syzkaller login: [ 42.755523] sshd (250) used greatest stack depth: 24776 bytes left Warning: Permanently added '[localhost]:58275' (ECDSA) to the list of known hosts. 2022/09/14 14:00:39 fuzzer started 2022/09/14 14:00:40 dialing manager at localhost:33849 [ 44.073737] cgroup: Unknown subsys name 'net' [ 44.161331] cgroup: Unknown subsys name 'rlimit' 2022/09/14 14:00:54 syscalls: 2215 2022/09/14 14:00:54 code coverage: enabled 2022/09/14 14:00:54 comparison tracing: enabled 2022/09/14 14:00:54 extra coverage: enabled 2022/09/14 14:00:54 setuid sandbox: enabled 2022/09/14 14:00:54 namespace sandbox: enabled 2022/09/14 14:00:54 Android sandbox: enabled 2022/09/14 14:00:54 fault injection: enabled 2022/09/14 14:00:54 leak checking: enabled 2022/09/14 14:00:54 net packet injection: enabled 2022/09/14 14:00:54 net device setup: enabled 2022/09/14 14:00:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/14 14:00:54 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/14 14:00:54 USB emulation: enabled 2022/09/14 14:00:54 hci packet injection: enabled 2022/09/14 14:00:54 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220914) 2022/09/14 14:00:54 802.15.4 emulation: enabled 2022/09/14 14:00:54 fetching corpus: 0, signal 0/2000 (executing program) 2022/09/14 14:00:54 fetching corpus: 39, signal 27402/31034 (executing program) 2022/09/14 14:00:55 fetching corpus: 89, signal 45148/50159 (executing program) 2022/09/14 14:00:55 fetching corpus: 139, signal 53866/60263 (executing program) 2022/09/14 14:00:55 fetching corpus: 188, signal 60686/68435 (executing program) 2022/09/14 14:00:55 fetching corpus: 237, signal 69457/78305 (executing program) 2022/09/14 14:00:55 fetching corpus: 286, signal 74705/84747 (executing program) 2022/09/14 14:00:55 fetching corpus: 336, signal 79822/90987 (executing program) 2022/09/14 14:00:55 fetching corpus: 385, signal 83968/96225 (executing program) 2022/09/14 14:00:55 fetching corpus: 435, signal 89222/102462 (executing program) 2022/09/14 14:00:56 fetching corpus: 485, signal 91559/105884 (executing program) 2022/09/14 14:00:56 fetching corpus: 535, signal 99802/114729 (executing program) 2022/09/14 14:00:56 fetching corpus: 585, signal 103506/119287 (executing program) 2022/09/14 14:00:56 fetching corpus: 635, signal 106985/123595 (executing program) 2022/09/14 14:00:56 fetching corpus: 685, signal 111237/128531 (executing program) 2022/09/14 14:00:56 fetching corpus: 735, signal 114951/132914 (executing program) 2022/09/14 14:00:57 fetching corpus: 785, signal 117855/136535 (executing program) 2022/09/14 14:00:57 fetching corpus: 835, signal 120455/139795 (executing program) 2022/09/14 14:00:57 fetching corpus: 885, signal 124868/144602 (executing program) 2022/09/14 14:00:57 fetching corpus: 935, signal 126797/147269 (executing program) 2022/09/14 14:00:57 fetching corpus: 985, signal 128998/150111 (executing program) 2022/09/14 14:00:57 fetching corpus: 1035, signal 132265/153848 (executing program) 2022/09/14 14:00:58 fetching corpus: 1085, signal 133973/156224 (executing program) 2022/09/14 14:00:58 fetching corpus: 1135, signal 136421/159123 (executing program) 2022/09/14 14:00:58 fetching corpus: 1185, signal 138658/161861 (executing program) 2022/09/14 14:00:58 fetching corpus: 1235, signal 141279/164860 (executing program) 2022/09/14 14:00:58 fetching corpus: 1285, signal 142376/166644 (executing program) 2022/09/14 14:00:58 fetching corpus: 1335, signal 143674/168532 (executing program) 2022/09/14 14:00:58 fetching corpus: 1385, signal 145671/170918 (executing program) 2022/09/14 14:00:59 fetching corpus: 1435, signal 147594/173267 (executing program) 2022/09/14 14:00:59 fetching corpus: 1485, signal 149036/175221 (executing program) 2022/09/14 14:00:59 fetching corpus: 1535, signal 150702/177373 (executing program) 2022/09/14 14:00:59 fetching corpus: 1585, signal 152228/179314 (executing program) 2022/09/14 14:00:59 fetching corpus: 1635, signal 153974/181406 (executing program) 2022/09/14 14:00:59 fetching corpus: 1684, signal 155409/183241 (executing program) 2022/09/14 14:00:59 fetching corpus: 1734, signal 156899/185065 (executing program) 2022/09/14 14:01:00 fetching corpus: 1784, signal 157892/186550 (executing program) 2022/09/14 14:01:00 fetching corpus: 1834, signal 159124/188171 (executing program) 2022/09/14 14:01:00 fetching corpus: 1884, signal 160483/190026 (executing program) 2022/09/14 14:01:00 fetching corpus: 1934, signal 162413/192138 (executing program) 2022/09/14 14:01:00 fetching corpus: 1984, signal 163832/193829 (executing program) 2022/09/14 14:01:00 fetching corpus: 2034, signal 164712/195158 (executing program) 2022/09/14 14:01:00 fetching corpus: 2084, signal 165875/196639 (executing program) 2022/09/14 14:01:01 fetching corpus: 2134, signal 168160/198864 (executing program) 2022/09/14 14:01:01 fetching corpus: 2184, signal 170092/200750 (executing program) 2022/09/14 14:01:01 fetching corpus: 2234, signal 171181/202128 (executing program) 2022/09/14 14:01:01 fetching corpus: 2284, signal 172585/203729 (executing program) 2022/09/14 14:01:01 fetching corpus: 2334, signal 174172/205409 (executing program) 2022/09/14 14:01:01 fetching corpus: 2384, signal 175139/206679 (executing program) 2022/09/14 14:01:01 fetching corpus: 2434, signal 176364/208012 (executing program) 2022/09/14 14:01:01 fetching corpus: 2484, signal 177579/209410 (executing program) 2022/09/14 14:01:02 fetching corpus: 2534, signal 178426/210502 (executing program) 2022/09/14 14:01:02 fetching corpus: 2584, signal 179319/211597 (executing program) 2022/09/14 14:01:02 fetching corpus: 2634, signal 181604/213447 (executing program) 2022/09/14 14:01:02 fetching corpus: 2684, signal 182296/214413 (executing program) 2022/09/14 14:01:02 fetching corpus: 2734, signal 183327/215580 (executing program) 2022/09/14 14:01:02 fetching corpus: 2783, signal 184455/216737 (executing program) 2022/09/14 14:01:02 fetching corpus: 2833, signal 185561/217879 (executing program) 2022/09/14 14:01:02 fetching corpus: 2883, signal 186461/218891 (executing program) 2022/09/14 14:01:03 fetching corpus: 2933, signal 187711/220127 (executing program) 2022/09/14 14:01:03 fetching corpus: 2983, signal 188880/221251 (executing program) 2022/09/14 14:01:03 fetching corpus: 3033, signal 189838/222276 (executing program) 2022/09/14 14:01:03 fetching corpus: 3083, signal 190597/223198 (executing program) 2022/09/14 14:01:03 fetching corpus: 3133, signal 192082/224432 (executing program) 2022/09/14 14:01:03 fetching corpus: 3183, signal 192979/225348 (executing program) 2022/09/14 14:01:04 fetching corpus: 3233, signal 193854/226275 (executing program) 2022/09/14 14:01:04 fetching corpus: 3283, signal 194857/227279 (executing program) 2022/09/14 14:01:04 fetching corpus: 3333, signal 196086/228306 (executing program) 2022/09/14 14:01:04 fetching corpus: 3382, signal 197150/229260 (executing program) 2022/09/14 14:01:04 fetching corpus: 3432, signal 197529/229891 (executing program) 2022/09/14 14:01:04 fetching corpus: 3482, signal 198476/230774 (executing program) 2022/09/14 14:01:04 fetching corpus: 3532, signal 199211/231622 (executing program) 2022/09/14 14:01:05 fetching corpus: 3582, signal 201221/232874 (executing program) 2022/09/14 14:01:05 fetching corpus: 3632, signal 202861/234009 (executing program) 2022/09/14 14:01:05 fetching corpus: 3682, signal 203485/234670 (executing program) 2022/09/14 14:01:05 fetching corpus: 3731, signal 204298/235440 (executing program) 2022/09/14 14:01:05 fetching corpus: 3781, signal 204988/236101 (executing program) 2022/09/14 14:01:05 fetching corpus: 3831, signal 205647/236775 (executing program) 2022/09/14 14:01:05 fetching corpus: 3881, signal 206109/237321 (executing program) 2022/09/14 14:01:06 fetching corpus: 3930, signal 207046/237995 (executing program) 2022/09/14 14:01:06 fetching corpus: 3980, signal 207842/238681 (executing program) 2022/09/14 14:01:06 fetching corpus: 4030, signal 208897/239397 (executing program) 2022/09/14 14:01:06 fetching corpus: 4080, signal 209477/239972 (executing program) 2022/09/14 14:01:06 fetching corpus: 4130, signal 210200/240586 (executing program) 2022/09/14 14:01:06 fetching corpus: 4180, signal 210877/241131 (executing program) 2022/09/14 14:01:06 fetching corpus: 4230, signal 211959/241808 (executing program) 2022/09/14 14:01:06 fetching corpus: 4279, signal 212700/242368 (executing program) 2022/09/14 14:01:07 fetching corpus: 4329, signal 213190/242844 (executing program) 2022/09/14 14:01:07 fetching corpus: 4379, signal 214022/243364 (executing program) 2022/09/14 14:01:07 fetching corpus: 4429, signal 214661/243975 (executing program) 2022/09/14 14:01:07 fetching corpus: 4479, signal 215749/244587 (executing program) 2022/09/14 14:01:07 fetching corpus: 4529, signal 216392/245059 (executing program) 2022/09/14 14:01:07 fetching corpus: 