from 0 to 180 12:01:01 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) fcntl$lock(r0, 0x26, &(0x7f0000000040)) 12:01:01 executing program 6: syz_read_part_table(0x0, 0x1, &(0x7f0000000600)=[{0x0, 0x0, 0xb41f}]) 12:01:01 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000080)="01", 0x41030) 12:01:01 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000040)) [ 126.839913] loop6: detected capacity change from 0 to 180 12:01:01 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000040)) 12:01:01 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) fcntl$lock(r0, 0x26, &(0x7f0000000040)) 12:01:01 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='loginuid\x00') readv(r0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/223, 0xdf}], 0x1) write$bt_hci(r0, 0x0, 0x0) 12:01:01 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) fcntl$lock(r0, 0x26, &(0x7f0000000040)) 12:01:01 executing program 6: syz_read_part_table(0x0, 0x1, &(0x7f0000000600)=[{0x0, 0x0, 0xb41f}]) 12:01:01 executing program 5: epoll_create(0x0) [ 126.920105] loop6: detected capacity change from 0 to 180 12:01:01 executing program 3: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) prctl$PR_GET_TSC(0x19, &(0x7f0000000080)) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x25}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x45}, 0x40) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) fork() 12:01:01 executing program 5: r0 = add_key$keyring(&(0x7f00000009c0), &(0x7f0000000a00)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r0, 0x0, 0x0) 12:01:01 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000040)) 12:01:01 executing program 6: syz_read_part_table(0x0, 0x1, &(0x7f0000000600)=[{0x0, 0x0, 0xb41f}]) 12:01:01 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@local, @mcast1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1040200}) 12:01:01 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, 0x0, 0x0) 12:01:01 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000040)) [ 127.006098] loop6: detected capacity change from 0 to 180 12:01:02 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, 0x0, 0x0) 12:01:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) fchmod(r0, 0x0) 12:01:02 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, 0x0, 0x0) 12:01:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) fchmod(r0, 0x0) 12:01:02 executing program 3: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) prctl$PR_GET_TSC(0x19, &(0x7f0000000080)) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x25}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x45}, 0x40) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) fork() 12:01:02 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, 0x0, 0x0) 12:01:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) fchmod(r0, 0x0) 12:01:02 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect(r0, &(0x7f00000003c0)=@nl=@unspec, 0x80) 12:01:02 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x5307, 0x0) 12:01:02 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000040), &(0x7f0000000000), &(0x7f0000001a40)) [ 127.199218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.200275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 12:01:02 executing program 6: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) 12:01:02 executing program 7: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x215, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 12:01:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x29, &(0x7f0000008540)={0x0, {{0x2, 0x0, @local}}}, 0x5000) 12:01:02 executing program 6: ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) r0 = add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500)="fdc4a68cb1c48b88c9c61a8043ea0ad5661c10a26a5a41eac0c22f77f9a05a786ae97256af35bebf51d25f", 0x2b, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000ac0)={r0, 0x6a, 0x17}, &(0x7f0000000b00)={'enc=', 'oaep', ' hash=', {'sha3-512-generic\x00'}}, &(0x7f0000000b80)="297fc1c3d50d95333506918a6dcd68998ac61350a6d761f20dbf5aa7451a50952663c93992c77b2d1c6c1bd44d96ac51a50f1c859b9051187a870a0a7e72d03e2c61f0478aa37ec7dc2a98aa51eca692f59d3ca9f91514e596e0551d6cfaae823a1cbde5e2dd55fdbeab", &(0x7f0000000c00)=""/23) fork() 12:01:02 executing program 1: socketpair(0x1e, 0x0, 0x0, &(0x7f0000001e80)) 12:01:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) fchmod(r0, 0x0) [ 127.703597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.704352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 12:01:02 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0xb, 0x101}, 0x14}}, 0x0) 12:01:02 executing program 3: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) prctl$PR_GET_TSC(0x19, &(0x7f0000000080)) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x25}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x45}, 0x40) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) fork() 12:01:02 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x49, 0x0, &(0x7f00000000c0)) 12:01:02 executing program 6: ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) r0 = add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500)="fdc4a68cb1c48b88c9c61a8043ea0ad5661c10a26a5a41eac0c22f77f9a05a786ae97256af35bebf51d25f", 0x2b, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000ac0)={r0, 0x6a, 0x17}, &(0x7f0000000b00)={'enc=', 'oaep', ' hash=', {'sha3-512-generic\x00'}}, &(0x7f0000000b80)="297fc1c3d50d95333506918a6dcd68998ac61350a6d761f20dbf5aa7451a50952663c93992c77b2d1c6c1bd44d96ac51a50f1c859b9051187a870a0a7e72d03e2c61f0478aa37ec7dc2a98aa51eca692f59d3ca9f91514e596e0551d6cfaae823a1cbde5e2dd55fdbeab", &(0x7f0000000c00)=""/23) fork() 12:01:02 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCMGET(r0, 0x5415, 0x0) 12:01:02 