Warning: Permanently added '[localhost]:19477' (ECDSA) to the list of known hosts. 2022/09/14 11:54:41 fuzzer started 2022/09/14 11:54:41 dialing manager at localhost:33849 syzkaller login: [ 43.946931] cgroup: Unknown subsys name 'net' [ 44.035485] cgroup: Unknown subsys name 'rlimit' 2022/09/14 11:54:55 syscalls: 2215 2022/09/14 11:54:55 code coverage: enabled 2022/09/14 11:54:55 comparison tracing: enabled 2022/09/14 11:54:55 extra coverage: enabled 2022/09/14 11:54:55 setuid sandbox: enabled 2022/09/14 11:54:55 namespace sandbox: enabled 2022/09/14 11:54:55 Android sandbox: enabled 2022/09/14 11:54:55 fault injection: enabled 2022/09/14 11:54:55 leak checking: enabled 2022/09/14 11:54:55 net packet injection: enabled 2022/09/14 11:54:55 net device setup: enabled 2022/09/14 11:54:55 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/14 11:54:55 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/14 11:54:55 USB emulation: enabled 2022/09/14 11:54:55 hci packet injection: enabled 2022/09/14 11:54:55 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220914) 2022/09/14 11:54:55 802.15.4 emulation: enabled 2022/09/14 11:54:55 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/14 11:54:55 fetching corpus: 50, signal 34558/37780 (executing program) 2022/09/14 11:54:55 fetching corpus: 100, signal 44188/48701 (executing program) 2022/09/14 11:54:56 fetching corpus: 150, signal 51785/57425 (executing program) 2022/09/14 11:54:56 fetching corpus: 200, signal 57330/64091 (executing program) 2022/09/14 11:54:56 fetching corpus: 250, signal 63044/70733 (executing program) 2022/09/14 11:54:56 fetching corpus: 300, signal 66860/75495 (executing program) 2022/09/14 11:54:56 fetching corpus: 350, signal 72650/82048 (executing program) 2022/09/14 11:54:56 fetching corpus: 400, signal 76616/86735 (executing program) 2022/09/14 11:54:56 fetching corpus: 450, signal 80191/91027 (executing program) 2022/09/14 11:54:57 fetching corpus: 500, signal 86672/97709 (executing program) 2022/09/14 11:54:57 fetching corpus: 550, signal 90819/102238 (executing program) 2022/09/14 11:54:57 fetching corpus: 600, signal 95056/106752 (executing program) 2022/09/14 11:54:57 fetching corpus: 650, signal 97848/110076 (executing program) 2022/09/14 11:54:57 fetching corpus: 700, signal 101726/114293 (executing program) 2022/09/14 11:54:57 fetching corpus: 750, signal 105397/118121 (executing program) 2022/09/14 11:54:58 fetching corpus: 800, signal 109298/122044 (executing program) 2022/09/14 11:54:58 fetching corpus: 850, signal 111339/124402 (executing program) 2022/09/14 11:54:58 fetching corpus: 900, signal 115418/128339 (executing program) 2022/09/14 11:54:58 fetching corpus: 950, signal 118421/131291 (executing program) 2022/09/14 11:54:58 fetching corpus: 1000, signal 121435/134176 (executing program) 2022/09/14 11:54:58 fetching corpus: 1050, signal 124275/136869 (executing program) 2022/09/14 11:54:59 fetching corpus: 1100, signal 126684/139256 (executing program) 2022/09/14 11:54:59 fetching corpus: 1150, signal 129165/141664 (executing program) 2022/09/14 11:54:59 fetching corpus: 1200, signal 131052/143473 (executing program) 2022/09/14 11:54:59 fetching corpus: 1250, signal 132444/144961 (executing program) 2022/09/14 11:54:59 fetching corpus: 1300, signal 134142/146566 (executing program) 2022/09/14 11:54:59 fetching corpus: 1350, signal 135851/148124 (executing program) 2022/09/14 11:54:59 fetching corpus: 1400, signal 137015/149327 (executing program) 2022/09/14 11:55:00 fetching corpus: 1450, signal 139071/151051 (executing program) 2022/09/14 11:55:00 fetching corpus: 1500, signal 141201/152951 (executing program) 2022/09/14 11:55:00 fetching corpus: 1550, signal 142689/154240 (executing program) 2022/09/14 11:55:00 fetching corpus: 1600, signal 144368/155564 (executing program) 2022/09/14 11:55:00 fetching corpus: 1650, signal 145465/156584 (executing program) 2022/09/14 11:55:00 fetching corpus: 1700, signal 146933/157819 (executing program) 2022/09/14 11:55:01 fetching corpus: 1750, signal 148481/159099 (executing program) 2022/09/14 11:55:01 fetching corpus: 1800, signal 150607/160551 (executing program) 2022/09/14 11:55:01 fetching corpus: 1850, signal 152176/161828 (executing program) 2022/09/14 11:55:01 fetching corpus: 1900, signal 153135/162591 (executing program) 2022/09/14 11:55:01 fetching corpus: 1950, signal 154464/163460 (executing program) 2022/09/14 11:55:01 fetching corpus: 2000, signal 155667/164289 (executing program) 2022/09/14 11:55:01 fetching corpus: 2050, signal 156682/164994 (executing program) 2022/09/14 11:55:02 fetching corpus: 2100, signal 157882/165936 (executing program) 2022/09/14 11:55:02 fetching corpus: 2150, signal 158798/166558 (executing program) 2022/09/14 11:55:02 fetching corpus: 2200, signal 160374/167452 (executing program) 2022/09/14 11:55:02 fetching corpus: 2250, signal 161206/167965 (executing program) 2022/09/14 11:55:02 fetching corpus: 2300, signal 163491/169192 (executing program) 2022/09/14 11:55:02 fetching corpus: 2350, signal 164666/169813 (executing program) 2022/09/14 11:55:03 fetching corpus: 2400, signal 165658/170317 (executing program) 2022/09/14 11:55:03 fetching corpus: 2450, signal 167076/170980 (executing program) 2022/09/14 11:55:03 fetching corpus: 2500, signal 167867/171360 (executing program) 2022/09/14 11:55:03 fetching corpus: 2516, signal 168055/171497 (executing program) 2022/09/14 11:55:03 fetching corpus: 2516, signal 168055/171577 (executing program) 2022/09/14 11:55:03 fetching corpus: 2516, signal 168055/171646 (executing program) 2022/09/14 11:55:03 fetching corpus: 2516, signal 168055/171717 (executing program) 2022/09/14 11:55:03 fetching corpus: 2516, signal 168055/171777 (executing program) 2022/09/14 11:55:03 fetching corpus: 2516, signal 168055/171853 (executing program) 2022/09/14 11:55:03 fetching corpus: 2516, signal 168055/171915 (executing program) 2022/09/14 11:55:03 fetching corpus: 2516, signal 168055/171996 (executing program) 2022/09/14 11:55:03 fetching corpus: 2516, signal 168055/172051 (executing program) 2022/09/14 11:55:03 fetching corpus: 2516, signal 168055/172118 (executing program) 2022/09/14 11:55:03 fetching corpus: 2516, signal 168055/172173 (executing program) 2022/09/14 11:55:03 fetching corpus: 2516, signal 168055/172237 (executing program) 2022/09/14 11:55:03 fetching corpus: 2516, signal 168055/172310 (executing program) 2022/09/14 11:55:03 fetching corpus: 2516, signal 168055/172376 (executing program) 2022/09/14 11:55:03 fetching corpus: 2516, signal 168055/172460 (executing program) 2022/09/14 11:55:03 fetching corpus: 2516, signal 168055/172502 (executing program) 2022/09/14 11:55:03 fetching corpus: 2516, signal 168055/172566 (executing program) 2022/09/14 11:55:03 fetching corpus: 2516, signal 168055/172638 (executing program) 2022/09/14 11:55:03 fetching corpus: 2516, signal 168055/172714 (executing program) 2022/09/14 11:55:03 fetching corpus: 2516, signal 168055/172767 (executing program) 2022/09/14 11:55:03 fetching corpus: 2516, signal 168055/172823 (executing program) 2022/09/14 11:55:03 fetching corpus: 2516, signal 168055/172904 (executing program) 2022/09/14 11:55:03 fetching corpus: 2516, signal 168055/172972 (executing program) 2022/09/14 11:55:03 fetching corpus: 2516, signal 168055/173059 (executing program) 2022/09/14 11:55:03 fetching corpus: 2516, signal 168055/173121 (executing program) 2022/09/14 11:55:03 fetching corpus: 2516, signal 168055/173171 (executing program) 2022/09/14 11:55:03 fetching corpus: 2516, signal 168055/173244 (executing program) 2022/09/14 11:55:03 fetching corpus: 2516, signal 168055/173293 (executing program) 2022/09/14 11:55:03 fetching corpus: 2516, signal 168055/173293 (executing program) 2022/09/14 11:55:06 starting 8 fuzzer processes 11:55:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000080)='./file0\x00') 11:55:06 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='clear_refs\x00') pwritev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)='2', 0x1}], 0x1, 0x0, 0x0) 11:55:06 executing program 2: syz_open_procfs$userns(0x0, &(0x7f0000000000)) clone3(&(0x7f0000000200)={0x100000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x1}, 0x53) [ 68.034840] audit: type=1400 audit(1663156506.166:6): avc: denied { execmem } for pid=286 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:55:06 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4642, 0x0) 11:55:06 executing program 5: r0 = syz_io_uring_setup(0x146c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000001c0), 0x1) 11:55:06 executing program 4: prlimit64(0x0, 0x7, &(0x7f0000000080)={0x4, 0x6}, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0x1, 0x80000001}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) syz_io_uring_setup(0x55c6, &(0x7f0000000200), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x12100}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f) pidfd_open(0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000300)={0x6, 0x5}, 0x0) epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0x8) openat(r0, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14) r4 = fork() r5 = fork() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x7}) 11:55:06 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000140)=""/230) 11:55:06 executing program 7: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) lsetxattr$security_selinux(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:dpkg_exec_t:s0\x00', 0x21, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') [ 69.325743] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.328393] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.329761] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.332607] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.334790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.336138] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.341473] Bluetooth: hci0: HCI_REQ-0x0c1a [ 69.515886] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 69.518008] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 69.519666] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 69.539525] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 69.544969] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 69.550105] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 69.556086] Bluetooth: hci7: HCI_REQ-0x0c1a [ 69.556791] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 69.567979] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.570200] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.573799] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.577971] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 69.581479] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 69.582088] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.584545] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 69.588052] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.588097] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 69.590548] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.591975] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.592031] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 69.594524] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 69.594711] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.596791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.604438] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 69.605704] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 69.611841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.612944] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 69.615540] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.616777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.624767] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 69.625898] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.627206] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 69.628565] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.629537] Bluetooth: hci6: HCI_REQ-0x0c1a [ 69.629846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.631672] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.633076] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 69.634467] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.654348] Bluetooth: hci4: HCI_REQ-0x0c1a [ 69.656653] Bluetooth: hci1: HCI_REQ-0x0c1a [ 69.673477] Bluetooth: hci5: HCI_REQ-0x0c1a [ 69.680341] Bluetooth: hci3: HCI_REQ-0x0c1a [ 71.413926] Bluetooth: hci0: command 0x0409 tx timeout [ 71.477414] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 71.605368] Bluetooth: hci7: command 0x0409 tx timeout [ 71.733354] Bluetooth: hci1: command 0x0409 tx timeout [ 71.733818] Bluetooth: hci6: command 0x0409 tx timeout [ 71.734205] Bluetooth: hci5: command 0x0409 tx timeout [ 71.734649] Bluetooth: hci3: command 0x0409 tx timeout [ 71.735033] Bluetooth: hci4: command 0x0409 tx timeout [ 73.461310] Bluetooth: hci0: command 0x041b tx timeout [ 73.654315] Bluetooth: hci7: command 0x041b tx timeout [ 73.782289] Bluetooth: hci4: command 0x041b tx timeout [ 73.782750] Bluetooth: hci3: command 0x041b tx timeout [ 73.783150] Bluetooth: hci5: command 0x041b tx timeout [ 73.784992] Bluetooth: hci6: command 0x041b tx timeout [ 73.785441] Bluetooth: hci1: command 0x041b tx timeout [ 74.360569] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.362800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.367802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.370143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.371441] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.372094] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.375298] Bluetooth: hci2: HCI_REQ-0x0c1a [ 75.510262] Bluetooth: hci0: command 0x040f tx timeout [ 75.701309] Bluetooth: hci7: command 0x040f tx timeout [ 75.830345] Bluetooth: hci1: command 0x040f tx timeout [ 75.832156] Bluetooth: hci6: command 0x040f tx timeout [ 75.832714] Bluetooth: hci5: command 0x040f tx timeout [ 75.834153] Bluetooth: hci3: command 0x040f tx timeout [ 75.834701] Bluetooth: hci4: command 0x040f tx timeout [ 76.406302] Bluetooth: hci2: command 0x0409 tx timeout [ 77.558330] Bluetooth: hci0: command 0x0419 tx timeout [ 77.750275] Bluetooth: hci7: command 0x0419 tx timeout [ 77.878344] Bluetooth: hci4: command 0x0419 tx timeout [ 77.878903] Bluetooth: hci3: command 0x0419 tx timeout [ 77.880767] Bluetooth: hci5: command 0x0419 tx timeout [ 77.881186] Bluetooth: hci6: command 0x0419 tx timeout [ 77.882301] Bluetooth: hci1: command 0x0419 tx timeout [ 78.454271] Bluetooth: hci2: command 0x041b tx timeout [ 80.501376] Bluetooth: hci2: command 0x040f tx timeout [ 82.549317] Bluetooth: hci2: command 0x0419 tx timeout 11:56:01 executing program 2: syz_open_procfs$userns(0x0, &(0x7f0000000000)) clone3(&(0x7f0000000200)={0x100000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x1}, 0x53) 11:56:01 executing program 2: syz_open_procfs$userns(0x0, &(0x7f0000000000)) clone3(&(0x7f0000000200)={0x100000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x1}, 0x53) 11:56:01 executing program 2: syz_open_procfs$userns(0x0, &(0x7f0000000000)) clone3(&(0x7f0000000200)={0x100000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x1}, 0x53) 11:56:01 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, &(0x7f0000000100)) 11:56:01 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, &(0x7f0000000100)) 11:56:01 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, &(0x7f0000000100)) 11:56:02 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='clear_refs\x00') pwritev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)='2', 0x1}], 0x1, 0x0, 0x0) 11:56:02 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, &(0x7f0000000100)) [ 124.523757] audit: type=1400 audit(1663156562.655:7): avc: denied { open } for pid=3910 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 124.525337] audit: type=1400 audit(1663156562.655:8): avc: denied { kernel } for pid=3910 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 124.536948] ------------[ cut here ]------------ [ 124.536968] [ 124.536971] ====================================================== [ 124.536975] WARNING: possible circular locking dependency detected [ 124.536979] 6.0.0-rc5-next-20220914 #1 Not tainted [ 124.536985] ------------------------------------------------------ [ 124.536988] syz-executor.3/3911 is trying to acquire lock: [ 124.536994] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 124.537031] [ 124.537031] but task is already holding lock: [ 124.537034] ffff88800e094020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 124.537060] [ 124.537060] which lock already depends on the new lock. [ 124.537060] [ 124.537063] [ 124.537063] the existing dependency chain (in reverse order) is: [ 124.537066] [ 124.537066] -> #3 (&ctx->lock){....}-{2:2}: [ 124.537080] _raw_spin_lock+0x2a/0x40 [ 124.537097] __perf_event_task_sched_out+0x53b/0x18d0 [ 124.537109] __schedule+0xedd/0x2470 [ 124.537120] preempt_schedule_common+0x45/0xc0 [ 124.537131] __cond_resched+0x17/0x30 [ 124.537141] __mutex_lock+0xa3/0x14d0 [ 124.537152] __do_sys_perf_event_open+0x1eec/0x32c0 [ 124.537165] do_syscall_64+0x3b/0x90 [ 124.537179] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.537196] [ 124.537196] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 124.537213] _raw_spin_lock_nested+0x30/0x40 [ 124.537228] raw_spin_rq_lock_nested+0x1e/0x30 [ 124.537241] task_fork_fair+0x63/0x4d0 [ 124.537257] sched_cgroup_fork+0x3d0/0x540 [ 124.537271] copy_process+0x4183/0x6e20 [ 124.537282] kernel_clone+0xe7/0x890 [ 124.537291] user_mode_thread+0xad/0xf0 [ 124.537301] rest_init+0x24/0x250 [ 124.537318] arch_call_rest_init+0xf/0x14 [ 124.537330] start_kernel+0x4c1/0x4e6 [ 124.537339] secondary_startup_64_no_verify+0xe0/0xeb [ 124.537353] [ 124.537353] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 124.537367] _raw_spin_lock_irqsave+0x39/0x60 [ 124.537382] try_to_wake_up+0xab/0x1920 [ 124.537395] up+0x75/0xb0 [ 124.537407] __up_console_sem+0x6e/0x80 [ 124.537422] console_unlock+0x46a/0x590 [ 124.537438] vt_ioctl+0x2822/0x2ca0 [ 124.537451] tty_ioctl+0x7c4/0x1700 [ 124.537461] __x64_sys_ioctl+0x19a/0x210 [ 124.537477] do_syscall_64+0x3b/0x90 [ 124.537490] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.537507] [ 124.537507] -> #0 ((console_sem).lock){....