4579, signal 217571/245647 (executing program) 2022/09/14 14:01:07 fetching corpus: 4629, signal 218251/246203 (executing program) 2022/09/14 14:01:07 fetching corpus: 4679, signal 218786/246655 (executing program) 2022/09/14 14:01:08 fetching corpus: 4729, signal 219472/247126 (executing program) 2022/09/14 14:01:08 fetching corpus: 4779, signal 220005/247473 (executing program) 2022/09/14 14:01:08 fetching corpus: 4829, signal 220562/247815 (executing program) 2022/09/14 14:01:08 fetching corpus: 4879, signal 221939/248358 (executing program) 2022/09/14 14:01:08 fetching corpus: 4929, signal 222710/248738 (executing program) 2022/09/14 14:01:08 fetching corpus: 4978, signal 223274/249093 (executing program) 2022/09/14 14:01:09 fetching corpus: 5028, signal 224222/249473 (executing program) 2022/09/14 14:01:09 fetching corpus: 5078, signal 224603/249763 (executing program) 2022/09/14 14:01:09 fetching corpus: 5128, signal 225331/250111 (executing program) 2022/09/14 14:01:09 fetching corpus: 5178, signal 225804/250425 (executing program) 2022/09/14 14:01:09 fetching corpus: 5228, signal 226257/250744 (executing program) 2022/09/14 14:01:09 fetching corpus: 5278, signal 226849/251061 (executing program) 2022/09/14 14:01:09 fetching corpus: 5328, signal 227594/251350 (executing program) 2022/09/14 14:01:09 fetching corpus: 5378, signal 228398/251676 (executing program) 2022/09/14 14:01:10 fetching corpus: 5428, signal 228902/251937 (executing program) 2022/09/14 14:01:10 fetching corpus: 5478, signal 229362/252200 (executing program) 2022/09/14 14:01:10 fetching corpus: 5528, signal 230315/252600 (executing program) 2022/09/14 14:01:10 fetching corpus: 5578, signal 230782/252813 (executing program) 2022/09/14 14:01:10 fetching corpus: 5628, signal 231496/253105 (executing program) 2022/09/14 14:01:10 fetching corpus: 5678, signal 231988/253343 (executing program) 2022/09/14 14:01:10 fetching corpus: 5728, signal 232715/253551 (executing program) 2022/09/14 14:01:11 fetching corpus: 5778, signal 234162/253763 (executing program) 2022/09/14 14:01:11 fetching corpus: 5828, signal 234844/253936 (executing program) 2022/09/14 14:01:11 fetching corpus: 5878, signal 235357/253952 (executing program) 2022/09/14 14:01:11 fetching corpus: 5928, signal 235747/253965 (executing program) 2022/09/14 14:01:11 fetching corpus: 5978, signal 236183/253994 (executing program) 2022/09/14 14:01:11 fetching corpus: 6028, signal 236650/254024 (executing program) 2022/09/14 14:01:11 fetching corpus: 6078, signal 237415/254071 (executing program) 2022/09/14 14:01:12 fetching corpus: 6128, signal 237972/254079 (executing program) 2022/09/14 14:01:12 fetching corpus: 6178, signal 238829/254088 (executing program) 2022/09/14 14:01:12 fetching corpus: 6228, signal 239456/254107 (executing program) 2022/09/14 14:01:12 fetching corpus: 6278, signal 239873/254115 (executing program) 2022/09/14 14:01:12 fetching corpus: 6328, signal 240511/254115 (executing program) 2022/09/14 14:01:12 fetching corpus: 6378, signal 241054/254146 (executing program) 2022/09/14 14:01:12 fetching corpus: 6428, signal 241509/254151 (executing program) 2022/09/14 14:01:13 fetching corpus: 6478, signal 241926/254162 (executing program) 2022/09/14 14:01:13 fetching corpus: 6528, signal 242732/254212 (executing program) 2022/09/14 14:01:13 fetching corpus: 6578, signal 243322/254223 (executing program) 2022/09/14 14:01:13 fetching corpus: 6628, signal 244275/254226 (executing program) 2022/09/14 14:01:13 fetching corpus: 6678, signal 244832/254226 (executing program) 2022/09/14 14:01:13 fetching corpus: 6704, signal 245596/254228 (executing program) 2022/09/14 14:01:13 fetching corpus: 6704, signal 245596/254228 (executing program) 2022/09/14 14:01:16 starting 8 fuzzer processes 14:01:16 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) ioctl$CDROMREADAUDIO(r0, 0x530e, &(0x7f0000000180)={@msf, 0x1, 0x0, 0x0}) 14:01:16 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5427, 0x0) [ 80.838571] audit: type=1400 audit(1663164076.934:6): avc: denied { execmem } for pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:01:16 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@random="bd99d58573e9", @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x2c, 0x0, @private2, @local, {[], @echo_request}}}}}, 0x0) 14:01:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x18292}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000480)=""/156, 0x9c}, {&(0x7f00000003c0)=""/41, 0x29}, {&(0x7f0000000540)=""/253, 0xfd}], 0x3, 0x7706170c, 0x4) 14:01:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f00000045c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x9, 0x1, 0x0, [{@remote}, {@loopback}]}]}}}], 0x28}}], 0x1, 0x0) 14:01:16 executing program 5: getresgid(&(0x7f0000004d80), 0xffffffffffffffff, 0x0) 14:01:16 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') pread64(r0, &(0x7f0000000240)=""/33, 0x21, 0xa5d2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x404001, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000480)=""/33) io_setup(0x3, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/devices.allow\x00', 0x2, 0x0) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r2, &(0x7f00000007c0)={&(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000100)="cd", 0x1}, {0x0}, {0x0}, {0x0}, {0x0, 0x4c}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000040)) 14:01:16 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x20, 0x0, 0x0, 0x2}, {0x6}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000480)={0x500, 0x0, 0x8}) [ 82.079889] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.082122] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.083532] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.086788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.088710] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.091095] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.100970] Bluetooth: hci0: HCI_REQ-0x0c1a [ 82.136494] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.141629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.144133] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.147221] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.149541] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.151346] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.152677] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.155097] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.156813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.161457] Bluetooth: hci2: HCI_REQ-0x0c1a [ 82.162558] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.196828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.198945] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.200441] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.202217] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.203953] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.206917] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.208636] Bluetooth: hci3: HCI_REQ-0x0c1a [ 82.212484] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 82.214420] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 82.215752] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.217758] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 82.223282] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 82.227816] Bluetooth: hci4: HCI_REQ-0x0c1a [ 82.229529] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 82.237009] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 82.239141] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 82.245509] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 82.247440] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 82.248719] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 82.253446] Bluetooth: hci5: HCI_REQ-0x0c1a [ 82.271161] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 82.271638] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 82.277105] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 82.278669] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 82.280090] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 82.282835] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 82.287527] Bluetooth: hci6: HCI_REQ-0x0c1a [ 82.297103] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 82.306517] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 82.308137] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 82.323470] Bluetooth: hci7: HCI_REQ-0x0c1a [ 84.159003] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 84.159391] Bluetooth: hci0: command 0x0409 tx timeout [ 84.223045] Bluetooth: hci3: command 0x0409 tx timeout [ 84.224050] Bluetooth: hci2: command 0x0409 tx timeout [ 84.287011] Bluetooth: hci5: command 0x0409 tx timeout [ 84.287923] Bluetooth: hci4: command 0x0409 tx timeout [ 84.351250] Bluetooth: hci7: command 0x0409 tx