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x5307, 0x0) 12:01:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000004dc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000004e00)=@file={0x0, './file0/file0\x00'}, 0x6e) 12:01:02 executing program 0: syz_io_uring_setup(0x9, &(0x7f0000000280), &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000180001"], 0x28}}, 0x0) 12:01:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000004dc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000004e00)=@file={0x0, './file0/file0\x00'}, 0x6e) [ 127.809781] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 12:01:02 executing program 1: r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x60000017}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) epoll_pwait(r0, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) 12:01:02 executing program 6: ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) r0 = add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500)="fdc4a68cb1c48b88c9c61a8043ea0ad5661c10a26a5a41eac0c22f77f9a05a786ae97256af35bebf51d25f", 0x2b, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000ac0)={r0, 0x6a, 0x17}, &(0x7f0000000b00)={'enc=', 'oaep', ' hash=', {'sha3-512-generic\x00'}}, &(0x7f0000000b80)="297fc1c3d50d95333506918a6dcd68998ac61350a6d761f20dbf5aa7451a50952663c93992c77b2d1c6c1bd44d96ac51a50f1c859b9051187a870a0a7e72d03e2c61f0478aa37ec7dc2a98aa51eca692f59d3ca9f91514e596e0551d6cfaae823a1cbde5e2dd55fdbeab", &(0x7f0000000c00)=""/23) fork() 12:01:02 executing program 7: io_submit(0x0, 0x1, &(0x7f0000000140)=[0x0]) io_setup(0xffff7d91, &(0x7f0000000180)) [ 127.886777] audit: type=1400 audit(1664971262.864:13): avc: denied { block_suspend } for pid=4546 comm="syz-executor.1" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 12:01:02 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x49, 0x0, &(0x7f00000000c0)) 12:01:02 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') getdents(r0, 0x0, 0x0) 12:01:02 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x5307, 0x0) 12:01:02 executing program 7: epoll_wait(0xffffffffffffffff, &(0x7f0000000a00)=[{}], 0x1, 0xfffff060) 12:01:02 executing program 3: prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) prctl$PR_GET_TSC(0x19, &(0x7f0000000080)) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x25}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x45}, 0x40) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) fork() 12:01:02 executing program 0: mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xc000, 0x0, 0x0, 0x0) 12:01:02 executing program 6: ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) r0 = add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500)="fdc4a68cb1c48b88c9c61a8043ea0ad5661c10a26a5a41eac0c22f77f9a05a786ae97256af35bebf51d25f", 0x2b, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000ac0)={r0, 0x6a, 0x17}, &(0x7f0000000b00)={'enc=', 'oaep', ' hash=', {'sha3-512-generic\x00'}}, &(0x7f0000000b80)="297fc1c3d50d95333506918a6dcd68998ac61350a6d761f20dbf5aa7451a50952663c93992c77b2d1c6c1bd44d96ac51a50f1c859b9051187a870a0a7e72d03e2c61f0478aa37ec7dc2a98aa51eca692f59d3ca9f91514e596e0551d6cfaae823a1cbde5e2dd55fdbeab", &(0x7f0000000c00)=""/23) fork() 12:01:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000004dc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000004e00)=@file={0x0, './file0/file0\x00'}, 0x6e) 12:01:02 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x49, 0x0, &(0x7f00000000c0)) 12:01:02 executing program 1: r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x60000017}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) epoll_pwait(r0, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) 12:01:03 executing program 0: r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x60000017}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) epoll_pwait(r0, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) 12:01:03 executing program 1: r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x60000017}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) epoll_pwait(r0, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) 12:01:03 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') readahead(r0, 0x0, 0x0) 12:01:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000004dc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000004e00)=@file={0x0, './file0/file0\x00'}, 0x6e) 12:01:03 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x44b43, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x5307, 0x0) 12:01:03 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x49, 0x0, &(0x7f00000000c0)) 12:01:03 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001e00010000000000000000000a00000001"], 0x1c}], 0x1}, 0x0) 12:01:03 executing program 0: r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x60000017}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) epoll_pwait(r0, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) 12:01:03 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0xed3, &(0x7f0000000100), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/97, 0x61}], 0x2000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) 12:01:03 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') readahead(r0, 0x0, 0x0) 12:01:03 executing program 1: r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x60000017}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) epoll_pwait(r0, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) 12:01:03 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0xed3, &(0x7f0000000100), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/97, 0x61}], 0x2000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) 12:01:03 executing program 0: r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x60000017}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) epoll_pwait(r0, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) 12:01:03 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000500)={0x3, &(0x7f00000004c0)=[{0x2, 0xdd, 0x1}, {}, {0x66}]}) 12:01:03 executing program 4: prctl$PR_SET_DUMPABLE(0x35, 0x2) 12:01:03 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) rmdir(&(0x7f0000000140)='./file1\x00') 12:01:03 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') openat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) 12:01:03 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') readahead(r0, 0x0, 0x0) 12:01:03 executing program 1: r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f00000005c0)='logon\x00', &(0x7f0000000600)='\x00') 12:01:03 executing program 4: prctl$PR_SET_DUMPABLE(0x35, 0x2) 12:01:03 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0xed3, &(0x7f0000000100), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/97, 0x61}], 0x2000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) 12:01:03 executing program 0: listen(0xffffffffffffffff, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/219, 0xdb) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f0, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000006240)) syz_mount_image$ext4(&(0x7f00000063c0)='ext3\x00', &(0x7f0000006400)='./file0\x00', 0x0, 0x3, &(0x7f00000066c0)=[{&(0x7f0000006440)="e4ff43ac8fbee7d4b553e80dd1008ce427c27f57bdd8cffbfe7cfbfa502d823bcdef4494d53d579359fd34805790cb2a801b1aa46bf13498c2c3c1becdc21ba78782aae422c65691606f90bd1eb1796c6c", 0x51, 0xffffffff}, {&(0x7f0000006500)="adc7f1ba115062ddfa8e691f37fbda0e94f90a3d9fdfae198be9d4cf6fa2e722c3987fd6969691e372926a34c2837c001a4c7100e19da46be9baf70d93259e72ad24824326ff199e2ae86b8f0f", 0x4d, 0xff}, {&(0x7f0000006580)="09263b299744270676a4d369bbbcbb781b5780b87bb8906d9b3068bfe928126500470358f347cbb2cde9d6bc6ef3e5b732513fb703190266b669e92f9ce8ebab2557cc50213ebb4eb558c3c17a7e95461823440a11d8db05d39c433c5da083cd209e865e481017da256f33bf42aa1939aacabb8e022dc1b2458dcf56b625e4ce0fb429a5c312894a70", 0x89}], 0x202004, &(0x7f0000009340)={[{@nombcache}], [{@smackfsroot={'smackfsroot', 0x3d, 'syz2\x00'}}, {@dont_appraise}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@fsname}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@obj_user={'obj_user', 0x3d, 'ip_vti0\x00'}}]}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000094c0)={&(0x7f0000009400), 0xc, &(0x7f0000009480)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 128.455516] loop0: detected capacity change from 0 to 264192 [ 128.467957] loop0: detected capacity change from 0 to 264192 12:01:03 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') openat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) 12:01:03 executing program 6: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 12:01:03 executing program 4: prctl$PR_SET_DUMPABLE(0x35, 0x2) 12:01:03 executing program 0: clock_settime(0x0, &(0x7f0000002440)) 12:01:03 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') readahead(r0, 0x0, 0x0) 12:01:03 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0xed3, &(0x7f0000000100), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000000)) perf_event_open(&(0x7f0000000680)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/97, 0x61}], 0x2000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) 12:01:03 executing program 1: r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f00000005c0)='logon\x00', &(0x7f0000000600)='\x00') 12:01:03 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) rmdir(&(0x7f0000000140)='./file1\x00') 12:01:03 executing program 7: shmdt(0x0) 12:01:03 executing program 1: r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f00000005c0)='logon\x00', &(0x7f0000000600)='\x00') 12:01:03 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x5, &(0x7f0000000140)={0x6, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000080)=0xd0, 0x4) 12:01:03 executing program 4: prctl$PR_SET_DUMPABLE(0x35, 0x2) 12:01:03 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') openat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) 12:01:03 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) rmdir(&(0x7f0000000140)='./file1\x00') 12:01:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r1, 0x0) pkey_mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 12:01:03 executing program 7: shmdt(0x0) 12:01:03 executing program 1: r VM DIAGNOSIS: 12:00:57 Registers: info registers vcpu 0 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bda91 RDI=ffffffff8765c9a0 RBP=ffffffff8765c960 RSP=ffff88803fcdf340 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000065 R11=0000000000000001 R12=0000000000000065 R13=ffffffff8765c960 R14=0000000000000010 R15=ffffffff823bda80 RIP=ffffffff823bdae9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f49b5780700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555556734c58 CR3=000000001b674000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f49b82f17c000007f49b82f17c8 XMM02=00007f49b82f17e000007f49b82f17c0 XMM03=00007f49b82f17c800007f49b82f17c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88806ce3f080 RCX=0000000000000000 RDX=ffff88800d463580 RSI=ffffffff813bcaa7 RDI=0000000000000005 RBP=0000000000000000 RSP=ffff88802047f958 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000003 R13=ffffed100d9c7e11 R14=ffff88806ce3f088 R15=0000000000000001 RIP=ffffffff813bcaa9 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555556be400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f49b831a0a0 CR3=000000001b674000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f49b82f17c000007f49b82f17c8 XMM02=00007f49b82f17e000007f49b82f17c0 XMM03=00007f49b82f17c800007f49b82f17c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000