}-{2:2}: [ 124.537520] __lock_acquire+0x2a02/0x5e70 [ 124.537537] lock_acquire+0x1a2/0x530 [ 124.537553] _raw_spin_lock_irqsave+0x39/0x60 [ 124.537569] down_trylock+0xe/0x70 [ 124.537581] __down_trylock_console_sem+0x3b/0xd0 [ 124.537597] vprintk_emit+0x16b/0x560 [ 124.537614] vprintk+0x84/0xa0 [ 124.537630] _printk+0xba/0xf1 [ 124.537648] report_bug.cold+0x72/0xab [ 124.537661] handle_bug+0x3c/0x70 [ 124.537673] exc_invalid_op+0x14/0x50 [ 124.537687] asm_exc_invalid_op+0x16/0x20 [ 124.537703] group_sched_out.part.0+0x2c7/0x460 [ 124.537714] ctx_sched_out+0x8f1/0xc10 [ 124.537723] __perf_event_task_sched_out+0x6d0/0x18d0 [ 124.537735] __schedule+0xedd/0x2470 [ 124.537745] preempt_schedule_common+0x45/0xc0 [ 124.537756] __cond_resched+0x17/0x30 [ 124.537766] __mutex_lock+0xa3/0x14d0 [ 124.537777] __do_sys_perf_event_open+0x1eec/0x32c0 [ 124.537789] do_syscall_64+0x3b/0x90 [ 124.537803] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.537820] [ 124.537820] other info that might help us debug this: [ 124.537820] [ 124.537823] Chain exists of: [ 124.537823] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 124.537823] [ 124.537838] Possible unsafe locking scenario: [ 124.537838] [ 124.537840] CPU0 CPU1 [ 124.537842] ---- ---- [ 124.537844] lock(&ctx->lock); [ 124.537850] lock(&rq->__lock); [ 124.537856] lock(&ctx->lock); [ 124.537862] lock((console_sem).lock); [ 124.537868] [ 124.537868] *** DEADLOCK *** [ 124.537868] [ 124.537870] 2 locks held by syz-executor.3/3911: [ 124.537876] #0: ffff88806cf37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 124.537902] #1: ffff88800e094020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 124.537930] [ 124.537930] stack backtrace: [ 124.537932] CPU: 1 PID: 3911 Comm: syz-executor.3 Not tainted 6.0.0-rc5-next-20220914 #1 [ 124.537945] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 124.537953] Call Trace: [ 124.537956] [ 124.537961] dump_stack_lvl+0x8b/0xb3 [ 124.537976] check_noncircular+0x263/0x2e0 [ 124.537993] ? format_decode+0x26c/0xb50 [ 124.538008] ? print_circular_bug+0x450/0x450 [ 124.538026] ? enable_ptr_key_workfn+0x20/0x20 [ 124.538041] ? format_decode+0x26c/0xb50 [ 124.538058] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 124.538076] __lock_acquire+0x2a02/0x5e70 [ 124.538100] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 124.538119] ? __mutex_add_waiter+0x120/0x120 [ 124.538138] lock_acquire+0x1a2/0x530 [ 124.538155] ? down_trylock+0xe/0x70 [ 124.538170] ? rcu_read_unlock+0x40/0x40 [ 124.538192] ? vprintk+0x84/0xa0 [ 124.538211] _raw_spin_lock_irqsave+0x39/0x60 [ 124.538227] ? down_trylock+0xe/0x70 [ 124.538261] down_trylock+0xe/0x70 [ 124.538274] ? vprintk+0x84/0xa0 [ 124.538292] __down_trylock_console_sem+0x3b/0xd0 [ 124.538310] vprintk_emit+0x16b/0x560 [ 124.538330] vprintk+0x84/0xa0 [ 124.538348] _printk+0xba/0xf1 [ 124.538366] ? record_print_text.cold+0x16/0x16 [ 124.538390] ? report_bug.cold+0x66/0xab [ 124.538404] ? group_sched_out.part.0+0x2c7/0x460 [ 124.538416] report_bug.cold+0x72/0xab [ 124.538432] handle_bug+0x3c/0x70 [ 124.538446] exc_invalid_op+0x14/0x50 [ 124.538460] asm_exc_invalid_op+0x16/0x20 [ 124.538478] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 124.538491] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 124.538502] RSP: 0018:ffff88803d9cf978 EFLAGS: 00010006 [ 124.538512] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 124.538519] RDX: ffff88803df1b580 RSI: ffffffff81566027 RDI: 0000000000000005 [ 124.538527] RBP: ffff88803df30000 R08: 0000000000000005 R09: 0000000000000001 [ 124.538534] R10: 0000000000000000 R11: ffffffff865ac05b R12: ffff88800e094000 [ 124.538541] R13: ffff88806cf3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 124.538553] ? group_sched_out.part.0+0x2c7/0x460 [ 124.538567] ? group_sched_out.part.0+0x2c7/0x460 [ 124.538580] ctx_sched_out+0x8f1/0xc10 [ 124.538594] __perf_event_task_sched_out+0x6d0/0x18d0 [ 124.538610] ? lock_is_held_type+0xd7/0x130 [ 124.538629] ? __perf_cgroup_move+0x160/0x160 [ 124.538641] ? set_next_entity+0x304/0x550 [ 124.538659] ? update_curr+0x267/0x740 [ 124.538678] ? lock_is_held_type+0xd7/0x130 [ 124.538698] __schedule+0xedd/0x2470 [ 124.538712] ? io_schedule_timeout+0x150/0x150 [ 124.538723] ? find_held_lock+0x2c/0x110 [ 124.538740] ? lock_is_held_type+0xd7/0x130 [ 124.538758] ? __cond_resched+0x17/0x30 [ 124.538770] preempt_schedule_common+0x45/0xc0 [ 124.538783] __cond_resched+0x17/0x30 [ 124.538794] __mutex_lock+0xa3/0x14d0 [ 124.538808] ? lock_is_held_type+0xd7/0x130 [ 124.538825] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 124.538841] ? mutex_lock_io_nested+0x1310/0x1310 [ 124.538853] ? lock_release+0x3b2/0x750 [ 124.538871] ? __up_read+0x192/0x730 [ 124.538887] ? up_write+0x480/0x480 [ 124.538902] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 124.538921] __do_sys_perf_event_open+0x1eec/0x32c0 [ 124.538938] ? __up_read+0x192/0x730 [ 124.538953] ? perf_compat_ioctl+0x130/0x130 [ 124.538966] ? up_write+0x480/0x480 [ 124.538985] ? syscall_enter_from_user_mode+0x1d/0x50 [ 124.539004] ? syscall_enter_from_user_mode+0x1d/0x50 [ 124.539026] do_syscall_64+0x3b/0x90 [ 124.539040] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.539058] RIP: 0033:0x7f4834d4db19 [ 124.539067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 124.539078] RSP: 002b:00007f48322c3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 124.539089] RAX: ffffffffffffffda RBX: 00007f4834e60f60 RCX: 00007f4834d4db19 [ 124.539097] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000080 [ 124.539104] RBP: 00007f4834da7f6d R08: 0000000000000000 R09: 0000000000000000 [ 124.539111] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 124.539118] R13: 00007fff1559b06f R14: 00007f48322c3300 R15: 0000000000022000 [ 124.539133] [ 124.600072] WARNING: CPU: 1 PID: 3911 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 124.600761] Modules linked in: [ 124.601011] CPU: 1 PID: 3911 Comm: syz-executor.3 Not tainted 6.0.0-rc5-next-20220914 #1 [ 124.601596] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 124.602414] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 124.602806] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 124.604147] RSP: 0018:ffff88803d9cf978 EFLAGS: 00010006 [ 124.604558] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 124.605088] RDX: ffff88803df1b580 RSI: ffffffff81566027 RDI: 0000000000000005 [ 124.605622] RBP: ffff88803df30000 R08: 0000000000000005 R09: 0000000000000001 [ 124.606174] R10: 0000000000000000 R11: ffffffff865ac05b R12: ffff88800e094000 [ 124.606720] R13: ffff88806cf3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 124.607253] FS: 00007f48322c3700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 124.607857] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.608308] CR2: 00007f51318628e0 CR3: 00000000175be000 CR4: 0000000000350ee0 [ 124.608845] Call Trace: [ 124.609042] [ 124.609220] ctx_sched_out+0x8f1/0xc10 [ 124.609517] __perf_event_task_sched_out+0x6d0/0x18d0 [ 124.609916] ? lock_is_held_type+0xd7/0x130 [ 124.610249] ? __perf_cgroup_move+0x160/0x160 [ 124.610594] ? set_next_entity+0x304/0x550 [ 124.610937] ? update_curr+0x267/0x740 [ 124.611260] ? lock_is_held_type+0xd7/0x130 [ 124.611590] __schedule+0xedd/0x2470 [ 124.611882] ? io_schedule_timeout+0x150/0x150 [ 124.612247] ? find_held_lock+0x2c/0x110 [ 124.612571] ? lock_is_held_type+0xd7/0x130 [ 124.612903] ? __cond_resched+0x17/0x30 [ 124.613212] preempt_schedule_common+0x45/0xc0 [ 124.613572] __cond_resched+0x17/0x30 [ 124.613866] __mutex_lock+0xa3/0x14d0 [ 124.614162] ? lock_is_held_type+0xd7/0x130 [ 124.614507] ? __do_sys_perf_event_open+0x1eec/0x32c0 [ 124.614911] ? mutex_lock_io_nested+0x1310/0x1310 [ 124.615276] ? lock_release+0x3b2/0x750 [ 124.615584] ? __up_read+0x192/0x730 [ 124.615878] ? up_write+0x480/0x480 [ 124.616162] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 124.616562] __do_sys_perf_event_open+0x1eec/0x32c0 [ 124.616949] ? __up_read+0x192/0x730 [ 124.617247] ? perf_compat_ioctl+0x130/0x130 [ 124.617589] ? up_write+0x480/0x480 [ 124.617883] ? syscall_enter_from_user_mode+0x1d/0x50 [ 124.618295] ? syscall_enter_from_user_mode+0x1d/0x50 [ 124.618701] do_syscall_64+0x3b/0x90 [ 124.619002] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.619393] RIP: 0033:0x7f4834d4db19 [ 124.619681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 124.621026] RSP: 002b:00007f48322c3188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 124.621593] RAX: ffffffffffffffda RBX: 00007f4834e60f60 RCX: 00007f4834d4db19 [ 124.622135] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000080 [ 124.622684] RBP: 00007f4834da7f6d R08: 0000000000000000 R09: 0000000000000000 [ 124.623214] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 124.623764] R13: 00007fff1559b06f R14: 00007f48322c3300 R15: 0000000000022000 [ 124.624295] [ 124.624474] irq event stamp: 622 [ 124.624726] hardirqs last enabled at (621): [] _raw_spin_unlock_irqrestore+0x28/0x60 [ 124.625433] hardirqs last disabled at (622): [] __schedule+0x1225/0x2470 [ 124.626049] softirqs last enabled at (454): [] __irq_exit_rcu+0x11b/0x180 [ 124.626709] softirqs last disabled at (435): [] __irq_exit_rcu+0x11b/0x180 [ 124.627363] ---[ end trace 0000000000000000 ]--- 11:56:04 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000080)='./file0\x00') 11:56:04 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='clear_refs\x00') pwritev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)='2', 0x1}], 0x1, 0x0, 0x0) 11:56:04 executing program 2: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() 11:56:04 executing program 7: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) lsetxattr$security_selinux(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:dpkg_exec_t:s0\x00', 0x21, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') 11:56:04 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4642, 0x0) 11:56:04 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000140)=""/230) 11:56:04 executing program 5: r0 = syz_io_uring_setup(0x146c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000001c0), 0x1) 11:56:04 executing program 4: prlimit64(0x0, 0x7, &(0x7f0000000080)={0x4, 0x6}, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0x1, 0x80000001}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) syz_io_uring_setup(0x55c6, &(0x7f0000000200), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x12100}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f) pidfd_open(0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000300)={0x6, 0x5}, 0x0) epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0x8) openat(r0, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14) r4 = fork() r5 = fork() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x7}) 11:56:04 executing program 5: r0 = syz_io_uring_setup(0x146c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000001c0), 0x1) 11:56:04 executing program 7: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) lsetxattr$security_selinux(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:dpkg_exec_t:s0\x00', 0x21, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') 11:56:04 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4642, 0x0) 11:56:04 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='clear_refs\x00') pwritev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)='2', 0x1}], 0x1, 0x0, 0x0) 11:56:04 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000080)='./file0\x00') 11:56:04 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000140)=""/230) 11:56:04 executing program 2: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() 11:56:04 executing program 5: r0 = syz_io_uring_setup(0x146c, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000001c0), 0x1) 11:56:04 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4642, 0x0) 11:56:04 executing program 1: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() 11:56:04 executing program 4: prlimit64(0x0, 0x7, &(0x7f0000000080)={0x4, 0x6}, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0x1, 0x80000001}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) syz_io_uring_setup(0x55c6, &(0x7f0000000200), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x12100}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f) pidfd_open(0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000300)={0x6, 0x5}, 0x0) epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0x8) openat(r0, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14) r4 = fork() r5 = fork() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x7}) 11:56:04 executing program 7: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) lsetxattr$security_selinux(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:dpkg_exec_t:s0\x00', 0x21, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') 11:56:04 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) fcntl$setlease(r0, 0x400, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000080)='./file0\x00') 11:56:04 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000140)=""/230) 11:56:04 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000080)={0x4, 0x6}, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0x1, 0x80000001}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) syz_io_uring_setup(0x55c6, &(0x7f0000000200), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x12100}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f) pidfd_open(0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000300)={0x6, 0x5}, 0x0) epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0x8) openat(r0, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14) r4 = fork() r5 = fork() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x7}) 11:56:04 executing program 7: prlimit64(0x0, 0x7, &(0x7f0000000080)={0x4, 0x6}, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0x1, 0x80000001}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) syz_io_uring_setup(0x55c6, &(0x7f0000000200), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x12100}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f) pidfd_open(0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000300)={0x6, 0x5}, 0x0) epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0x8) openat(r0, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14) r4 = fork() r5 = fork() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x7}) 11:56:04 executing program 5: prlimit64(0x0, 0x7, &(0x7f0000000080)={0x4, 0x6}, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0x1, 0x80000001}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) syz_io_uring_setup(0x55c6, &(0x7f0000000200), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x12100}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f) pidfd_open(0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000300)={0x6, 0x5}, 0x0) epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0x8) openat(r0, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14) r4 = fork() r5 = fork() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x7}) 11:56:04 executing program 2: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() 11:56:04 executing program 1: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() 11:56:04 executing program 4: prlimit64(0x0, 0x7, &(0x7f0000000080)={0x4, 0x6}, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0x1, 0x80000001}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) syz_io_uring_setup(0x55c6, &(0x7f0000000200), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x12100}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f) pidfd_open(0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000300)={0x6, 0x5}, 0x0) epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0x8) openat(r0, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14) r4 = fork() r5 = fork() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x7}) 11:56:04 executing program 6: prlimit64(0x0, 0x7, &(0x7f0000000080)={0x4, 0x6}, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0x1, 0x80000001}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) syz_io_uring_setup(0x55c6, &(0x7f0000000200), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x12100}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f) pidfd_open(0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000300)={0x6, 0x5}, 0x0) epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0x8) openat(r0, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14) r4 = fork() r5 = fork() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x7}) 11:56:04 executing program 3: prlimit64(0x0, 0x7, &(0x7f0000000080)={0x4, 0x6}, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0x1, 0x80000001}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) syz_io_uring_setup(0x55c6, &(0x7f0000000200), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x12100}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f) pidfd_open(0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000300)={0x6, 0x5}, 0x0) epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0x8) openat(r0, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14) r4 = fork() r5 = fork() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x7}) 11:56:04 executing program 2: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() 11:56:04 executing program 1: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) fork() 11:56:04 executing program 7: prlimit64(0x0, 0x7, &(0x7f0000000080)={0x4, 0x6}, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0x1, 0x80000001}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) syz_io_uring_setup(0x55c6, &(0x7f0000000200), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x12100}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f) pidfd_open(0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000300)={0x6, 0x5}, 0x0) epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0x8) openat(r0, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14) r4 = fork() r5 = fork() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x7}) 11:56:04 executing program 5: prlimit64(0x0, 0x7, &(0x7f0000000080)={0x4, 0x6}, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0x1, 