timeout [ 84.352201] Bluetooth: hci6: command 0x0409 tx timeout [ 86.207004] Bluetooth: hci0: command 0x041b tx timeout [ 86.271070] Bluetooth: hci2: command 0x041b tx timeout [ 86.271996] Bluetooth: hci3: command 0x041b tx timeout [ 86.334971] Bluetooth: hci4: command 0x041b tx timeout [ 86.335803] Bluetooth: hci5: command 0x041b tx timeout [ 86.399186] Bluetooth: hci6: command 0x041b tx timeout [ 86.400323] Bluetooth: hci7: command 0x041b tx timeout [ 88.254913] Bluetooth: hci0: command 0x040f tx timeout [ 88.318914] Bluetooth: hci3: command 0x040f tx timeout [ 88.319444] Bluetooth: hci2: command 0x040f tx timeout [ 88.382911] Bluetooth: hci5: command 0x040f tx timeout [ 88.383415] Bluetooth: hci4: command 0x040f tx timeout [ 88.447077] Bluetooth: hci7: command 0x040f tx timeout [ 88.447714] Bluetooth: hci6: command 0x040f tx timeout [ 89.471818] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 90.302987] Bluetooth: hci0: command 0x0419 tx timeout [ 90.367135] Bluetooth: hci2: command 0x0419 tx timeout [ 90.368144] Bluetooth: hci3: command 0x0419 tx timeout [ 90.431039] Bluetooth: hci4: command 0x0419 tx timeout [ 90.432574] Bluetooth: hci5: command 0x0419 tx timeout [ 90.495142] Bluetooth: hci6: command 0x0419 tx timeout [ 90.496181] Bluetooth: hci7: command 0x0419 tx timeout [ 92.372139] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.373551] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.374796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.381076] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.386062] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.387514] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.392748] Bluetooth: hci1: HCI_REQ-0x0c1a [ 94.398998] Bluetooth: hci1: command 0x0409 tx timeout [ 96.446928] Bluetooth: hci1: command 0x041b tx timeout [ 98.494909] Bluetooth: hci1: command 0x040f tx timeout [ 100.543187] Bluetooth: hci1: command 0x0419 tx timeout 14:02:13 executing program 5: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000000)) getgroups(0x0, 0x0) setresuid(0x0, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x14, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}, 0x14}], 0x1}, 0x0) [ 137.880312] audit: type=1400 audit(1663164133.976:7): avc: denied { open } for pid=3815 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 137.881921] audit: type=1400 audit(1663164133.976:8): avc: denied { kernel } for pid=3815 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 137.915718] ------------[ cut here ]------------ [ 137.915753] [ 137.915759] ====================================================== [ 137.915765] WARNING: possible circular locking dependency detected [ 137.915772] 6.0.0-rc5-next-20220914 #1 Not tainted [ 137.915784] ------------------------------------------------------ [ 137.915790] syz-executor.5/3818 is trying to acquire lock: [ 137.915801] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 137.915869] [ 137.915869] but task is already holding lock: [ 137.915874] ffff88800e0f1820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 137.915924] [ 137.915924] which lock already depends on the new lock. [ 137.915924] [ 137.915930] [ 137.915930] the existing dependency chain (in reverse order) is: [ 137.915936] [ 137.915936] -> #3 (&ctx->lock){....}-{2:2}: [ 137.915962] _raw_spin_lock+0x2a/0x40 [ 137.915993] __perf_event_task_sched_out+0x53b/0x18d0 [ 137.916016] __schedule+0xedd/0x2470 [ 137.916035] schedule+0xda/0x1b0 [ 137.916053] exit_to_user_mode_prepare+0x114/0x1a0 [ 137.916090] syscall_exit_to_user_mode+0x19/0x40 [ 137.916123] do_syscall_64+0x48/0x90 [ 137.916148] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 137.916181] [ 137.916181] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 137.916207] _raw_spin_lock_nested+0x30/0x40 [ 137.916235] raw_spin_rq_lock_nested+0x1e/0x30 [ 137.916258] task_fork_fair+0x63/0x4d0 [ 137.916289] sched_cgroup_fork+0x3d0/0x540 [ 137.916316] copy_process+0x4183/0x6e20 [ 137.916334] kernel_clone+0xe7/0x890 [ 137.916352] user_mode_thread+0xad/0xf0 [ 137.916370] rest_init+0x24/0x250 [ 137.916402] arch_call_rest_init+0xf/0x14 [ 137.916422] start_kernel+0x4c1/0x4e6 [ 137.916440] secondary_startup_64_no_verify+0xe0/0xeb [ 137.916466] [ 137.916466] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 137.916492] _raw_spin_lock_irqsave+0x39/0x60 [ 137.916520] try_to_wake_up+0xab/0x1920 [ 137.916545] up+0x75/0xb0 [ 137.916566] __up_console_sem+0x6e/0x80 [ 137.916596] console_unlock+0x46a/0x590 [ 137.916626] vprintk_emit+0x1bd/0x560 [ 137.916657] vprintk+0x84/0xa0 [ 137.916687] _printk+0xba/0xf1 [ 137.916720] kauditd_hold_skb.cold+0x3f/0x4e [ 137.916747] kauditd_send_queue+0x233/0x290 [ 137.916774] kauditd_thread+0x5da/0x9a0 [ 137.916800] kthread+0x2ed/0x3a0 [ 137.916827] ret_from_fork+0x22/0x30 [ 137.916851] [ 137.916851] -> #0 ((console_sem).lock){....}-{2:2}: [ 137.916876] __lock_acquire+0x2a02/0x5e70 [ 137.916907] lock_acquire+0x1a2/0x530 [ 137.916937] _raw_spin_lock_irqsave+0x39/0x60 [ 137.916965] down_trylock+0xe/0x70 [ 137.916988] __down_trylock_console_sem+0x3b/0xd0 [ 137.917019] vprintk_emit+0x16b/0x560 [ 137.917052] vprintk+0x84/0xa0 [ 137.917085] _printk+0xba/0xf1 [ 137.917116] report_bug.cold+0x72/0xab [ 137.917140] handle_bug+0x3c/0x70 [ 137.917164] exc_invalid_op+0x14/0x50 [ 137.917188] asm_exc_invalid_op+0x16/0x20 [ 137.917219] group_sched_out.part.0+0x2c7/0x460 [ 137.917239] ctx_sched_out+0x8f1/0xc10 [ 137.917257] __perf_event_task_sched_out+0x6d0/0x18d0 [ 137.917279] __schedule+0xedd/0x2470 [ 137.917297] schedule+0xda/0x1b0 [ 137.917315] exit_to_user_mode_prepare+0x114/0x1a0 [ 137.917351] syscall_exit_to_user_mode+0x19/0x40 [ 137.917383] do_syscall_64+0x48/0x90 [ 137.917408] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 137.917440] [ 137.917440] other info that might help us debug this: [ 137.917440] [ 137.917445] Chain exists of: [ 137.917445] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 137.917445] [ 137.917473] Possible unsafe locking scenario: [ 137.917473] [ 137.917477] CPU0 CPU1 [ 137.917481] ---- ---- [ 137.917486] lock(&ctx->lock); [ 137.917496] lock(&rq->__lock); [ 137.917508] lock(&ctx->lock); [ 137.917520] lock((console_sem).lock); [ 137.917530] [ 137.917530] *** DEADLOCK *** [ 137.917530] [ 137.917534] 2 locks held by syz-executor.5/3818: [ 137.917546] #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 137.917594] #1: ffff88800e0f1820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 137.917646] [ 137.917646] stack backtrace: [ 137.917650] CPU: 0 PID: 3818 Comm: syz-executor.5 Not tainted 6.0.0-rc5-next-20220914 #1 [ 137.917674] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 137.917688] Call Trace: [ 137.917694] [ 137.917701] dump_stack_lvl+0x8b/0xb3 [ 137.917729] check_noncircular+0x263/0x2e0 [ 137.917761] ? format_decode+0x26c/0xb50 [ 137.917790] ? print_circular_bug+0x450/0x450 [ 137.917823] ? enable_ptr_key_workfn+0x20/0x20 [ 137.917852] ? format_decode+0x26c/0xb50 [ 137.917883] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 137.917918] __lock_acquire+0x2a02/0x5e70 [ 137.917963] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 137.917998] ? __mutex_add_waiter+0x120/0x120 [ 137.918035] lock_acquire+0x1a2/0x530 [ 137.918067] ? down_trylock+0xe/0x70 [ 137.918096] ? rcu_read_unlock+0x40/0x40 [ 137.918139] ? vprintk+0x84/0xa0 [ 137.918175] _raw_spin_lock_irqsave+0x39/0x60 [ 137.918205] ? down_trylock+0xe/0x70 [ 137.918231] down_trylock+0xe/0x70 [ 137.918256] ? vprintk+0x84/0xa0 [ 137.918289] __down_trylock_console_sem+0x3b/0xd0 [ 137.918323] vprintk_emit+0x16b/0x560 [ 137.918361] vprintk+0x84/0xa0 [ 137.918396] _printk+0xba/0xf1 [ 137.918430] ? record_print_text.cold+0x16/0x16 [ 137.918475] ? report_bug.cold+0x66/0xab [ 137.918503] ? group_sched_out.part.0+0x2c7/0x460 [ 137.918524] report_bug.cold+0x72/0xab [ 137.918554] handle_bug+0x3c/0x70 [ 137.918581] exc_invalid_op+0x14/0x50 [ 137.918609] asm_exc_invalid_op+0x16/0x20 [ 137.918642] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 137.918666] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 137.918696] RSP: 0018:ffff888035797c48 EFLAGS: 00010006 [ 137.918714] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 137.918728] RDX: ffff88804160d040 RSI: ffffffff81566027 RDI: 0000000000000005 [ 137.918742] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 137.918756] R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff88800e0f1800 [ 137.918770] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 137.918793] ? group_sched_out.part.0+0x2c7/0x460 [ 137.918818] ? group_sched_out.part.0+0x2c7/0x460 [ 137.918843] ctx_sched_out+0x8f1/0xc10 [ 137.918868] __perf_event_task_sched_out+0x6d0/0x18d0 [ 137.918898] ? lock_is_held_type+0xd7/0x130 [ 137.918934] ? __perf_cgroup_move+0x160/0x160 [ 137.918956] ? set_next_entity+0x304/0x550 [ 137.918990] ? update_curr+0x267/0x740 [ 137.919026] ? lock_is_held_type+0xd7/0x130 [ 137.919062] __schedule+0xedd/0x2470 [ 137.919089] ? io_schedule_timeout+0x150/0x150 [ 137.919114] ? __x64_sys_futex_time32+0x480/0x480 [ 137.919140] schedule+0xda/0x1b0 [ 137.919162] exit_to_user_mode_prepare+0x114/0x1a0 [ 137.919201] syscall_exit_to_user_mode+0x19/0x40 [ 137.919236] do_syscall_64+0x48/0x90 [ 137.919263] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 137.919296] RIP: 0033:0x7fac76e6fb19 [ 137.919312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 137.919332] RSP: 002b:00007fac743e5218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 137.919352] RAX: 0000000000000001 RBX: 00007fac76f82f68 RCX: 00007fac76e6fb19 [ 137.919366] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fac76f82f6c [ 137.919379] RBP: 00007fac76f82f60 R08: 000000000000000e R09: 0000000000000000 [ 137.919393] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fac76f82f6c [ 137.919406] R13: 00007ffe0e08394f R14: 00007fac743e5300 R15: 0000000000022000 [ 137.919433] [ 138.018899] WARNING: CPU: 0 PID: 3818 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 138.020138] Modules linked in: [ 138.020573] CPU: 0 PID: 3818 Comm: syz-executor.5 Not tainted 6.0.0-rc5-next-20220914 #1 [ 138.021659] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 138.023180] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 138.023918] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 138.026371] RSP: 0018:ffff888035797c48 EFLAGS: 00010006 [ 138.027108] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 138.028065] RDX: ffff88804160d040 RSI: ffffffff81566027 RDI: 0000000000000005 [ 138.029030] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 138.029991] R10: 0000000000000000 R11: ffffffff865ac01b R12: ffff88800e0f1800 [ 138.030966] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 138.031918] FS: 00007fac743e5700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 138.033001] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.033786] CR2: 00007f74d36b16f4 CR3: 000000001b528000 CR4: 0000000000350ef0 [ 138.034769] Call Trace: [ 138.035126] [ 138.035449] ctx_sched_out+0x8f1/0xc10 [ 138.035993] __perf_event_task_sched_out+0x6d0/0x18d0 [ 138.036710] ? lock_is_held_type+0xd7/0x130 [ 138.037318] ? __perf_cgroup_move+0x160/0x160 [ 138.037937] ? set_next_entity+0x304/0x550 [ 138.038526] ? update_curr+0x267/0x740 [ 138.039100] ? lock_is_held_type+0xd7/0x130 [ 138.039714] __schedule+0xedd/0x2470 [ 138.040238] ? io_schedule_timeout+0x150/0x150 [ 138.040882] ? __x64_sys_futex_time32+0x480/0x480 [ 138.041559] schedule+0xda/0x1b0 [ 138.042037] exit_to_user_mode_prepare+0x114/0x1a0 [ 138.042736] syscall_exit_to_user_mode+0x19/0x40 [ 138.043408] do_syscall_64+0x48/0x90 [ 138.043934] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 138.044654] RIP: 0033:0x7fac76e6fb19 [ 138.045167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 138.047622] RSP: 002b:00007fac743e5218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 138.048643] RAX: 0000000000000001 RBX: 00007fac76f82f68 RCX: 00007fac76e6fb19 [ 138.049605] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fac76f82f6c [ 138.050569] RBP: 00007fac76f82f60 R08: 000000000000000e R09: 0000000000000000 [ 138.051546] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fac76f82f6c [ 138.052520] R13: 00007ffe0e08394f R14: 00007fac743e5300 R15: 0000000000022000 [ 138.053498] [ 138.053829] irq event stamp: 796 [ 138.054294] hardirqs last enabled at (795): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 138.055587] hardirqs last disabled at (796): [] __schedule+0x1225/0x2470 [ 138.056705] softirqs last enabled at (634): [] __irq_exit_rcu+0x11b/0x180 [ 138.057864] softirqs last disabled at (629): [] __irq_exit_rcu+0x11b/0x180 [ 138.059037] ---[ end trace 0000000000000000 ]--- [ 138.203864] hrtimer: interrupt took 19838 ns [ 138.277125] EXT4-fs warning (device sda): verify_group_input:150: Cannot add at group 1280 (only 16 groups) [ 138.518179] ieee80211 phy2: Selected rate control algorithm 'minstrel_ht' [ 138.634581] ieee80211 phy3: Selected rate control algorithm 'minstrel_ht' [ 138.697343] syz-executor.5 (3818) used greatest stack depth: 24216 bytes left [ 138.863778] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 138.879366] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 138.894608] syz-executor.3 (3850) used greatest stack depth: 22808 bytes left 14:02:17 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) ioctl$CDROMREADAUDIO(r0, 0x530e, &(0x7f0000000180)={@msf, 0x1, 0x0, 0x0}) 14:02:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f00000045c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x9, 0x1, 0x0, [{@remote}, {@loopback}]}]}}}], 0x28}}], 0x1, 0x0) 14:02:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x18292}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000480)=""/156, 0x9c}, {&(0x7f00000003c0)=""/41, 0x29}, {&(0x7f0000000540)=""/253, 0xfd}], 0x3, 0x7706170c, 0x4) 14:02:17 executing program 5: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000000)) getgroups(0x0, 0x0) setresuid(0x0, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x14, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}, 0x14}], 0x1}, 0x0) 14:02:17 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x20, 0x0, 0x0, 0x2}, {0x6}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000480)={0x500, 0x0, 0x8}) 14:02:17 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') pread64(r0, &(0x7f0000000240)=""/33, 0x21, 0xa5d2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x404001, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000480)=""/33) io_setup(0x3, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/devices.allow\x00', 0x2, 0x0) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r2, &(0x7f00000007c0)={&(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000100)="cd", 0x1}, {0x0}, {0x0}, {0x0}, {0x0, 0x4c}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000040)) 14:02:17 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x20, 0x0, 0x0, 0x2}, {0x6}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000480)={0x500, 0x0, 0x8}) 14:02:17 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@random="bd99d58573e9", @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x2c, 0x0, @private2, @local, {[], @echo_request}}}}}, 0x0) [ 141.781425] EXT4-fs warning (device sda): verify_group_input:150: Cannot add at group 1280 (only 16 groups) [ 141.791811] ieee80211 phy4: Selected rate control algorithm 'minstrel_ht' [ 141.829482] EXT4-fs warning (device sda): verify_group_input:150: Cannot add at group 1280 (only 16 groups) 14:02:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f00000045c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x9, 0x1, 0x0, [{@remote}, {@loopback}]}]}}}], 0x28}}], 0x1, 0x0) 14:02:17 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) ioctl$CDROMREADAUDIO(r0, 0x530e, &(0x7f0000000180)={@msf, 0x1, 0x0, 0x0}) 14:02:17 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x20, 0x0, 0x0, 0x2}, {0x6}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000480)={0x500, 0x0, 0x8}) 14:02:18 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@random="bd99d58573e9", @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x2c, 0x0, @private2, @local, {[], @echo_request}}}}}, 0x0) [ 141.997074] EXT4-fs warning (device sda): verify_group_input:150: Cannot add at group 1280 (only 16 groups) [ 142.202865] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 14:02:18 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x20, 0x0, 0x0, 0x2}, {0x6}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000480)={0x500, 0x0, 0x8}) 14:02:18 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) ioctl$CDROMREADAUDIO(r0, 0x530e, &(0x7f0000000180)={@msf, 0x1, 0x0, 0x0}) 14:02:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f00000045c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x9, 0x1, 0x0, [{@remote}, {@loopback}]}]}}}], 0x28}}], 0x1, 0x0) 14:02:18 executing program 5: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000000)) getgroups(0x0, 0x0) setresuid(0x0, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x14, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}, 0x14}], 0x1}, 0x0) 14:02:18 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x20, 0x0, 0x0, 0x2}, {0x6}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000480)={0x500, 0x0, 0x8}) 14:02:18 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@random="bd99d58573e9", @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x2c, 0x0, @private2, @local, {[], @echo_request}}}}}, 0x0) 14:02:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x18292}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000480)=""/156, 0x9c}, {&(0x7f00000003c0)=""/41, 0x29}, {&(0x7f0000000540)=""/253, 0xfd}], 0x3, 0x7706170c, 0x4) 14:02:18 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') pread64(r0, &(0x7f0000000240)=""/33, 