0x80000001}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) syz_io_uring_setup(0x55c6, &(0x7f0000000200), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x12100}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f) pidfd_open(0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000300)={0x6, 0x5}, 0x0) epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0x8) openat(r0, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14) r4 = fork() r5 = fork() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x7}) 11:56:04 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000080)={0x4, 0x6}, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0x1, 0x80000001}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) syz_io_uring_setup(0x55c6, &(0x7f0000000200), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x12100}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f) pidfd_open(0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000300)={0x6, 0x5}, 0x0) epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0x8) openat(r0, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14) r4 = fork() r5 = fork() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x7}) 11:56:04 executing program 6: prlimit64(0x0, 0x7, &(0x7f0000000080)={0x4, 0x6}, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0x1, 0x80000001}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) syz_io_uring_setup(0x55c6, &(0x7f0000000200), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x12100}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f) pidfd_open(0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000300)={0x6, 0x5}, 0x0) epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0x8) openat(r0, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14) r4 = fork() r5 = fork() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x7}) 11:56:04 executing program 3: prlimit64(0x0, 0x7, &(0x7f0000000080)={0x4, 0x6}, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0x1, 0x80000001}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) syz_io_uring_setup(0x55c6, &(0x7f0000000200), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x12100}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f) pidfd_open(0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000300)={0x6, 0x5}, 0x0) epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0x8) openat(r0, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14) r4 = fork() r5 = fork() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x7}) 11:56:04 executing program 2: prlimit64(0x0, 0x7, &(0x7f0000000080)={0x4, 0x6}, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0x1, 0x80000001}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) syz_io_uring_setup(0x55c6, &(0x7f0000000200), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x12100}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f) pidfd_open(0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000300)={0x6, 0x5}, 0x0) epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0x8) openat(r0, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14) r4 = fork() r5 = fork() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x7}) 11:56:04 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0xfffffffffffbfffa}) [ 126.681983] loop1: detected capacity change from 0 to 40 11:56:04 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = inotify_init() fcntl$setstatus(r1, 0x4, 0x2800) close_range(r0, 0xffffffffffffffff, 0x0) 11:56:04 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0xfffffffffffbfffa}) 11:56:04 executing program 7: prlimit64(0x0, 0x7, &(0x7f0000000080)={0x4, 0x6}, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0x1, 0x80000001}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) syz_io_uring_setup(0x55c6, &(0x7f0000000200), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x12100}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f) pidfd_open(0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000300)={0x6, 0x5}, 0x0) epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0x8) openat(r0, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14) r4 = fork() r5 = fork() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x7}) 11:56:04 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = inotify_init() fcntl$setstatus(r1, 0x4, 0x2800) close_range(r0, 0xffffffffffffffff, 0x0) [ 126.792923] loop1: detected capacity change from 0 to 40 11:56:04 executing program 0: prlimit64(0x0, 0x7, &(0x7f0000000080)={0x4, 0x6}, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0x1, 0x80000001}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) syz_io_uring_setup(0x55c6, &(0x7f0000000200), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x12100}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f) pidfd_open(0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000300)={0x6, 0x5}, 0x0) epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0x8) openat(r0, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14) r4 = fork() r5 = fork() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x7}) 11:56:05 executing program 5: prlimit64(0x0, 0x7, &(0x7f0000000080)={0x4, 0x6}, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0x1, 0x80000001}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) syz_io_uring_setup(0x55c6, &(0x7f0000000200), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x12100}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f) pidfd_open(0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000300)={0x6, 0x5}, 0x0) epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0x8) openat(r0, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14) r4 = fork() r5 = fork() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x7}) 11:56:05 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = inotify_init() fcntl$setstatus(r1, 0x4, 0x2800) close_range(r0, 0xffffffffffffffff, 0x0) 11:56:05 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r1, 0x87d27e71721737b5, 0x0, 0x0, {{0x5}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) 11:56:05 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0xfffffffffffbfffa}) [ 126.912553] loop1: detected capacity change from 0 to 40 11:56:05 executing program 3: prlimit64(0x0, 0x7, &(0x7f0000000080)={0x4, 0x6}, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0x1, 0x80000001}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) syz_io_uring_setup(0x55c6, &(0x7f0000000200), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x12100}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f) pidfd_open(0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000300)={0x6, 0x5}, 0x0) epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0x8) openat(r0, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14) r4 = fork() r5 = fork() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x7}) 11:56:05 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = inotify_init() fcntl$setstatus(r1, 0x4, 0x2800) close_range(r0, 0xffffffffffffffff, 0x0) 11:56:05 executing program 6: prlimit64(0x0, 0x7, &(0x7f0000000080)={0x4, 0x6}, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0x1, 0x80000001}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) syz_io_uring_setup(0x55c6, &(0x7f0000000200), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x12100}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f) pidfd_open(0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000300)={0x6, 0x5}, 0x0) epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0x8) openat(r0, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14) r4 = fork() r5 = fork() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x7}) 11:56:05 executing program 2: prlimit64(0x0, 0x7, &(0x7f0000000080)={0x4, 0x6}, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0x1, 0x80000001}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) syz_io_uring_setup(0x55c6, &(0x7f0000000200), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x12100}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f) pidfd_open(0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000300)={0x6, 0x5}, 0x0) epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0x8) openat(r0, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14) r4 = fork() r5 = fork() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x7}) 11:56:05 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = inotify_init() fcntl$setstatus(r1, 0x4, 0x2800) close_range(r0, 0xffffffffffffffff, 0x0) 11:56:05 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0xfffffffffffbfffa}) 11:56:05 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r1, 0x87d27e71721737b5, 0x0, 0x0, {{0x5}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) 11:56:05 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = inotify_init() fcntl$setstatus(r1, 0x4, 0x2800) close_range(r0, 0xffffffffffffffff, 0x0) [ 127.027509] loop1: detected capacity change from 0 to 40 11:56:05 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r1, 0x87d27e71721737b5, 0x0, 0x0, {{0x5}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) 11:56:05 