0x21, 0xa5d2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x404001, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000480)=""/33) io_setup(0x3, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/devices.allow\x00', 0x2, 0x0) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r2, &(0x7f00000007c0)={&(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000100)="cd", 0x1}, {0x0}, {0x0}, {0x0}, {0x0, 0x4c}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000040)) [ 142.535417] EXT4-fs warning (device sda): verify_group_input:150: Cannot add at group 1280 (only 16 groups) [ 142.566420] ieee80211 phy5: Selected rate control algorithm 'minstrel_ht' [ 142.582432] EXT4-fs warning (device sda): verify_group_input:150: Cannot add at group 1280 (only 16 groups) 14:02:18 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x20, 0x0, 0x0, 0x2}, {0x6}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000480)={0x500, 0x0, 0x8}) [ 142.813602] EXT4-fs warning (device sda): verify_group_input:150: Cannot add at group 1280 (only 16 groups) [ 142.904536] ieee80211 phy6: Selected rate control algorithm 'minstrel_ht' [ 142.946001] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 14:02:18 executing program 6: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') pread64(r0, &(0x7f0000000240)=""/33, 0x21, 0xa5d2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x404001, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000480)=""/33) io_setup(0x3, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/devices.allow\x00', 0x2, 0x0) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r2, &(0x7f00000007c0)={&(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000100)="cd", 0x1}, {0x0}, {0x0}, {0x0}, {0x0, 0x4c}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000040)) 14:02:18 executing program 5: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000000)) getgroups(0x0, 0x0) setresuid(0x0, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x14, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}, 0x14}], 0x1}, 0x0) 14:02:19 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8932, &(0x7f0000000000)={'sit0\x00'}) 14:02:19 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000005, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000100)) 14:02:19 executing program 2: set_robust_list(0x0, 0x0) 14:02:19 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000280), 0x4) 14:02:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) 14:02:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x18292}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000480)=""/156, 0x9c}, {&(0x7f00000003c0)=""/41, 0x29}, {&(0x7f0000000540)=""/253, 0xfd}], 0x3, 0x7706170c, 0x4) [ 143.163822] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 14:02:19 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8932, &(0x7f0000000000)={'sit0\x00'}) 14:02:19 executing program 2: set_robust_list(0x0, 0x0) 14:02:19 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') pread64(r0, &(0x7f0000000300)=""/102375, 0x18fe7, 0xd0c) 14:02:19 executing program 7: clone3(&(0x7f00000045c0)={0x30000500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000004540)=[0x0], 0x1}, 0x58) 14:02:19 executing program 1: clone3(&(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14:02:19 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_out(0xffffffffffffffff, 0x5460, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000180)={@multicast2, @local}, 0xc) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000080)) r3 = socket(0x11, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000001c0)={r4, 0x1, 0x6, @remote}, 0x10) bind$packet(r3, &(0x7f0000005280)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) close(r0) 14:02:19 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8932, &(0x7f0000000000)={'sit0\x00'}) 14:02:19 executing program 2: set_robust_list(0x0, 0x0) 14:02:19 executing program 6: capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x17e}) 14:02:19 executing program 3: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000c, 0x1032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fremovexattr(r0, &(0x7f00000001c0)=@random={'trusted.', '}\x00'}) [ 143.380109] capability: warning: `syz-executor.6' uses deprecated v2 capabilities in a way that may be insecure 14:02:19 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_normal', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002480)='fd/3\x00') sendfile(r1, r0, 0x0, 0x3) 14:02:19 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') pread64(r0, &(0x7f0000000300)=""/102375, 0x18fe7, 0xd0c) 14:02:19 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e00010000000000000000000c0000000300000000000080"], 0x1c}], 0x1}, 0x0) 14:02:19 executing program 2: set_robust_list(0x0, 0x0) 14:02:19 executing program 3: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000c, 0x1032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fremovexattr(r0, &(0x7f00000001c0)=@random={'trusted.', '}\x00'}) 14:02:19 executing program 6: capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x17e}) 14:02:19 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8932, &(0x7f0000000000)={'sit0\x00'}) 14:02:19 executing program 6: capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x17e}) 14:02:19 executing program 3: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000c, 0x1032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fremovexattr(r0, &(0x7f00000001c0)=@random={'trusted.', '}\x00'}) 14:02:19 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') pread64(r0, &(0x7f0000000300)=""/102375, 0x18fe7, 0xd0c) 14:02:19 executing program 0: syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) stat(&(0x7f0000000680)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) listxattr(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 14:02:19 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_out(0xffffffffffffffff, 0x5460, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000180)={@multicast2, @local}, 0xc) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000080)) r3 = socket(0x11, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000001c0)={r4, 0x1, 0x6, @remote}, 0x10) bind$packet(r3, &(0x7f0000005280)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) close(r0) 14:02:19 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000340)={0x0, 0x7}, &(0x7f0000000380)) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000300)) getpgrp(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@local, @in=@empty}}, {{@in=@broadcast}, 0x0, @in=@empty}}, 0x0) 14:02:19 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) statfs(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=""/4096) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 14:02:19 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') pread64(r0, &(0x7f0000000300)=""/102375, 0x18fe7, 0xd0c) 14:02:19 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_out(0xffffffffffffffff, 0x5460, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000180)={@multicast2, @local}, 0xc) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000080)) r3 = socket(0x11, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000001c0)={r4, 0x1, 0x6, @remote}, 0x10) bind$packet(r3, &(0x7f0000005280)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) close(r0) 14:02:19 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 14:02:19 executing program 6: capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x17e}) 14:02:19 executing program 3: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000c, 0x1032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fremovexattr(r0, &(0x7f00000001c0)=@random={'trusted.', '}\x00'}) [ 143.671480] loop7: detected capacity change from 0 to 40 14:02:19 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000340)={0x0, 0x7}, &(0x7f0000000380)) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000300)) getpgrp(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@local, @in=@empty}}, {{@in=@broadcast}, 0x0, @in=@empty}}, 0x0) 14:02:19 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_out(0xffffffffffffffff, 0x5460, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000180)={@multicast2, @local}, 0xc) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000080)) r3 = socket(0x11, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000001c0)={r4, 0x1, 0x6, @remote}, 0x10) bind$packet(r3, &(0x7f0000005280)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) close(r0) 14:02:19 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000340)={0x0, 0x7}, &(0x7f0000000380)) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000300)) getpgrp(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@local, @in=@empty}}, {{@in=@broadcast}, 0x0, @in=@empty}}, 0x0) 14:02:19 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xeaec828ca8886d3b) readv(r0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/166, 0xa6}, {&(0x7f0000000300)=""/112, 0x70}, {&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000380)=""/28, 0x1c}], 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000140)) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syncfs(r1) [ 144.415568] syz-executor.7: attempt to access beyond end of device [ 144.415568] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 144.418707] Buffer I/O error on dev loop7, logical block 10, lost async page write 14:02:20 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_out(0xffffffffffffffff, 0x5460, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000180)={@multicast2, @local}, 0xc) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000080)) r3 = socket(0x11, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000001c0)={r4, 0x1, 0x6, @remote}, 0x10) bind$packet(r3, &(0x7f0000005280)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) close(r0) 14:02:20 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0x2}], 0x1, &(0x7f0000000080)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}], 0x18}, 0x0) 14:02:20 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_out(0xffffffffffffffff, 0x5460, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000180)={@multicast2, @local}, 0xc) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000080)) r3 = socket(0x11, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000001c0)={r4, 0x1, 0x6, @remote}, 0x10) bind$packet(r3, &(0x7f0000005280)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) close(r0) 14:02:20 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000340)={0x0, 0x7}, &(0x7f0000000380)) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000300)) getpgrp(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@local, @in=@empty}}, {{@in=@broadcast}, 0x0, @in=@empty}}, 0x0) 14:02:20 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xeaec828ca8886d3b) readv(r0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/166, 0xa6}, {&(0x7f0000000300)=""/112, 0x70}, {&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000380)=""/28, 0x1c}], 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000140)) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syncfs(r1) 14:02:20 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000340)={0x0, 0x7}, &(0x7f0000000380)) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000300)) getpgrp(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@local, @in=@empty}}, {{@in=@broadcast}, 0x0, @in=@empty}}, 0x0) 14:02:20 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 14:02:20 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) statfs(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=""/4096) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 14:02:20 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xeaec828ca8886d3b) readv(r0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/166, 0xa6}, {&(0x7f0000000300)=""/112, 0x70}, {&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000380)=""/28, 0x1c}], 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000140)) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syncfs(r1) 14:02:20 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 14:02:20 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000340)={0x0, 0x7}, &(0x7f0000000380)) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000300)) getpgrp(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@local, @in=@empty}}, {{@in=@broadcast}, 0x0, @in=@empty}}, 0x0) 14:02:20 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x5603, &(0x7f0000000040)) [ 144.572224] loop7: detected capacity change from 0 to 40 14:02:20 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_out(0xffffffffffffffff, 0x5460, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @dev}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000180)={@multicast2, @local}, 0xc) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000080)) r3 = socket(0x11, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000001c0)={r4, 0x1, 0x6, @remote}, 0x10) bind$packet(r3, &(0x7f0000005280)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) close(r0) [ 144.698366] syz-executor.7: attempt to access beyond end of device [ 144.698366] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 144.699458] Buffer I/O error on dev loop7, logical block 10, lost async page write [ 144.988945] loop7: detected capacity change from 0 to 40 14:02:21 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 14:02:21 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='ramfs\x00', 0x11, 0x0) umount2(&(0x7f0000017540)='./file1\x00', 0x0) 14:02:21 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xeaec828ca8886d3b) readv(r0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/166, 0xa6}, {&(0x7f0000000300)=""/112, 0x70}, {&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000380)=""/28, 0x1c}], 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000140)) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syncfs(r1) 14:02:21 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') pread64(r0, &(0x7f0000009780)=""/112, 0x70, 0x2) 14:02:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x5603, &(0x7f0000000040)) 14:02:21 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000340)={0x0, 0x7}, &(0x7f0000000380)) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000300)) getpgrp(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@local, @in=@empty}}, {{@in=@broadcast}, 0x0, @in=@empty}}, 0x0) 14:02:21 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xeaec828ca8886d3b) readv(r0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/166, 0xa6}, {&(0x7f0000000300)=""/112, 0x70}, {&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000380)=""/28, 0x1c}], 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000140)) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syncfs(r1) 14:02:21 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) statfs(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=""/4096) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) [ 145.048639] syz-executor.7: attempt to access beyond end of device [ 145.048639] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 145.049900] Buffer I/O error on dev loop7, logical block 10, lost async page write 14:02:21 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='ramfs\x00', 0x11, 0x0) umount2(&(0x7f0000017540)='./file1\x00', 0x0) 14:02:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x5603, &(0x7f0000000040)) [ 145.146684] loop7: detected capacity change from 0 to 40 14:02:21 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_adjtime(0x0, &(0x7f0000000000)) 14:02:21 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) statfs(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=""/4096) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffdef) 14:02:21 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xeaec828ca8886d3b) readv(r0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/166, 0xa6}, {&(0x7f0000000300)=""/112, 0x70}, {&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000380)=""/28, 0x1c}], 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000140)) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syncfs(r1) 14:02:21 executing program 3: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)="18419cc68448de3ae8f97ea6a46d823d4f19cecbf569a58b79851d91f3da031fecf4dfebf4ac3b13988a048b4e35761cb05a5d5b28e1ca6ceebae02cbbf7e894098749d5f99cb226f14f00b6034bfb02a7a5af409f531820bd319b9d7c3405022b550d32ad368fdbbddb8ed631d1dde9a4ed", 0xff10, r1) keyctl$chown(0x4, r2, 0xee00, 0x0) 14:02:21 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x882400, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1502b30a05aece6188827c76b9cd0d82f8863958367d8e76c4976d0d810f3b8e21d2181806360044b1797fb4365443"], 0x6) mount_setattr(r1, &(0x7f0000000200)='./file0\x00', 0x100, &(0x7f0000000240)={0x4, 0xf0, 0xa0000}, 0x20) chroot(&(0x7f0000000040)='./file0\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000840)={0x0, 0x0, "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", "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"}) umount2(&(0x7f0000000800)='./file0\x00', 0x5) getuid() umount2(&(0x7f0000000140)='./file0\x00', 0x0) 14:02:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x5603, &(0x7f0000000040)) 14:02:21 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x1, 0x0) 14:02:21 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='ramfs\x00', 0x11, 0x0) umount2(&(0x7f0000017540)='./file1\x00', 0x0) 14:02:21 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xeaec828ca8886d3b) readv(r0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/166, 0xa6}, {&(0x7f0000000300)=""/112, 0x70}, {&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000380)=""/28, 