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = inotify_init() fcntl$setstatus(r1, 0x4, 0x2800) close_range(r0, 0xffffffffffffffff, 0x0) 11:56:05 executing program 2: prlimit64(0x0, 0x7, &(0x7f0000000080)={0x4, 0x6}, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0x1, 0x80000001}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x0) syz_io_uring_setup(0x55c6, &(0x7f0000000200), &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x12100}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f) pidfd_open(0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000300)={0x6, 0x5}, 0x0) epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000140)={[0x1ff]}, 0x8) openat(r0, &(0x7f0000000200)='./file0\x00', 0x400800, 0x14) r4 = fork() r5 = fork() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x7}) 11:56:05 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r1, 0x87d27e71721737b5, 0x0, 0x0, {{0x5}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) 11:56:05 executing program 1: r0 = creat(&(0x7f0000000780)='./file3\x00', 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(r0, 0x1, 0x0) 11:56:05 executing program 6: r0 = syz_io_uring_setup(0x4efe, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x12) io_uring_enter(r0, 0x6c64, 0x0, 0x0, 0x0, 0x0) 11:56:05 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r1, 0x87d27e71721737b5, 0x0, 0x0, {{0x5}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) 11:56:05 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 11:56:05 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1) perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') 11:56:05 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r0, &(0x7f0000002640)=[{&(0x7f0000000140)=""/210, 0xd2}], 0x1, 0xfff, 0x0) [ 127.199753] audit: type=1400 audit(1663156565.331:9): avc: denied { write } for pid=4146 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 11:56:05 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r1, 0x87d27e71721737b5, 0x0, 0x0, {{0x5}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) 11:56:05 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r1, 0x87d27e71721737b5, 0x0, 0x0, {{0x5}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) 11:56:05 executing program 1: r0 = creat(&(0x7f0000000780)='./file3\x00', 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(r0, 0x1, 0x0) 11:56:05 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r0, &(0x7f0000002640)=[{&(0x7f0000000140)=""/210, 0xd2}], 0x1, 0xfff, 0x0) 11:56:05 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 11:56:05 executing program 6: r0 = syz_io_uring_setup(0x4efe, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x12) io_uring_enter(r0, 0x6c64, 0x0, 0x0, 0x0, 0x0) 11:56:05 executing program 1: r0 = creat(&(0x7f0000000780)='./file3\x00', 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(r0, 0x1, 0x0) 11:56:05 executing program 2: setgroups(0x2, &(0x7f0000000800)=[0x0, 0x0]) socket$inet_icmp(0x2, 0x2, 0x1) 11:56:05 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 11:56:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000003fc0)={0x28, 0x65, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x28}], 0x1}, 0x0) 11:56:05 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001700)=ANY=[@ANYBLOB="140000001a00010212c91e1bbeb3f02a250800ff085e762ac65f7d91053f295d4ffc20d65892ef0ad88a5cbe18069dc794e196dbfb1af3e0dd6a380e71c4fcaceb3843a0a27d26af18e26c51db155af69e00000000000000000000000000000000000000000002fc5fc9bba02dfbb107c52ec2325f2bb6cf1e32f2d9dc86a63c732fddd995cc63fc87c6c3dc8ca9f066c97add14ef81e588ce52a44dacf7986889705a46c9f34a91952a9e5100000000000000"], 0x28}}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 11:56:05 executing program 6: r0 = syz_io_uring_setup(0x4efe, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x12) io_uring_enter(r0, 0x6c64, 0x0, 0x0, 0x0, 0x0) 11:56:05 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r0, &(0x7f0000002640)=[{&(0x7f0000000140)=""/210, 0xd2}], 0x1, 0xfff, 0x0) 11:56:05 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1) perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') [ 127.398661] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 11:56:05 executing program 1: r0 = creat(&(0x7f0000000780)='./file3\x00', 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(r0, 0x1, 0x0) 11:56:05 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1) perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') 11:56:05 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r0, &(0x7f0000002640)=[{&(0x7f0000000140)=""/210, 0xd2}], 0x1, 0xfff, 0x0) 11:56:05 executing program 2: setgroups(0x2, &(0x7f0000000800)=[0x0, 0x0]) socket$inet_icmp(0x2, 0x2, 0x1) 11:56:05 executing program 6: r0 = syz_io_uring_setup(0x4efe, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9829fe3) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x12) io_uring_enter(r0, 0x6c64, 0x0, 0x0, 0x0, 0x0) 11:56:05 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 11:56:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000003fc0)={0x28, 0x65, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x28}], 0x1}, 0x0) [ 127.489096] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 11:56:05 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1) perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') 11:56:05 executing program 3: setgroups(0x2, &(0x7f0000000800)=[0x0, 0x0]) socket$inet_icmp(0x2, 0x2, 0x1) 11:56:05 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1) perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') 11:56:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000003fc0)={0x28, 0x65, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x28}], 0x1}, 0x0) 11:56:05 executing program 2: setgroups(0x2, &(0x7f0000000800)=[0x0, 0x0]) socket$inet_icmp(0x2, 0x2, 0x1) 11:56:05 executing program 3: setgroups(0x2, &(0x7f0000000800)=[0x0, 0x0]) socket$inet_icmp(0x2, 0x2, 0x1) 11:56:05 executing program 6: r0 = gettid() r1 = gettid() kcmp(r1, r0, 0xca60f8548e3b1cf7, 0xffffffffffffffff, 0xffffffffffffffff) 11:56:05 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1) perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') 11:56:05 executing program 7: syz_io_uring_setup(0x78e4, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) 11:56:05 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/229) [ 127.676702] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 11:56:05 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/229) 11:56:05 executing program 3: setgroups(0x2, &(0x7f0000000800)=[0x0, 0x0]) socket$inet_icmp(0x2, 0x2, 0x1) 11:56:05 executing program 6: r0 = gettid() r1 = gettid() kcmp(r1, r0, 0xca60f8548e3b1cf7, 0xffffffffffffffff, 0xffffffffffffffff) 11:56:05 executing program 2: setgroups(0x2, &(0x7f0000000800)=[0x0, 0x0]) socket$inet_icmp(0x2, 0x2, 0x1) 11:56:05 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x17e}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)={0x17e}) 11:56:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a940)=[{&(0x7f0000003fc0)={0x28, 0x65, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x28}], 0x1}, 0x0) 11:56:05 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000001580)={0x3, 0x0, 0x0, 0x0, 0x0, "2fc9b73f21403a0b"}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001440), 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x1) perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x23, &(0x7f0000000180)=0x10001) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') 11:56:05 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x20000, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r0, 0x0, r1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f80000200040000300000000", 0x21}, {0x0, 0x0, 0x10000}], 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 11:56:05 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/229) [ 127.822975] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 127.877230] hrtimer: interrupt took 20238 ns 11:56:06 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/229) 11:56:06 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x17e}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)={0x17e}) [ 127.928753] loop5: detected capacity change from 0 to 256 11:56:06 executing program 6: r0 = gettid() r1 = gettid() kcmp(r1, r0, 0xca60f8548e3b1cf7, 0xffffffffffffffff, 0xffffffffffffffff) 11:56:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x17e}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)={0x17e}) 11:56:06 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x20000, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r0, 0x0, r1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f80000200040000300000000", 0x21}, {0x0, 0x0, 0x10000}], 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 11:56:06 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x20000, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r0, 0x0, r1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f80000200040000300000000", 0x21}, {0x0, 0x0, 0x10000}], 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 11:56:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x17e}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)={0x17e}) 11:56:06 executing program 6: r0 = gettid() r1 = gettid() kcmp(r1, r0, 0xca60f8548e3b1cf7, 0xffffffffffffffff, 0xffffffffffffffff) 11:56:06 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x17e}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)={0x17e}) 11:56:06 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x20000, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r0, 0x0, r1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f80000200040000300000000", 0x21}, {0x0, 0x0, 0x10000}], 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 11:56:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r1, r2) keyctl$read(0xb, r1, &(0x7f0000000300)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, 0x0) 11:56:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r1, 0x0) keyctl$read(0xb, r1, &(0x7f0000000300)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) clone3(&(0x7f0000000440)={0x80000800, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100), {0x37}, &(0x7f0000000180)=""/79, 0x4f, &(0x7f0000004c80)=""/102400, &(0x7f0000000380)=[r2, 0x0, r2], 0x3}, 0x58) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0xa000, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x2, 0x2, 0x1, 0x3, 0x0, 0xff, 0x8100, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x5}, 0x4c6, 0x9, 0x40, 0x0, 0x7fff, 0x10001, 0xfffd, 0x0, 0x3, 0x0, 0x5}, r2, 0x3, r3, 0xa) [ 128.067913] loop3: detected capacity change from 0 to 256 [ 128.073335] loop1: detected capacity change from 0 to 256 [ 128.078192] loop5: detected capacity change from 0 to 256 11:56:06 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x17e}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)={0x17e}) 11:56:06 executing program 6: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x81, 0x6, 0x0, 0x0, 0x6394, 0x12002, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9459, 0x9}, 0x4c00c, 0xfffffffffffffff9, 0xff, 0x5, 0x3, 0x6, 0x20, 0x0, 0x6, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x20, 0xbd, 0x4, 0x7, 0x0, 0x3, 0x802a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7463, 0x4}, 0x8050, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000240)) getsockname$unix(r2, &(0x7f0000000400)=@abs, &(0x7f0000000180)=0x6e) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1) openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) finit_module(r4, 0x0, 0x0) [ 128.163777] audit: type=1400 audit(1663156566.294:10): avc: denied { module_load } for pid=4275 comm="syz-executor.6" path="/syz-executor.6" dev="sda" ino=15936 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=system permissive=1 [ 128.166979] Invalid ELF header type: 3 != 1 [ 128.188821] Invalid ELF header type: 3 != 1 11:56:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x17e}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)={0x17e}) 11:56:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r1, r2) keyctl$read(0xb, r1, &(0x7f0000000300)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, 0x0) 11:56:06 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x20000, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r0, 0x0, r1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f80000200040000300000000", 0x21}, {0x0, 0x0, 0x10000}], 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 11:56:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r1, 0x0) keyctl$read(0xb, r1, &(0x7f0000000300)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) clone3(&(0x7f0000000440)={0x80000800, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100), {0x37}, &(0x7f0000000180)=""/79, 0x4f, &(0x7f0000004c80)=""/102400, &(0x7f0000000380)=[r2, 0x0, r2], 0x3}, 0x58) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0xa000, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x2, 0x2, 0x1, 0x3, 0x0, 0xff, 0x8100, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x5}, 0x4c6, 0x9, 0x40, 0x0, 0x7fff, 0x10001, 0xfffd, 0x0, 0x3, 0x0, 0x5}, r2, 0x3, r3, 0xa) 11:56:06 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x20000, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r0, 0x0, r1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f80000200040000300000000", 0x21}, {0x0, 0x0, 0x10000}], 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 11:56:06 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x20000, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r0, 0x0, r1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f80000200040000300000000", 0x21}, {0x0, 0x0, 0x10000}], 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 11:56:06 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r1, 0x0) keyctl$read(0xb, r1, &(0x7f0000000300)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) clone3(&(0x7f0000000440)={0x80000800, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100), {0x37}, &(0x7f0000000180)=""/79, 0x4f, &(0x7f0000004c80)=""/102400, &(0x7f0000000380)=[r2, 0x0, r2], 0x3}, 0x58) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0xa000, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x2, 0x2, 0x1, 0x3, 0x0, 0xff, 0x8100, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x5}, 0x4c6, 0x9, 0x40, 0x0, 0x7fff, 0x10001, 0xfffd, 0x0, 0x3, 0x0, 0x5}, r2, 0x3, r3, 0xa) 11:56:06 executing program 6: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x81, 0x6, 0x0, 0x0, 0x6394, 0x12002, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9459, 0x9}, 0x4c00c, 0xfffffffffffffff9, 0xff, 0x5, 0x3, 0x6, 0x20, 0x0, 0x6, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x20, 0xbd, 0x4, 0x7, 0x0, 0x3, 0x802a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7463, 0x4}, 0x8050, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000240)) getsockname$unix(r2, &(0x7f0000000400)=@abs, &(0x7f0000000180)=0x6e) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1) openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) finit_module(r4, 0x0, 0x0) [ 128.301157] loop1: detected capacity change from 0 to 256 [ 128.304287] loop5: detected capacity change from 0 to 256 [ 128.309836] Invalid ELF header type: 3 != 1 [ 128.310732] loop3: detected capacity change from 0 to 256 11:56:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r1, 0x0) keyctl$read(0xb, r1, &(0x7f0000000300)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) clone3(&(0x7f0000000440)={0x80000800, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100), {0x37}, &(0x7f0000000180)=""/79, 0x4f, &(0x7f0000004c80)=""/102400, &(0x7f0000000380)=[r2, 0x0, r2], 0x3}, 0x58) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0xa000, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x2, 0x2, 0x1, 0x3, 0x0, 0xff, 0x8100, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x5}, 0x4c6, 0x9, 0x40, 0x0, 0x7fff, 0x10001, 0xfffd, 0x0, 0x3, 0x0, 0x5}, r2, 0x3, r3, 0xa) 11:56:06 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x20000, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r0, 0x0, r1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f80000200040000300000000", 0x21}, {0x0, 0x0, 0x10000}], 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 11:56:06 executing program 6: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x81, 0x6, 0x0, 0x0, 0x6394, 0x12002, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9459, 0x9}, 0x4c00c, 0xfffffffffffffff9, 0xff, 0x5, 0x3, 0x6, 0x20, 0x0, 0x6, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x20, 0xbd, 0x4, 0x7, 0x0, 0x3, 0x802a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7463, 0x4}, 0x8050, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000240)) getsockname$unix(r2, &(0x7f0000000400)=@abs, &(0x7f0000000180)=0x6e) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1) openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) finit_module(r4, 0x0, 0x0) [ 128.422817] loop3: detected capacity change from 0 to 256 [ 128.515074] Invalid ELF header type: 3 != 1 11:56:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r1, 0x0) keyctl$read(0xb, r1, &(0x7f0000000300)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) clone3(&(0x7f0000000440)={0x80000800, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100), {0x37}, &(0x7f0000000180)=""/79, 0x4f, &(0x7f0000004c80)=""/102400, &(0x7f0000000380)=[r2, 0x0, r2], 0x3}, 0x58) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0xa000, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x2, 0x2, 0x1, 0x3, 0x0, 0xff, 0x8100, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x5}, 0x4c6, 0x9, 0x40, 0x0, 0x7fff, 0x10001, 0xfffd, 0x0, 0x3, 0x0, 0x5}, r2, 0x3, r3, 0xa) 11:56:06 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x81, 0x6, 0x0, 0x0, 0x6394, 0x12002, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9459, 0x9}, 0x4c00c, 0xfffffffffffffff9, 0xff, 0x5, 0x3, 0x6, 0x20, 0x0, 0x6, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x20, 0xbd, 0x4, 0x7, 0x0, 0x3, 0x802a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7463, 0x4}, 0x8050, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000240)) getsockname$unix(r2, &(0x7f0000000400)=@abs, &(0x7f0000000180)=0x6e) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1) openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) finit_module(r4, 