0x1c}], 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000140)) syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syncfs(r1) 14:02:21 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x14, 0x0, 0x0) 14:02:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) lseek(r0, 0xfffffffffffffffe, 0x3) 14:02:21 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x882400, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1502b30a05aece6188827c76b9cd0d82f8863958367d8e76c4976d0d810f3b8e21d2181806360044b1797fb4365443"], 0x6) mount_setattr(r1, &(0x7f0000000200)='./file0\x00', 0x100, &(0x7f0000000240)={0x4, 0xf0, 0xa0000}, 0x20) chroot(&(0x7f0000000040)='./file0\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000840)={0x0, 0x0, "9afbece0701bbf09271c63d195ebb9f6420bda2685a85e5c3a99ab137d67c417c7c102595ee701f6a29ac52ab7d7546d39cff07b8afcc714f96bd6229c2e2664ea770241c29c377d42c32b6b4decc02f160b96db4cd28b34f7a0503777010193a234590a62fb4afe8c6be21f60adcddc9c45f122eed755c7de1547bf8d514619bdfded2fe1d76172fb161b744ba49ed226eca9965663b2a50f9b04ff09badc3108c4a3071023cef6d2abf651d5a03b70b63087106927a51c9a6ceb52e9954a40f89c09746a37062634c4136597da36a43d383f30640facd4cff1b503214207210d788c51b4ce75a93789cc9d5ac8d6c3bc1da232ab75ee9a33fcbf9d9421973b", "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"}) umount2(&(0x7f0000000800)='./file0\x00', 0x5) getuid() umount2(&(0x7f0000000140)='./file0\x00', 0x0) 14:02:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) set_mempolicy(0x1, 0x0, 0x0) pwritev(r0, &(0x7f0000001640)=[{&(0x7f00000012c0)="a7", 0x1}], 0x1, 0x0, 0x0) 14:02:21 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='ramfs\x00', 0x11, 0x0) umount2(&(0x7f0000017540)='./file1\x00', 0x0) [ 145.404086] syz-executor.7: attempt to access beyond end of device [ 145.404086] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 145.405347] Buffer I/O error on dev loop7, logical block 10, lost async page write 14:02:21 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x36, 0x2d, 0x36, 0x3a, 0x37, 0x33, 0x2f, 0x37]}}}}]}) 14:02:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) r5 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r5) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0, @ANYBLOB="000428bd7000fddbdf25150000003000018008000100", @ANYBLOB="d15a977ba2c41d6b58a104e629b57519fc385063445d702f9490a768c19f1c4e2d0c02ef28ba8e", @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002007665f468315f766c616e0000000000000800030002000000752f07bf770215138dbce018000180140002006e6574706369300000000000000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="2000018008000100", @ANYRESOCT, @ANYBLOB="1400020073797a6b616c6c6572310000000000000c000180080003000300000038000180080003000200000008000300020000001400020076657468305f746f5f6272696467650008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000004c0001801400020073697430000000000000000000000000080003000200000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="14000200000000000000000000000000000000000800030003000000"], 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x80) 14:02:21 executing program 5: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREMOVE(r0, &(0x7f0000000080)={0x7}, 0x7) fcntl$setpipe(r0, 0x407, 0x0) write$P9_RWALK(r0, &(0x7f0000000140)={0x9}, 0x9) [ 145.473396] tmpfs: Bad value for 'mpol' [ 145.475462] tmpfs: Bad value for 'mpol' 14:02:21 executing program 0: setitimer(0x0, &(0x7f0000000100)={{}, {0x77359400}}, 0x0) getitimer(0x0, &(0x7f0000000340)) 14:02:21 executing program 3: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9) 14:02:21 executing program 0: setitimer(0x0, &(0x7f0000000100)={{}, {0x77359400}}, 0x0) getitimer(0x0, &(0x7f0000000340)) 14:02:21 executing program 5: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREMOVE(r0, &(0x7f0000000080)={0x7}, 0x7) fcntl$setpipe(r0, 0x407, 0x0) write$P9_RWALK(r0, &(0x7f0000000140)={0x9}, 0x9) 14:02:21 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x882400, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1502b30a05aece6188827c76b9cd0d82f8863958367d8e76c4976d0d810f3b8e21d2181806360044b1797fb4365443"], 0x6) mount_setattr(r1, &(0x7f0000000200)='./file0\x00', 0x100, &(0x7f0000000240)={0x4, 0xf0, 0xa0000}, 0x20) chroot(&(0x7f0000000040)='./file0\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000840)={0x0, 0x0, "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", "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"}) umount2(&(0x7f0000000800)='./file0\x00', 0x5) getuid() umount2(&(0x7f0000000140)='./file0\x00', 0x0) 14:02:21 executing program 6: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREMOVE(r0, &(0x7f0000000080)={0x7}, 0x7) fcntl$setpipe(r0, 0x407, 0x0) write$P9_RWALK(r0, &(0x7f0000000140)={0x9}, 0x9) 14:02:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) r5 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r5) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0, @ANYBLOB="000428bd7000fddbdf25150000003000018008000100", @ANYBLOB="d15a977ba2c41d6b58a104e629b57519fc385063445d702f9490a768c19f1c4e2d0c02ef28ba8e", @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002007665f468315f766c616e0000000000000800030002000000752f07bf770215138dbce018000180140002006e6574706369300000000000000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="2000018008000100", @ANYRESOCT, @ANYBLOB="1400020073797a6b616c6c6572310000000000000c000180080003000300000038000180080003000200000008000300020000001400020076657468305f746f5f6272696467650008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000004c0001801400020073697430000000000000000000000000080003000200000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="14000200000000000000000000000000000000000800030003000000"], 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x80) 14:02:21 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000140)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='/dev/hpet\x00', &(0x7f00000001c0)='{*\x00', 0x0) 14:02:21 executing program 4: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f00000001c0)={0x0, 0x18, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0]}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x7ab681, 0x24) close_range(r0, r1, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000140)={0x0, 0x0}) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x217}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000fee000/0x12000)=nil, 0x0, 0x0) 14:02:21 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000140)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='/dev/hpet\x00', &(0x7f00000001c0)='{*\x00', 0x0) 14:02:21 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x882400, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1502b30a05aece6188827c76b9cd0d82f8863958367d8e76c4976d0d810f3b8e21d2181806360044b1797fb4365443"], 0x6) mount_setattr(r1, &(0x7f0000000200)='./file0\x00', 0x100, &(0x7f0000000240)={0x4, 0xf0, 0xa0000}, 0x20) chroot(&(0x7f0000000040)='./file0\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000840)={0x0, 0x0, "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", "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"}) umount2(&(0x7f0000000800)='./file0\x00', 0x5) getuid() umount2(&(0x7f0000000140)='./file0\x00', 0x0) 14:02:21 executing program 6: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREMOVE(r0, &(0x7f0000000080)={0x7}, 0x7) fcntl$setpipe(r0, 0x407, 0x0) write$P9_RWALK(r0, &(0x7f0000000140)={0x9}, 0x9) 14:02:21 executing program 0: setitimer(0x0, &(0x7f0000000100)={{}, {0x77359400}}, 0x0) getitimer(0x0, &(0x7f0000000340)) 14:02:21 executing program 5: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREMOVE(r0, &(0x7f0000000080)={0x7}, 0x7) fcntl$setpipe(r0, 0x407, 0x0) write$P9_RWALK(r0, &(0x7f0000000140)={0x9}, 0x9) 14:02:22 executing program 3: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9) 14:02:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000140)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='/dev/hpet\x00', &(0x7f00000001c0)='{*\x00', 0x0) 14:02:22 executing program 6: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREMOVE(r0, &(0x7f0000000080)={0x7}, 0x7) fcntl$setpipe(r0, 0x407, 0x0) write$P9_RWALK(r0, &(0x7f0000000140)={0x9}, 0x9) 14:02:22 executing program 0: setitimer(0x0, &(0x7f0000000100)={{}, {0x77359400}}, 0x0) getitimer(0x0, &(0x7f0000000340)) 14:02:22 executing program 5: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREMOVE(r0, &(0x7f0000000080)={0x7}, 0x7) fcntl$setpipe(r0, 0x407, 0x0) write$P9_RWALK(r0, &(0x7f0000000140)={0x9}, 0x9) 14:02:22 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000140)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='/dev/hpet\x00', &(0x7f00000001c0)='{*\x00', 0x0) 14:02:22 executing program 4: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f00000001c0)={0x0, 0x18, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0]}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x7ab681, 0x24) close_range(r0, r1, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000140)={0x0, 0x0}) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x217}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000fee000/0x12000)=nil, 0x0, 0x0) 14:02:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) r5 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r5) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0, @ANYBLOB="000428bd7000fddbdf25150000003000018008000100", @ANYBLOB="d15a977ba2c41d6b58a104e629b57519fc385063445d702f9490a768c19f1c4e2d0c02ef28ba8e", @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002007665f468315f766c616e0000000000000800030002000000752f07bf770215138dbce018000180140002006e6574706369300000000000000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="2000018008000100", @ANYRESOCT, @ANYBLOB="1400020073797a6b616c6c6572310000000000000c000180080003000300000038000180080003000200000008000300020000001400020076657468305f746f5f6272696467650008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000004c0001801400020073697430000000000000000000000000080003000200000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="14000200000000000000000000000000000000000800030003000000"], 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x80) 14:02:22 executing program 4: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f00000001c0)={0x0, 0x18, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0]}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x7ab681, 0x24) close_range(r0, r1, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000140)={0x0, 0x0}) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x217}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000fee000/0x12000)=nil, 0x0, 0x0) 14:02:22 executing program 5: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9) 14:02:22 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000140)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='/dev/hpet\x00', &(0x7f00000001c0)='{*\x00', 0x0) 14:02:22 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000140)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='/dev/hpet\x00', &(0x7f00000001c0)='{*\x00', 0x0) 14:02:22 executing program 3: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9) 14:02:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1a}], 0x1, 0x7fffffc, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x100000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @local}, &(0x7f00000003c0)=0xc) r5 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r5) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0, @ANYBLOB="000428bd7000fddbdf25150000003000018008000100", @ANYBLOB="d15a977ba2c41d6b58a104e629b57519fc385063445d702f9490a768c19f1c4e2d0c02ef28ba8e", @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002007665f468315f766c616e0000000000000800030002000000752f07bf770215138dbce018000180140002006e6574706369300000000000000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="2000018008000100", @ANYRESOCT, @ANYBLOB="1400020073797a6b616c6c6572310000000000000c000180080003000300000038000180080003000200000008000300020000001400020076657468305f746f5f6272696467650008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000004c0001801400020073697430000000000000000000000000080003000200000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="14000200000000000000000000000000000000000800030003000000"], 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x80) 14:02:22 executing program 6: shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000003c0)=""/200) 14:02:22 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) preadv(r0, &(0x7f0000001480)=[{&(0x7f00000000c0)=""/172, 0xac}], 0x1, 0x0, 0x0) 14:02:22 executing program 5: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9) 14:02:22 executing program 4: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f00000001c0)={0x0, 0x18, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0]}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x7ab681, 0x24) close_range(r0, r1, 0x0) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000140)={0x0, 0x0}) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x217}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000fee000/0x12000)=nil, 0x0, 0x0) 14:02:22 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) preadv(r0, &(0x7f0000001480)=[{&(0x7f00000000c0)=""/172, 0xac}], 0x1, 0x0, 0x0) 14:02:22 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x1c}}, 0x0) 14:02:22 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) preadv(r0, &(0x7f0000001480)=[{&(0x7f00000000c0)=""/172, 0xac}], 0x1, 0x0, 0x0) 14:02:22 executing program 5: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9) 14:02:22 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) preadv(r0, &(0x7f0000001480)=[{&(0x7f00000000c0)=""/172, 0xac}], 0x1, 0x0, 0x0) 14:02:22 executing program 3: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9) 14:02:22 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000140)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='/dev/hpet\x00', &(0x7f00000001c0)='{*\x00', 0x0) 14:02:22 executing program 5: syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "f2e2a6", 0x0, 0x2c, 0x0, @private2, @remote, [@dstopts]}}}}}}}, 0x0) 14:02:23 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x1c}}, 0x0) 14:02:23 executing program 0: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x3, 0x0, 0xee01}}) msgsnd(r0, &(0x7f0000000100)={0x3}, 0x8, 0x0) msgctl$IPC_RMID(r0, 0x0) 14:02:23 executing program 5: syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "f2e2a6", 0x0, 0x2c, 0x0, @private2, @remote, [@dstopts]}}}}}}}, 0x0) 14:02:23 executing program 1: syz_io_uring_setup(0x73d4, &(0x7f00000000c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 14:02:23 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getitimer(0x0, &(0x7f0000000480)) 14:02:23 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0x3, 0x42, 0x3f, 0x5d, 0x0, 0x9, 0x80000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x3, 0xfc0000000}, 0x12198, 0x1000, 0x0, 0x0, 0x8, 0x2, 0x9, 0x0, 0x9, 0x0, 0x5}, r1, 0x2, 0xffffffffffffffff, 0x3) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x242880, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=fscache,version=9p2000.u,privport,nodevmap,loose,\x00osixacl,access=', @ANYRESDEC, @ANYBLOB=',access=any,cache=none,subj_role=,smackfsroot=,fsname=\\,smackfshat=,(^\\)\a^,hash,smackfsfloor=^#\",func=FIRMWARE_CHECK,\x00']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000001c0)) lchown(&(0x7f0000000140)='./file0\x00', 0xee01, 0xee01) 14:02:23 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x435c, 0x4) sendmmsg$inet(r0, &(0x7f0000002a00)=[{{&(0x7f0000000000)={0x2, 0x4e21}, 0x10, 0x0}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x1, 0x4) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012301, 0x0) 14:02:23 executing program 2: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, &(0x7f0000000200)='\x00\x00\x00\x00', 0x4, r0) 14:02:23 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f VM DIAGNOSIS: 14:02:14 Registers: info registers vcpu 0 RAX=0000000000000072 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b24f1 RDI=ffffffff87641b60 RBP=ffffffff87641b20 RSP=ffff888035797698 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000072 R11=0000000000000001 R12=0000000000000072 R13=ffffffff87641b20 R14=0000000000000010 R15=ffffffff822b24e0 RIP=ffffffff822b2549 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fac743e5700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f74d36b16f4 CR3=000000001b528000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007fac76f567c0 00007fac76f567c8 YMM02=0000000000000000 0000000000000000 00007fac76f567e0 00007fac76f567c0 YMM03=0000000000000000 0000000000000000 00007fac76f567c8 00007fac76f567c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=1ffff1100619df5d RBX=0000000000000004 RCX=0000000000000800 RDX=0000000000000000 RSI=0000000000000009 RDI=ffff888030cefae8 RBP=dffffc0000000000 RSP=ffff888030cefa40 R8 =0000000000000000 R9 =ffffffff85b02e97 R10=0000000000000000 R11=0000000000000001 R12=0000000000000009 R13=0000000000000000 R14=0000000000000800 R15=ffff888030cefac8 RIP=ffffffff8135b516 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fcbed1258c0 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fcbec7e9344 CR3=000000001ad80000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 00ff00000000ff00 000000ff000000ff YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 ffffffffffff0000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000006561 6124242f6867632f YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 732f636f72702f00 6b63616d7300632e YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000002000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000