0x0, 0x0) 11:56:06 executing program 0: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x81, 0x6, 0x0, 0x0, 0x6394, 0x12002, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9459, 0x9}, 0x4c00c, 0xfffffffffffffff9, 0xff, 0x5, 0x3, 0x6, 0x20, 0x0, 0x6, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x20, 0xbd, 0x4, 0x7, 0x0, 0x3, 0x802a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7463, 0x4}, 0x8050, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000240)) getsockname$unix(r2, &(0x7f0000000400)=@abs, &(0x7f0000000180)=0x6e) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1) openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) finit_module(r4, 0x0, 0x0) 11:56:06 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x20000, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r0, 0x0, r1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f80000200040000300000000", 0x21}, {0x0, 0x0, 0x10000}], 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 11:56:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r1, r2) keyctl$read(0xb, r1, &(0x7f0000000300)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, 0x0) 11:56:06 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r1, 0x0) keyctl$read(0xb, r1, &(0x7f0000000300)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) clone3(&(0x7f0000000440)={0x80000800, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100), {0x37}, &(0x7f0000000180)=""/79, 0x4f, &(0x7f0000004c80)=""/102400, &(0x7f0000000380)=[r2, 0x0, r2], 0x3}, 0x58) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0xa000, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x2, 0x2, 0x1, 0x3, 0x0, 0xff, 0x8100, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x5}, 0x4c6, 0x9, 0x40, 0x0, 0x7fff, 0x10001, 0xfffd, 0x0, 0x3, 0x0, 0x5}, r2, 0x3, r3, 0xa) 11:56:06 executing program 6: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x81, 0x6, 0x0, 0x0, 0x6394, 0x12002, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9459, 0x9}, 0x4c00c, 0xfffffffffffffff9, 0xff, 0x5, 0x3, 0x6, 0x20, 0x0, 0x6, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x20, 0xbd, 0x4, 0x7, 0x0, 0x3, 0x802a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7463, 0x4}, 0x8050, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000240)) getsockname$unix(r2, &(0x7f0000000400)=@abs, &(0x7f0000000180)=0x6e) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1) openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) finit_module(r4, 0x0, 0x0) 11:56:06 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x20000, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r0, 0x0, r1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f80000200040000300000000", 0x21}, {0x0, 0x0, 0x10000}], 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) [ 128.626078] loop5: detected capacity change from 0 to 256 11:56:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r1, r2) keyctl$read(0xb, r1, &(0x7f0000000300)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, 0x0) [ 128.680351] Invalid ELF header type: 3 != 1 [ 128.699649] Invalid ELF header type: 3 != 1 [ 128.709560] loop1: detected capacity change from 0 to 256 11:56:06 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="fd", 0x1, r0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r1, 0x0) keyctl$read(0xb, r1, &(0x7f0000000300)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) clone3(&(0x7f0000000440)={0x80000800, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100), {0x37}, &(0x7f0000000180)=""/79, 0x4f, &(0x7f0000004c80)=""/102400, &(0x7f0000000380)=[r2, 0x0, r2], 0x3}, 0x58) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0xa000, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x2, 0x2, 0x1, 0x3, 0x0, 0xff, 0x8100, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x5}, 0x4c6, 0x9, 0x40, 0x0, 0x7fff, 0x10001, 0xfffd, 0x0, 0x3, 0x0, 0x5}, r2, 0x3, r3, 0xa) [ 128.790671] Invalid ELF header type: 3 != 1 11:56:06 executing program 3: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x81, 0x6, 0x0, 0x0, 0x6394, 0x12002, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9459, 0x9}, 0x4c00c, 0xfffffffffffffff9, 0xff, 0x5, 0x3, 0x6, 0x20, 0x0, 0x6, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x20, 0xbd, 0x4, 0x7, 0x0, 0x3, 0x802a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7463, 0x4}, 0x8050, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000240)) getsockname$unix(r2, &(0x7f0000000400)=@abs, &(0x7f0000000180)=0x6e) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1) openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) finit_module(r4, 0x0, 0x0) [ 128.959715] Invalid ELF header type: 3 != 1 11:56:07 executing program 6: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x81, 0x6, 0x0, 0x0, 0x6394, 0x12002, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9459, 0x9}, 0x4c00c, 0xfffffffffffffff9, 0xff, 0x5, 0x3, 0x6, 0x20, 0x0, 0x6, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x20, 0xbd, 0x4, 0x7, 0x0, 0x3, 0x802a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7463, 0x4}, 0x8050, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000240)) getsockname$unix(r2, &(0x7f0000000400)=@abs, &(0x7f0000000180)=0x6e) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1) openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) finit_module(r4, 0x0, 0x0) 11:56:07 executing program 5: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x81, 0x6, 0x0, 0x0, 0x6394, 0x12002, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9459, 0x9}, 0x4c00c, 0xfffffffffffffff9, 0xff, 0x5, 0x3, 0x6, 0x20, 0x0, 0x6, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x20, 0xbd, 0x4, 0x7, 0x0, 0x3, 0x802a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7463, 0x4}, 0x8050, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000240)) getsockname$unix(r2, &(0x7f0000000400)=@abs, &(0x7f0000000180)=0x6e) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1) openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) finit_module(r4, 0x0, 0x0) 11:56:07 executing program 2: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x81, 0x6, 0x0, 0x0, 0x6394, 0x12002, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9459, 0x9}, 0x4c00c, 0xfffffffffffffff9, 0xff, 0x5, 0x3, 0x6, 0x20, 0x0, 0x6, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x20, 0xbd, 0x4, 0x7, 0x0, 0x3, 0x802a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7463, 0x4}, 0x8050, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000240)) getsockname$unix(r2, &(0x7f0000000400)=@abs, &(0x7f0000000180)=0x6e) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1) openat(0xffffffffffffffff, 0x0, 0x400000, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) finit_module(r4, 0x0, 0x0) 11:56:07 executing program 4: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa96}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x81, 0x6, 0x0, 0x0, 0x6394, 0x12002, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x9459, 0x9}, 0x4c00c, 0xfffffffffffffff9, 0xff, 0x5, 0x3, 0x6, 0x20, 0x0, 0x6, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x20, 0xbd, 0x4, 0x7, 0x0, 0x3, 0x802a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7463, 0x4}, 0x8050, 0x9, 0x2, 0x8, 0x8, 0x80, 0x3, 0x0, 0x3, 0x0, 0x80000000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)='P', 0x1}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll VM DIAGNOSIS: 11:56:02 Registers: info registers vcpu 0 RAX=3cc4c0420c089200 RBX=00007f70b6a70510 RCX=00000000000001c2 RDX=0000000000001003 RSI=0000000000582008 RDI=00000000ed2c70af RBP=0000000000000002 RSP=00007ffc16caa330 R8 =00007ffc16caa470 R9 =00007f70b6aa2440 R10=00007f70b674d6f0 R11=0000000000000007 R12=0000000000000007 R13=00007f70b6a71a90 R14=0000000000000004 R15=0000000000000000 RIP=00007f70b6a800b8 RFL=00000202 [-------] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f70b6566540 00000000 00000000 GS =0000 0000000000000000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f70b674e3f0 CR3=000000003cdf4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 00ff000000000000 0000000000ff0000 YMM01=0000000000000000 0000000000000000 ff00ffffffffffff ffffffffff00ffff YMM02=0000000000000000 0000000000000000 00362e322e325f43 42494c4700352e32 YMM03=0000000000000000 0000000000000000 0000000000000000 0000004700352e32 YMM04=0000000000000000 0000000000000000 4342494c4700362e 322e325f4342494c YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=000000000000007d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b24f1 RDI=ffffffff87641b60 RBP=ffffffff87641b20 RSP=ffff88803d9cf3c8 R8 =0000000000000001 R9 =000000000000000a R10=000000000000007d R11=0000000000000001 R12=000000000000007d R13=ffffffff87641b20 R14=0000000000000010 R15=ffffffff822b24e0 RIP=ffffffff822b2549 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f48322c3700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f51318628e0 CR3=00000000175be000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 00524f5252450040 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000